March 31, 2015
View b7999b8

YARA: capture offsets in matcher and use for processing YARA condition 'at' clauses.

Steven Morgan authored on 2015/03/31 06:12:01
February 25, 2015
View 8ea3468

moved sigopts handler to separate function reason: sigopts weren't handled for yara sigs

Kevin Lin authored on 2015/02/25 03:37:09
February 21, 2015
View dc70379

converted sigopts from char string to uint8_t

Kevin Lin authored on 2015/02/21 08:13:28
View 6b725bb

added '(W)' special character to match fullword (non-alnum)

Kevin Lin authored on 2015/02/21 05:40:36
February 11, 2015
View 3e265c4

added direct memory freeing of cli_ac_list cli_ac_pattlist renamed to cli_ac_list

Kevin Lin authored on 2015/02/11 02:23:51
February 10, 2015
View 51ca644

implemented second nocase AC matcher using full enumerations

Kevin Lin authored on 2015/02/10 12:28:39
View 23d7c6e

removed nocase changes to ac tree operation

Kevin Lin authored on 2015/02/10 07:22:45
February 7, 2015
View 7fc5eab

finished support for AC trie nocase variant added check to prevent adding nocase signatures to case-sensitive AC tries

Kevin Lin authored on 2015/02/07 04:13:20
February 6, 2015
View a02acd5

[WIP] added nocase support to clamav ac algorithm

Kevin Lin authored on 2015/02/06 13:52:18
November 11, 2014
View d3c4f5e

Merge remote-tracking branch 'origin/features/yara' into swebb/clamyara

Shawn Webb authored on 2014/11/11 02:09:12
September 24, 2014
View ea3d1e7

made lsig_sub_matched available to libclamav comment clean-up

Kevin Lin authored on 2014/09/24 02:31:47
March 12, 2014
View d209249

Revert "Support wildcard alternate strings of identical length in Aho-Corasick pattern matcher."

Steven Morgan authored on 2014/03/12 09:15:53
December 3, 2013
View 1c2b8bd

Support wildcard alternate strings of identical length in Aho-Corasick pattern matcher.

Steven Morgan authored on 2013/12/03 05:55:24
October 19, 2012
View 6ad45a2

add initial allscan/allmatch mode to libclamav, clamd, clamdscan, and clamscan with unit tests

Steve Morgan authored on 2012/10/19 06:12:58
December 15, 2010
View 0d71068

libclamav: pass array with initial matches to bytecode (bb#2397)

Tomasz Kojm authored on 2010/12/15 00:08:43