April 30, 2019
View 757ffbb

fix failure of large file detection on 32-bit platforms

rickwang authored on 2019/04/30 22:07:44
March 3, 2019
View 155eaaa

bb12284 - Fix to prevent path traversal when using cli_genfname() to generate filenames that may retain path and filename information. Changed scanrar so that it will no longer retain path information for extracted files.

Micah Snyder authored on 2019/03/03 03:05:17
January 31, 2019
View 5e3b1c6

bb12262 - Fix to address potential use-after-free bug in scanner code relating to the filenames for nested files.

Micah Snyder authored on 2019/01/31 05:01:59
January 26, 2019
View 52cddcb

Updating and cleaning up copyright notices.

Micah Snyder authored on 2019/01/26 00:15:50
January 23, 2019
View 50f178d

fuzz - 12166 - Fix for 4-byte out of bounds write wherein the an invalid struct pointer member variable is set to zero. The fix adds bounds checking to the Uniq storage 'add' function as well as error code checks. Included a lot of new inline documentation.

Micah Snyder authored on 2019/01/23 04:05:05
January 8, 2019
View 7ba310e

PE parsing code improvements, db loading bug fixes

Andrew authored on 2019/01/08 14:09:08
December 4, 2018
View 72fd33c

clang-format'd using new .clang-format rules.

Micah Snyder authored on 2018/12/04 02:40:13
November 15, 2018
View 479a9a2

Fixes for issues identified by coverity.

Micah Snyder authored on 2018/11/15 06:58:30
October 20, 2018
View cca445e

Correction to enabling dev-performance bug introduced with the scan options change, and enablig dev-performance on Mac.

Micah Snyder (micasnyd) authored on 2018/10/20 12:43:19
October 10, 2018
View f61e92d

Changing numerous scan options' names, primarily those of heuristic signatature alert options. Original options (command line and clamd) will remain as deprecated & undocumented for a couple releases. Added 2 extra scan options to allow users to differentiate between alerting on encrypted archives vs encrypted documents (bb11911).

Micah Snyder (micasnyd) authored on 2018/10/10 22:02:28
September 25, 2018
View 9739293

Removing unRAR SFX Check from scanners.c. Flawed feature was skipping scans of files in RAR archives that had the same CRC in the RAR file entry header as a previously scanned entry. Archives CRC's cannot be trusted. Removing the SFX Check eliminated false negatives in regression testing.

Micah Snyder authored on 2018/09/25 04:01:22
July 31, 2018
View d39cb65

Updating libclamunrar from legacy C implementation to modern unrar 5.6.5. API changes and supporting changes included to pass the filepath of the scanned file into libclamav through the cli_ctx structure, required by the unrar library to open archives. The filename argument may be optional for the scandesc scanning variant, but libclamav will make a best effort to identify the filename from the file descriptor if it was not provided. In addition, included the ability to prefix temp file and directory names with file basenames.

Micah Snyder authored on 2018/07/31 09:19:28
July 21, 2018
View d7979d4

Restructured scan options flags from a single bitflag field to a structure containing multiple bitflag fields. This also required adding a new function to the bytecode API to get scan options a la carte, and modifying the existing function to hand back scan options in the old/deprecated uint32_t bitflag format. Re-generated bytecode iface header files.

Micah Snyder authored on 2018/07/21 11:28:48
August 24, 2017
View 7269188

bb11896 -- increasing size of max filter for pdf filter heuristic. Still have work to be done to investigate whitelisting issue. This commit additionally fixes a compile error when building with json-c and fixes a couple of minor warnings.

Micah Snyder authored on 2017/08/24 04:08:47
August 16, 2017
View 4cd97da

eliminating warnings, mostly with regards to signed vs unsigned comparisons, some of which could have been functional bugs if negative values were used (for offsets, etc). cleaned up a couple of macros and cleaned up some ifdefs.

Micah Snyder authored on 2017/08/16 05:50:01