...
|
...
|
@@ -674,7 +674,7 @@ static void pdf_parseobj(struct pdf_struct *pdf, struct pdf_obj *obj)
|
674
|
674
|
escapes = 1;
|
675
|
675
|
continue;
|
676
|
676
|
}
|
677
|
|
- if (*q == ' ' || *q == '\r' || *q == '\n')
|
|
677
|
+ if (*q == ' ' || *q == '\r' || *q == '\n' || *q == '/')
|
678
|
678
|
break;
|
679
|
679
|
pdfname[i] = *q;
|
680
|
680
|
}
|
...
|
...
|
@@ -815,7 +815,7 @@ int cli_pdf(const char *dir, cli_ctx *ctx, off_t offset)
|
815
|
815
|
|
816
|
816
|
if (pdf.flags) {
|
817
|
817
|
cli_dbgmsg("cli_pdf: flags 0x%02x\n", pdf.flags);
|
818
|
|
- if (pdf.flags & ESCAPED_COMMON_PDFNAME) {
|
|
818
|
+ if (pdf.flags & (1 << ESCAPED_COMMON_PDFNAME)) {
|
819
|
819
|
/* for example /Fl#61te#44#65#63#6f#64#65 instead of /FlateDecode */
|
820
|
820
|
*ctx->virname = "Heuristics.PDF.ObfuscatedNameObject";
|
821
|
821
|
rc = CL_VIRUS;
|