Browse code

Fix heuristics.

Török Edvin authored on 2010/05/11 17:34:28
Showing 1 changed files
... ...
@@ -674,7 +674,7 @@ static void pdf_parseobj(struct pdf_struct *pdf, struct pdf_obj *obj)
674 674
 		escapes = 1;
675 675
 		continue;
676 676
 	    }
677
-	    if (*q == ' ' || *q == '\r' || *q == '\n')
677
+	    if (*q == ' ' || *q == '\r' || *q == '\n' || *q == '/')
678 678
 		break;
679 679
 	    pdfname[i] = *q;
680 680
 	}
... ...
@@ -815,7 +815,7 @@ int cli_pdf(const char *dir, cli_ctx *ctx, off_t offset)
815 815
 
816 816
     if (pdf.flags) {
817 817
 	cli_dbgmsg("cli_pdf: flags 0x%02x\n", pdf.flags);
818
-	if (pdf.flags & ESCAPED_COMMON_PDFNAME) {
818
+	if (pdf.flags & (1 << ESCAPED_COMMON_PDFNAME)) {
819 819
 	    /* for example /Fl#61te#44#65#63#6f#64#65 instead of /FlateDecode */
820 820
 	    *ctx->virname = "Heuristics.PDF.ObfuscatedNameObject";
821 821
 	    rc = CL_VIRUS;