Commit graph

287 commits

Author SHA1 Message Date
Shawn Webb
f901b0ad82 Support hex strings 2014-10-21 13:49:59 -04:00
Shawn Webb
3cdfd031e0 Initialize nstrings 2014-10-20 18:54:12 -04:00
Shawn Webb
a2bfd1a0ee More whitespace cleanup 2014-10-20 16:47:44 -04:00
Shawn Webb
32957e2f4f Whitespace cleanup 2014-10-20 16:24:39 -04:00
Shawn Webb
f89185f4be Initialize the roots before trying to load the generated ldb sig 2014-10-20 09:58:13 -04:00
Shawn Webb
ade8279c88 Generate a very basic LDB entry from the strings loaded from a yara rule 2014-10-16 19:24:02 -04:00
Steven Morgan
6e767879e0 YARA work in progress: add parser skeleton, add string and rule queuing. 2014-10-14 19:18:46 -04:00
Steven Morgan
9bc534ca4e Fix build on windows (yara currently excluded). 2014-09-24 18:34:39 -04:00
Steven Morgan
186d22d187 include calling YARA rule parser during ClamAV database load. 2014-09-23 19:23:06 -04:00
Shawn Webb
cd94be7a52 Silence a bunch of compiler warnings in libclamav 2014-07-10 18:11:49 -04:00
Shawn Webb
60d8d2c352 Move all the crypto API to clamav.h 2014-07-01 19:38:01 -04:00
Shawn Webb
ad8ddf986a Let the database loading logic handle whether an IOC was loaded via an official CVD. 2014-03-24 16:25:47 -04:00
Steven Morgan
53506979b1 fix missing libxml and some windows related issues in OpenIOC 2014-02-28 19:03:25 -05:00
Steven Morgan
2abe7362ef Support for OpenIOC md5, sha1, sha256 hashes. 2014-02-28 15:19:00 -05:00
Shawn Webb
da6e06dd68 Provide further abstractions to the OpenSSL integration work 2014-02-28 12:12:30 -05:00
Shawn Webb
f077c6174f Fix some race conditions. Fix some memory leaks. 2014-02-13 13:05:50 -05:00
Shawn Webb
b842e8bf75 Migrate ClamAV's crypto routines over to OpenSSL. 2014-02-12 17:55:38 -05:00
Shawn Webb
a1cbd793f3 Fix all memory leaks introduce by OpenSSL backport. 2014-02-12 17:42:48 -05:00
Shawn Webb
7fb5036fb2 Make Valgrind happy. Rely less on EVP_MD_CTX_create. 2014-02-08 01:42:41 -05:00
Shawn Webb
b2e7c931d0 Use OpenSSL for hashing. 2014-02-08 00:31:12 -05:00
David Raynor
1f19b71350 libclamav: tweak to cl_engine_free 2014-02-07 12:12:39 -05:00
David Raynor
3a65b26b39 readdb: add comments with field layouts for LDB and FTM sigs 2014-02-05 16:38:21 -05:00
Shawn Webb
e6bcbd5add Fix Valgrind. Fix bug with clamd reloading database, forcing a stats submission. 2014-01-28 10:48:17 -05:00
Shawn Webb
f2571e344b First initial commit of the stats gathering feature
Conflicts:
	libclamav/Makefile.am
	libclamav/Makefile.in
	libclamav/others.c
	libclamav/others.h
	unit_tests/Makefile.in
2014-01-28 10:25:36 -05:00
David Raynor
dbfbe0f1c6 bb #9072: clamscan message separator fix 2013-10-11 16:49:59 -04:00
Shawn Webb
6533215248 bb#7861 - Improve error message for missing files 2013-10-08 13:16:14 -04:00
Shawn Webb
d9b6b8c757 bb#8993 - Rename the STAT macro to CLAMSTAT to avoid name conflicts on AIX 2013-09-25 16:23:10 -04:00
David Raynor
1d1c4b154f bb #1570: partition typing and HFS+ 2013-09-17 16:45:48 -04:00
Shawn Webb
110714bb37 Fix bugs in mpool and readdb 2013-04-12 14:20:23 -04:00
David Raynor
e37613ad27 libclamav: SHA1/SHA256 handling changes and wildcard-size support 2013-03-08 18:10:07 -05:00
Shawn Webb
c05ac24f3e Rename .crtdb to .crb and add functionality to sigtool for searching the authenticode database 2013-03-05 15:13:12 -05:00
David Raynor
6c0141525a libclamav/readdb.c: Typo in memory allocation message 2013-03-01 14:11:13 -05:00
Shawn Webb
241e7eb147 bb6258 - Add warnings when allocations fail 2013-03-01 13:51:15 -05:00
Shawn Webb
0f418a13cc Print name of authenticode certificate revocation entry when in debug mode 2013-02-19 09:24:19 -05:00
Shawn Webb
878cece5e4 Fix CID 11353 2013-02-15 10:45:02 -05:00
Shawn Webb
dfa2b2c35b Fix CIDs 11389, 11390, 11391 2013-02-11 10:09:42 -05:00
Shawn Webb
c2fac6e996 Properly fix CIDs 11364, 11365, 11353 2013-02-08 14:25:13 -05:00
Shawn Webb
59a603828b Fix CIDs 11109, 11110, 11122, 11123, 11353, 11354, 11355, 11356, 11357, 11358, 11359, 11360, 11361, 11362, 11363, 11364, 11365, 11374, 11375 2013-02-07 15:41:34 -05:00
David Raynor
66a68d74d6 bb #6434 2013-01-16 16:13:45 -05:00
Steve Morgan
54402320c0 Add bytecode performance statistics 2012-12-05 15:48:52 -08:00
Shawn Webb
6202315633 bb5638 - fix logic surrounding revoked certs 2012-11-28 14:20:02 -05:00
Shawn Webb
e522909e19 bb6061 2012-11-19 13:20:33 -05:00
Shawn Webb
09171f5203 Merge branch 'bb5638' 2012-11-01 11:54:53 -04:00
Shawn Webb
2c2e89e107 bb5638. Check if cert already exists in cache. 2012-11-01 11:35:42 -04:00
Shawn Webb
ee07fcd640 bb5638. Parse minFL and maxFL 2012-11-01 10:51:57 -04:00
Shawn Webb
d12f1646f2 bb5638. Parse the new cert db file. 2012-11-01 10:26:08 -04:00
Steve Morgan
6ad45a2931 add initial allscan/allmatch mode to libclamav, clamd, clamdscan, and clamscan with unit tests 2012-10-18 14:12:58 -07:00
David Raynor
e828f534df Log messages for malformed DB cases 2012-08-10 10:17:22 -04:00
Shawn webb
a2a004df25 BB#3737 - Value too large for specified data type
Create compile-time preprocessor defines for switching from calling
stat() to stat64(). Add --enable-stat64 switch in configure script.
2012-07-16 15:36:49 -04:00
David Raynor
bebd86a60b bb#5343 2012-06-22 16:55:29 -04:00