February 8, 2019
View 80fd907

Removing problematic call to convert file descriptors to filepaths. Added filename and tempfile names to scandesc calls in clamd. Added a general scan option to treat the scan engine as unprivileged, meaning that the scan engine will not have read access to the file. Added check to drop a temp file for RAR's where the we don't have read access to the filepath provided (i.e. unprivileged is set, or access() check fails).

Micah Snyder authored on 2019/02/08 05:03:43
January 26, 2019
View c442ca9

Updating and cleaning up copyright notices in 0.101 branch.

Micah Snyder authored on 2019/01/26 00:15:50
January 23, 2019
View 808cab3

fuzz - 12166 - Fix for 4-byte out of bounds write wherein the an invalid struct pointer member variable is set to zero. The fix adds bounds checking to the Uniq storage 'add' function as well as error code checks. Included a lot of new inline documentation.

Micah Snyder authored on 2019/01/23 04:05:05
October 20, 2018
View cca445e

Correction to enabling dev-performance bug introduced with the scan options change, and enablig dev-performance on Mac.

Micah Snyder (micasnyd) authored on 2018/10/20 12:43:19
October 10, 2018
View f61e92d

Changing numerous scan options' names, primarily those of heuristic signatature alert options. Original options (command line and clamd) will remain as deprecated & undocumented for a couple releases. Added 2 extra scan options to allow users to differentiate between alerting on encrypted archives vs encrypted documents (bb11911).

Micah Snyder (micasnyd) authored on 2018/10/10 22:02:28
September 25, 2018
View 9739293

Removing unRAR SFX Check from scanners.c. Flawed feature was skipping scans of files in RAR archives that had the same CRC in the RAR file entry header as a previously scanned entry. Archives CRC's cannot be trusted. Removing the SFX Check eliminated false negatives in regression testing.

Micah Snyder authored on 2018/09/25 04:01:22
July 31, 2018
View d39cb65

Updating libclamunrar from legacy C implementation to modern unrar 5.6.5. API changes and supporting changes included to pass the filepath of the scanned file into libclamav through the cli_ctx structure, required by the unrar library to open archives. The filename argument may be optional for the scandesc scanning variant, but libclamav will make a best effort to identify the filename from the file descriptor if it was not provided. In addition, included the ability to prefix temp file and directory names with file basenames.

Micah Snyder authored on 2018/07/31 09:19:28
July 21, 2018
View d7979d4

Restructured scan options flags from a single bitflag field to a structure containing multiple bitflag fields. This also required adding a new function to the bytecode API to get scan options a la carte, and modifying the existing function to hand back scan options in the old/deprecated uint32_t bitflag format. Re-generated bytecode iface header files.

Micah Snyder authored on 2018/07/21 11:28:48
August 24, 2017
View 7269188

bb11896 -- increasing size of max filter for pdf filter heuristic. Still have work to be done to investigate whitelisting issue. This commit additionally fixes a compile error when building with json-c and fixes a couple of minor warnings.

Micah Snyder authored on 2017/08/24 04:08:47
August 16, 2017
View 4cd97da

eliminating warnings, mostly with regards to signed vs unsigned comparisons, some of which could have been functional bugs if negative values were used (for offsets, etc). cleaned up a couple of macros and cleaned up some ifdefs.

Micah Snyder authored on 2017/08/16 05:50:01
August 11, 2017
View dd2ed14

adding a few minor changes to eliminate warnings, the most interesting of which was a missing function prototype for cache_get_MD5.

Micah Snyder authored on 2017/08/11 04:40:52
August 10, 2017
View 14e2247

updating the copyright for a number of tiles.

Micah Snyder authored on 2017/08/10 03:28:47
August 9, 2017
View 7b1f1aa

fixed minor warnings regarding type conversions.

Micah Snyder authored on 2017/08/09 06:38:17
June 20, 2017
View 4ae32e4

bb11625 - adding heuristic check for XZ dictionary size evasion

Mickey Sola authored on 2017/06/20 04:41:17
June 8, 2017
View cbff50b

scanscript - moving temp file fmap messaging to debug stream

Mickey Sola authored on 2017/06/08 04:11:45