2014-09-05 10:36:54 -04:00
|
|
|
.TH CLAMBC "1" "September 2014" "ClamAV @VERSION@" "Clam AntiVirus"
|
2011-05-06 14:34:31 +03:00
|
|
|
.SH NAME
|
2014-09-05 10:36:54 -04:00
|
|
|
clambc \- Bytecode Analysis and Testing Tool
|
2011-05-06 14:34:31 +03:00
|
|
|
.SH SYNOPSIS
|
|
|
|
.PP
|
|
|
|
clambc <file> [function] [param1 ...]
|
|
|
|
.SH DESCRIPTION
|
2020-07-06 13:03:35 -07:00
|
|
|
Bytecode signatures are a platform independent executable plugin format that
|
|
|
|
extend ClamAV's malware detection capabilities. This tool is provided for
|
|
|
|
signature authors and ClamAV developers to test bytecode signatures and bytecode
|
|
|
|
runtime performance. **Caution**: You should NEVER run bytecode signatures from
|
|
|
|
untrusted sources. Doing so may result in arbitrary code execution.
|
|
|
|
.SH "OPTIONS"
|
2011-05-06 14:34:31 +03:00
|
|
|
.TP
|
|
|
|
\fB\-\-help\fR \fB\-h\fR
|
2020-07-06 13:03:35 -07:00
|
|
|
Show help.
|
2011-05-06 14:34:31 +03:00
|
|
|
.TP
|
|
|
|
\fB\-\-version\fR \fB\-V\fR
|
|
|
|
Show version
|
|
|
|
.TP
|
2014-09-22 17:12:34 -04:00
|
|
|
\fB\-\-debug\fR
|
2020-07-06 13:03:35 -07:00
|
|
|
Show debug.
|
2014-09-22 17:12:34 -04:00
|
|
|
.TP
|
|
|
|
\fB\-\-force\-interpreter\fR \fB\-f\fR
|
2020-07-06 13:03:35 -07:00
|
|
|
Force using the interpreter instead of the JIT.
|
2014-09-22 17:12:34 -04:00
|
|
|
.TP
|
|
|
|
\fB\-\-trust\-bytecode\fR \fB\-t\fR
|
2020-07-06 13:03:35 -07:00
|
|
|
Trust loaded bytecode (default yes).
|
2014-09-22 17:12:34 -04:00
|
|
|
.TP
|
2011-05-06 14:34:31 +03:00
|
|
|
\fB\-\-info\fR \fB\-i\fR
|
2020-07-06 13:03:35 -07:00
|
|
|
Print information about bytecode.
|
2011-05-06 14:34:31 +03:00
|
|
|
.TP
|
|
|
|
\fB\-\-printsrc\fR \fB\-p\fR
|
2020-07-06 13:03:35 -07:00
|
|
|
Print bytecode source.
|
2011-05-06 14:34:31 +03:00
|
|
|
.TP
|
2014-09-05 10:36:54 -04:00
|
|
|
\fB\-\-printbcir\fR \fB\-c\fR
|
2020-07-06 13:03:35 -07:00
|
|
|
Print IR of bytecode signature.
|
2014-09-05 10:36:54 -04:00
|
|
|
.TP
|
2014-09-22 17:12:34 -04:00
|
|
|
\fB\-\-input\fR \fB\-r\fR
|
2020-07-06 13:03:35 -07:00
|
|
|
Input file to run the bytecode on.
|
2014-09-22 17:12:34 -04:00
|
|
|
.TP
|
2014-10-02 16:49:32 -04:00
|
|
|
\fB\-\-trace\fR <level> \fB\-T\fR
|
2020-07-06 13:03:35 -07:00
|
|
|
Set bytecode trace level 0..7 (default 7).
|
2011-05-06 14:34:31 +03:00
|
|
|
.TP
|
|
|
|
\fB\-\-no\-trace\-showsource\fR
|
2020-07-06 13:03:35 -07:00
|
|
|
Don't show source line during tracing.
|
2011-05-06 14:34:31 +03:00
|
|
|
.TP
|
2015-02-19 12:47:20 -05:00
|
|
|
\fB\-\-statistics=bytecode\fR
|
2020-07-06 13:03:35 -07:00
|
|
|
Collect and print bytecode execution statistics.
|
2014-09-22 17:12:34 -04:00
|
|
|
.TP
|
2011-05-06 14:34:31 +03:00
|
|
|
file
|
2020-07-06 13:03:35 -07:00
|
|
|
File to test.
|
2011-05-06 14:34:31 +03:00
|
|
|
.SH "CREDITS"
|
|
|
|
Please check the full documentation for credits.
|
2019-05-09 17:35:06 -04:00
|
|
|
.SH "AUTHOR"
|
2014-09-05 10:36:54 -04:00
|
|
|
.LP
|
2019-05-09 17:35:06 -04:00
|
|
|
Tomasz Kojm <tkojm@clamav.net>, Kevin Lin <klin@sourcefire.com>
|
|
|
|
.SH "SEE ALSO"
|
2014-09-05 10:36:54 -04:00
|
|
|
.LP
|
2019-05-09 17:35:06 -04:00
|
|
|
clamscan(1), sigtool(1)
|