October 10, 2018
View f61e92d

Changing numerous scan options' names, primarily those of heuristic signatature alert options. Original options (command line and clamd) will remain as deprecated & undocumented for a couple releases. Added 2 extra scan options to allow users to differentiate between alerting on encrypted archives vs encrypted documents (bb11911).

Micah Snyder (micasnyd) authored on 2018/10/10 22:02:28
August 15, 2018
View 89d5207

Added new pdf object stream parsing capability.

Micah Snyder (micasnyd) authored on 2018/08/15 06:00:31
July 21, 2018
View d7979d4

Restructured scan options flags from a single bitflag field to a structure containing multiple bitflag fields. This also required adding a new function to the bytecode API to get scan options a la carte, and modifying the existing function to hand back scan options in the old/deprecated uint32_t bitflag format. Re-generated bytecode iface header files.

Micah Snyder authored on 2018/07/21 11:28:48
June 13, 2018
View f842e96

Replacing strntol with strntoul to ensure proper (un)signedness when parsing numbers from PDFs.

Micah Snyder authored on 2018/06/13 09:47:21
June 9, 2018
View 3955b36

Adjustment to pdf find_obj logic to allow the parser to skip, continue when it finds objects that cannot be parsed and may not in fact be objects at all.

Micah Snyder authored on 2018/06/09 22:42:57
View 2176b2c

Uncommenting len adjustment that is clearly correct, needed.

Micah Snyder authored on 2018/06/09 03:17:04
View a79be75

bb12134: Adding missing len decrement and adding additional len check.

Micah Snyder (micasnyd) authored on 2018/06/09 02:13:13
June 3, 2018
View bf6e777

bb12133: Wrapping cli_strntol to provide easy error detection. Applying cli_strntol_wrap with error checking. Adding logic to identify when a parsing error is in fact a new revision of the PDF.

Micah Snyder authored on 2018/06/03 09:58:35
June 2, 2018
View 53cbdee

bb12133: Implementing cli_strntol based on gnu gcc's strtol implementation with modifications to limit string buffer length for non-null terminated strings. Using cli_strntol in pdf.c for added safety.

Micah Snyder authored on 2018/06/02 03:23:25
March 9, 2018
View 69b4a22

bb12006: correction to dictionary length checks when parsing pdf objects.

Micah Snyder authored on 2018/03/09 02:21:16
View 53c957a

bb12004: adding check for min pdf size needed to check pdf version

Micah Snyder authored on 2018/03/09 02:17:11
February 2, 2018
View 4a2576f

Removing hard-coded heuristic signature that flags when a PDF has an abnormally high number of filters. Removing due to false positive and because in its current form it cannot be disabled or modified without recompiling ClamAV.

Micah Snyder authored on 2018/02/02 05:16:12
December 22, 2017
View c9a070c

More cleanup re: variables possibly used before initialized.

Micah Snyder authored on 2017/12/22 04:39:01
December 20, 2017
View a5e2b97

bb11981 - fix for some unit tests.

Steven Morgan authored on 2017/12/20 04:47:06
October 31, 2017
View c8ba4ae

11942 - fixing heap overflow in handle_pdfname. Patch submitted by Suleman Ali.

Mickey Sola authored on 2017/10/31 06:33:19