March 6, 2019
View e010ed3

Clean up of PDF object finding logic. Changes include recording object sizes as objects are found, identifying object streams in the object parsing section instead of the PDF parsing section, and limiting of stream and other object parsing to the size of the object instead of the size of the PDF. It is also easier to read and includes more inline documentation.

Micah Snyder authored on 2019/03/06 11:15:41
January 26, 2019
View c442ca9

Updating and cleaning up copyright notices in 0.101 branch.

Micah Snyder authored on 2019/01/26 00:15:50
January 23, 2019
View c1e7159

fuzz - 12181 - Fixed 1-byte buffer over-read in PDF parser.

Micah Snyder authored on 2019/01/23 08:04:53
View 8ad8d01

fuzz - 12168 - Fix for 1 byte out of bounds read in PDF parser. Fix includes a check to ensure that it is safe to index -1 from the start of an object a well as additional checks to invalidate some negative integer values.

Micah Snyder authored on 2019/01/23 04:15:46
View 8965a5a

fuzz - 12149 - Fix for out of bounds read in PDF object stream parsing code.

Micah Snyder authored on 2019/01/23 03:53:29
View d5e25bf

fuzz - 12131, 12132, 12205 - Speed up PDF parse speed for truncated (or otherwise malformed) PDFs.

Micah Snyder authored on 2019/01/23 03:20:56
October 26, 2018
View 9280b4e

Fix for 3 pdf parsing bugs introduced with the addition of object stream parsing, identified in regression testing.

Micah Snyder (micasnyd) authored on 2018/10/26 05:06:15
October 10, 2018
View f61e92d

Changing numerous scan options' names, primarily those of heuristic signatature alert options. Original options (command line and clamd) will remain as deprecated & undocumented for a couple releases. Added 2 extra scan options to allow users to differentiate between alerting on encrypted archives vs encrypted documents (bb11911).

Micah Snyder (micasnyd) authored on 2018/10/10 22:02:28
October 2, 2018
View d77b8ae

Fixes to a handful of bugs identified during regression testing of PDF and UnRAR changes.

Micah Snyder authored on 2018/10/02 08:46:23
August 15, 2018
View 89d5207

Added new pdf object stream parsing capability.

Micah Snyder (micasnyd) authored on 2018/08/15 06:00:31
July 31, 2018
View d39cb65

Updating libclamunrar from legacy C implementation to modern unrar 5.6.5. API changes and supporting changes included to pass the filepath of the scanned file into libclamav through the cli_ctx structure, required by the unrar library to open archives. The filename argument may be optional for the scandesc scanning variant, but libclamav will make a best effort to identify the filename from the file descriptor if it was not provided. In addition, included the ability to prefix temp file and directory names with file basenames.

Micah Snyder authored on 2018/07/31 09:19:28
July 21, 2018
View d7979d4

Restructured scan options flags from a single bitflag field to a structure containing multiple bitflag fields. This also required adding a new function to the bytecode API to get scan options a la carte, and modifying the existing function to hand back scan options in the old/deprecated uint32_t bitflag format. Re-generated bytecode iface header files.

Micah Snyder authored on 2018/07/21 11:28:48
June 13, 2018
View f842e96

Replacing strntol with strntoul to ensure proper (un)signedness when parsing numbers from PDFs.

Micah Snyder authored on 2018/06/13 09:47:21
June 9, 2018
View 3955b36

Adjustment to pdf find_obj logic to allow the parser to skip, continue when it finds objects that cannot be parsed and may not in fact be objects at all.

Micah Snyder authored on 2018/06/09 22:42:57
View 2176b2c

Uncommenting len adjustment that is clearly correct, needed.

Micah Snyder authored on 2018/06/09 03:17:04