Stowage/clamav
2
0
Fork 0
mirror of https://github.com/Cisco-Talos/clamav.git synced 2025-10-19 10:23:17 +00:00
Code Issues Projects Releases Packages Wiki Activity
clamav/libclamav
History
Val S. bcf2e5eebd
Increase limit for finding PE files embedded in other PE files 
I am seeing missed detections since we changed to prohibit embedded
file type identification when inside an embedded file.
In particular, I'm seeing this issue with PE files that contain multiple
other MSEXE as well as a variety of false positives for PE file headers.

For example, imagine a PE with four concatenated DLL's, like so:
```
  [ EXE file   | DLL #1  | DLL #2  | DLL #3  | DLL #4 ]
```

And note that false positives for embedded MSEXE files are fairly common.
So there may be a few mixed in there.

Before limiting embedded file identification we might interpret the file
structure something like this:
```
MSEXE: {
  embedded MSEXE #1: false positive,
  embedded MSEXE #2: false positive,
  embedded MSEXE #3: false positive,
  embedded MSEXE #4: DLL #1: {
    embedded MSEXE #1: false positive,
    embedded MSEXE #2: DLL #2: {
      embedded MSEXE #1: DLL #3: {
        embedded MSEXE #1: false positive,
        embedded MSEXE #2: false positive,
        embedded MSEXE #3: false positive,
        embedded MSEXE #4: false positive,
        embedded MSEXE #5: DLL #4
      }
      embedded MSEXE #2: false positive,
      embedded MSEXE #3: false positive,
      embedded MSEXE #4: false positive,
      embedded MSEXE #5: false positive,
      embedded MSEXE #6: DLL #4
    }
    embedded MSEXE #3: DLL #3,
    embedded MSEXE #4: false positive,
    embedded MSEXE #5: false positive,
    embedded MSEXE #6: false positive,
    embedded MSEXE #7: false positive,
    embedded MSEXE #8: DLL #4
  }
}
```

This is obviously terrible, which is why why we don't allow detecting
embedded files within other embedded files.
So after we enforce that limit, the same file may be interpreted like
this instead:
```
MSEXE: {
  embedded MSEXE #1:  false positive,
  embedded MSEXE #2:  false positive,
  embedded MSEXE #3:  false positive,
  embedded MSEXE #4:  DLL #1,
  embedded MSEXE #5:  false positive,
  embedded MSEXE #6:  DLL #2,
  embedded MSEXE #7:  DLL #3,
  embedded MSEXE #8:  false positive,
  embedded MSEXE #9:  false positive,
  embedded MSEXE #10: false positive,
  embedded MSEXE #11: false positive,
  embedded MSEXE #12: DLL #4
}
```

That's great! Except that we now exceed the "MAX_EMBEDDED_OBJ" limit
for embedded type matches (limit 10, but 12 found). That means we won't
see or extract the 4th DLL anymore.

My solution is to lift the limit when adding an matched MSEXE type.
We already do this for matched ZIPSFX types.
While doing this, I've significantly tidied up the limits checks to
make it more readble, and removed duplicate checks from within the
`ac_addtype()` function.

CLAM-2897
2025-10-14 14:04:25 -04:00
..
7z Swap clean cache from MD5 to SHA2-256 2025-08-14 21:23:30 -04:00
c++ Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
jsparse Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
lzw Rename clamav memory allocation functions 2024-03-15 13:18:47 -04:00
nsis NSIS: When extracting files, get the path's basename when recording the name 2025-08-14 22:40:17 -04:00
regex Rename clamav memory allocation functions 2024-03-15 13:18:47 -04:00
7z_iface.c libclamav: Add engine option to toggle temp directory recursion 2025-08-14 22:38:58 -04:00
7z_iface.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
adc.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
adc.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
apm.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
apm.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
arc4.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
arc4.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
asn1.c Fix OpenSSL 1 compatibility issue, plus minor improvements 2025-08-18 12:27:10 -04:00
asn1.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
aspack.c Fix static analysis code quality issues (#1582) 2025-10-02 11:46:14 -04:00
aspack.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
autoit.c libclamav: Add engine option to toggle temp directory recursion 2025-08-14 22:38:58 -04:00
autoit.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
bcfeatures.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
binhex.c libclamav: Add engine option to toggle temp directory recursion 2025-08-14 22:38:58 -04:00
binhex.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
blob.c ClamScan & libclamav: improve precision of bytes-scanned, bytes-read 2025-08-14 22:39:15 -04:00
blob.h ClamScan & libclamav: improve precision of bytes-scanned, bytes-read 2025-08-14 22:39:15 -04:00
builtin_bytecodes.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
bytecode.c Record unique object-id for each layer scanned 2025-08-14 21:23:33 -04:00
bytecode.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
bytecode_api.c libclamav: Add engine option to toggle temp directory recursion 2025-08-14 22:38:58 -04:00
bytecode_api.h Bump version to 1.5.1 and set FLEVEL to 231 2025-10-14 13:06:08 -04:00
bytecode_api_decl.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
bytecode_api_impl.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
bytecode_detect.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
bytecode_detect.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
bytecode_hooks.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
bytecode_nojit.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
bytecode_priv.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
bytecode_vm.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
cache.c Fix static analysis code quality issues; Fix old libjson-c support (#1574) 2025-09-26 18:26:00 -04:00
cache.h Swap clean cache from MD5 to SHA2-256 2025-08-14 21:23:30 -04:00
clamav.h Example Program: Add --disable-cache feature 2025-08-14 22:40:48 -04:00
clambc.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
CMakeLists.txt Solaris requires -z gnu-version-script-compat to be specified (#1569) 2025-09-07 14:34:45 -04:00
conv.c Add CMake build tooling 2020-08-13 00:25:34 -07:00
conv.h Add proof-of-concept XDP support. 2014-07-31 19:11:22 -04:00
cpio.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
cpio.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
crtmgr.c Swap clean cache from MD5 to SHA2-256 2025-08-14 21:23:30 -04:00
crtmgr.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
crypto.c Fix issue using non-FIPS algorithsm in some FIPS environments (#1589) 2025-10-05 23:19:27 -04:00
cvd.c Auto-format touch-up 2025-08-14 22:39:16 -04:00
cvd.h FIPS & FIPS-like limits on hash algs for cryptographic uses 2025-08-14 22:39:15 -04:00
dconf.c libclamav: Disable MyDoom heuristic by default. 2025-05-07 14:37:11 -07:00
dconf.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
default.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
disasm-common.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
disasm.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
disasm.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
disasmpriv.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
dlp.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
dlp.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
dmg.c libclamav: Add engine option to toggle temp directory recursion 2025-08-14 22:38:58 -04:00
dmg.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
Doxyfile Remove bundled tomfastmath library. 2023-03-29 15:10:25 -07:00
dsig.c Swap clean cache from MD5 to SHA2-256 2025-08-14 21:23:30 -04:00
dsig.h Swap clean cache from MD5 to SHA2-256 2025-08-14 21:23:30 -04:00
egg.c libclamav: scan-layer callback API functions 2025-08-14 22:39:14 -04:00
egg.h libclamav: scan-layer callback API functions 2025-08-14 22:39:14 -04:00
elf.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
elf.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
encoding_aliases.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
entconv.c Tests: Fix a couple of valgrind complaints (#1554) 2025-09-09 12:35:14 -04:00
entconv.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
entitylist.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
events.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
events.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
execs.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
execs.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
explode.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
explode.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
filetypes.c Fix OpenSSL 1 compatibility issue, plus minor improvements 2025-08-18 12:27:10 -04:00
filetypes.h Fix OpenSSL 1 compatibility issue, plus minor improvements 2025-08-18 12:27:10 -04:00
filetypes_int.h ZIP: Fix infinite loop + significant code cleanup 2025-08-11 18:14:19 -04:00
filtering.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
filtering.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
fmap.c Fix static analysis code quality issues; Fix old libjson-c support (#1574) 2025-09-26 18:26:00 -04:00
fmap.h libclamav: scan-layer callback API functions 2025-08-14 22:39:14 -04:00
fpu.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
fpu.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
fsg.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
fsg.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
gif.c libclamav: scan-layer callback API functions 2025-08-14 22:39:14 -04:00
gif.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
gpt.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
gpt.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
hashtab.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
hashtab.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
hfsplus.c Fix OpenSSL 1 compatibility issue, plus minor improvements 2025-08-18 12:27:10 -04:00
hfsplus.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
hostid_internal.c Add explicit log level parameter to application logging API 2022-02-15 15:13:55 -08:00
hostid_internal.h Add CMake build tooling 2020-08-13 00:25:34 -07:00
htmlnorm.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
htmlnorm.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
hwp.c libclamav: Add engine option to toggle temp directory recursion 2025-08-14 22:38:58 -04:00
hwp.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
iana_cctld.h add lots of warnings flags to 'make distcheck', 2008-08-21 20:21:43 +00:00
iana_tld.h clang-format'd using new .clang-format rules. 2019-10-02 16:08:16 -04:00
inffixed64.h Spelling Adjustments (#30) 2018-02-27 22:00:09 -05:00
inflate64.c Fix possible undefined behavior in inflate64 module 2025-03-19 09:46:19 -04:00
inflate64.h Spelling Adjustments (#30) 2018-02-27 22:00:09 -05:00
inflate64_priv.h Spelling Adjustments (#30) 2018-02-27 22:00:09 -05:00
iowrap.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
iowrap.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
is_tar.c Add explicit log level parameter to application logging API 2022-02-15 15:13:55 -08:00
is_tar.h libclamav: Fix scan recursion tracking 2021-10-25 16:02:29 -07:00
ishield.c libclamav: Add engine option to toggle temp directory recursion 2025-08-14 22:38:58 -04:00
ishield.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
iso9660.c libclamav: Add engine option to toggle temp directory recursion 2025-08-14 22:38:58 -04:00
iso9660.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
jpeg.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
jpeg.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
json_api.c Fix static analysis code quality issues; Fix old libjson-c support (#1574) 2025-09-26 18:26:00 -04:00
json_api.h libclamav: scan-layer callback API functions 2025-08-14 22:39:14 -04:00
libclamav.map FIPS & FIPS-like limits on hash algs for cryptographic uses 2025-08-14 22:39:15 -04:00
libclamav_main.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
libmspack.c Fix static analysis code quality issues (#1582) 2025-10-02 11:46:14 -04:00
libmspack.h Reduce unnecessary scanning of embedded file FPs (#1571) 2025-09-23 15:57:28 -04:00
line.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
line.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
lzma_iface.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
lzma_iface.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
macho.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
macho.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
matcher-ac.c Increase limit for finding PE files embedded in other PE files 2025-10-14 14:04:25 -04:00
matcher-ac.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
matcher-bm.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
matcher-bm.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
matcher-byte-comp.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
matcher-byte-comp.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
matcher-hash-types.h Fix OpenSSL 1 compatibility issue, plus minor improvements 2025-08-18 12:27:10 -04:00
matcher-hash.c Fix OpenSSL 1 compatibility issue, plus minor improvements 2025-08-18 12:27:10 -04:00
matcher-hash.h FIPS & FIPS-like limits on hash algs for cryptographic uses 2025-08-14 22:39:15 -04:00
matcher-pcre.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
matcher-pcre.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
matcher.c Reduce unnecessary scanning of embedded file FPs (#1571) 2025-09-23 15:57:28 -04:00
matcher.h Reduce unnecessary scanning of embedded file FPs (#1571) 2025-09-23 15:57:28 -04:00
mbox.c metadata JSON: Rename "Viruses" key to "Alerts" 2025-08-14 22:40:48 -04:00
mbox.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
mbr.c libclamav: Add engine option to toggle temp directory recursion 2025-08-14 22:38:58 -04:00
mbr.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
message.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
message.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
mew.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
mew.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
mpool.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
mpool.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
msdoc.c Record unique object-id for each layer scanned 2025-08-14 21:23:33 -04:00
msdoc.h Record unique object-id for each layer scanned 2025-08-14 21:23:33 -04:00
msexpand.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
msexpand.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
msxml.c Record unique object-id for each layer scanned 2025-08-14 21:23:33 -04:00
msxml.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
msxml_parser.c libclamav: Add engine option to toggle temp directory recursion 2025-08-14 22:38:58 -04:00
msxml_parser.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
ole2_encryption.h OLE2: Fix bounds check on OLE2 encryption info check 2023-08-02 22:33:25 -07:00
ole2_extract.c libclamav: Add engine option to toggle temp directory recursion 2025-08-14 22:38:58 -04:00
ole2_extract.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
ooxml.c Record unique object-id for each layer scanned 2025-08-14 21:23:33 -04:00
ooxml.h ZIP: Fix NULL-dereference for OOXML scans (#1552) 2025-08-14 21:17:46 -04:00
openioc.c FIPS & FIPS-like limits on hash algs for cryptographic uses 2025-08-14 22:39:15 -04:00
openioc.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
other_types.h Fix OpenSSL 1 compatibility issue, plus minor improvements 2025-08-18 12:27:10 -04:00
others.c Fix static analysis code quality issues (#1582) 2025-10-02 11:46:14 -04:00
others.h Bump version to 1.5.1 and set FLEVEL to 231 2025-10-14 13:06:08 -04:00
others_common.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
packlibs.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
packlibs.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
partition_intersection.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
partition_intersection.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
pdf.c libclamav: Fix PDF scan crash on some platforms with optimization enabled (#1572) 2025-09-26 14:14:25 -04:00
pdf.h Fix integer overflow in PDF parser (#1523) 2025-06-30 10:47:02 -04:00
pdfdecode.c Fix static analysis code quality issues (#1582) 2025-10-02 11:46:14 -04:00
pdfdecode.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
pdfng.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
pe.c Fix performance issue scanning some Windows executables 2025-10-14 13:10:34 -04:00
pe.h Fix performance issue scanning some Windows executables 2025-10-14 13:10:34 -04:00
pe_icons.c libclamav: Add engine option to toggle temp directory recursion 2025-08-14 22:38:58 -04:00
pe_icons.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
pe_structs.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
perflogging.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
perflogging.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
petite.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
petite.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
phish_allow_list.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
phish_allow_list.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
phish_domaincheck_db.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
phish_domaincheck_db.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
phishcheck.c Swap clean cache from MD5 to SHA2-256 2025-08-14 21:23:30 -04:00
phishcheck.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
png.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
png.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
qsort.c Code cleanup: Refactor to clean up formatting issues 2022-03-22 10:42:46 -07:00
queue.h Add CMake build tooling 2020-08-13 00:25:34 -07:00
readdb.c Fix potential NULL pointer dereference (#1581) 2025-10-01 17:09:15 -04:00
readdb.h FIPS-compliant CVD signing and verification 2025-03-26 19:33:25 -04:00
rebuildpe.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
rebuildpe.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
regex_list.c Fix potential NULL pointer dereference (#1581) 2025-10-01 17:09:15 -04:00
regex_list.h Swap clean cache from MD5 to SHA2-256 2025-08-14 21:23:30 -04:00
regex_pcre.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
regex_pcre.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
regex_suffix.c Fix stack-buffer-overflow in parse_regex due to missing bounds checks (#1486) 2025-04-24 15:33:26 -04:00
regex_suffix.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
rijndael.c Windows: Fix C/Rust FFI compat issue + Windows compile warnings 2024-04-09 10:35:22 -04:00
rijndael.h Windows: Fix C/Rust FFI compat issue + Windows compile warnings 2024-04-09 10:35:22 -04:00
rtf.c Fix static analysis code quality issues (#1582) 2025-10-02 11:46:14 -04:00
rtf.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
scan_layer.c libclamav: scan-layer callback API functions 2025-08-14 22:39:14 -04:00
scan_layer.h libclamav: cl_scan*_ex() functions provide verdict separate from errors 2025-08-14 22:40:46 -04:00
scanners.c Loosen restrictions on embedded file identification 2025-10-14 14:04:24 -04:00
scanners.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
sf_base64decode.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
sf_base64decode.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
sis.c libclamav: Add engine option to toggle temp directory recursion 2025-08-14 22:38:58 -04:00
sis.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
special.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
special.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
spin.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
spin.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
stats.c Fix many warnings 2023-04-13 00:11:34 -07:00
stats.h Set the stats server to the real one 2014-02-25 15:04:58 -05:00
stats_json.c Add CMake build tooling 2020-08-13 00:25:34 -07:00
stats_json.h support libjson-c 0.10, 1.11, and 1.12 2014-05-23 09:46:06 -04:00
str.c libclamav: Add 'ex'-scan functions to API w. hash and type in/out parameters 2025-08-14 22:39:12 -04:00
str.h libclamav: Add 'ex'-scan functions to API w. hash and type in/out parameters 2025-08-14 22:39:12 -04:00
strlcat.c clang-format'd using new .clang-format rules. 2019-10-02 16:08:16 -04:00
swf.c libclamav: Add engine option to toggle temp directory recursion 2025-08-14 22:38:58 -04:00
swf.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
table.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
table.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
text.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
text.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
textdet.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
textdet.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
textnorm.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
textnorm.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
tiff.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
tiff.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
tnef.c libclamav: Add engine option to toggle temp directory recursion 2025-08-14 22:38:58 -04:00
tnef.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
type_desc.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
udf.c Fix PDF double-free bug (#1559) 2025-08-27 14:22:35 -04:00
udf.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
unarj.c Fix static analysis code quality issues (#1582) 2025-10-02 11:46:14 -04:00
unarj.h Reduce unnecessary scanning of embedded file FPs (#1571) 2025-09-23 15:57:28 -04:00
uniq.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
uniq.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
unsp.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
unsp.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
untar.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
untar.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
unzip.c Fix issue recording OOXML document metadata 2025-10-14 13:10:35 -04:00
unzip.h Reduce unnecessary scanning of embedded file FPs (#1571) 2025-09-23 15:57:28 -04:00
upack.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
upack.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
upx.c Fix static analysis code quality issues (#1582) 2025-10-02 11:46:14 -04:00
upx.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
uuencode.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
uuencode.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
vba_extract.c Fix static analysis code quality issues (#1582) 2025-10-02 11:46:14 -04:00
vba_extract.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
version.c clang-format'd using new .clang-format rules. 2019-10-02 16:08:16 -04:00
version.h.in Add CMake build tooling 2020-08-13 00:25:34 -07:00
wwunpack.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
wwunpack.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
www.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
www.h Update copyrights 2014-02-04 10:14:25 -05:00
xar.c libclamav: Add engine option to toggle temp directory recursion 2025-08-14 22:38:58 -04:00
xar.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
xdp.c libclamav: Add engine option to toggle temp directory recursion 2025-08-14 22:38:58 -04:00
xdp.h Record names of extracted files 2020-06-03 10:39:18 -04:00
xlm_extract.c Fix issue detecting VBA projects 2025-10-14 14:03:27 -04:00
xlm_extract.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
xz_iface.c libclamav: Remove confusing heuristic (#1573) 2025-09-26 15:50:44 -04:00
xz_iface.h libclamav: Remove confusing heuristic (#1573) 2025-09-26 15:50:44 -04:00
yara_arena.c Fix typos (no functional changes) 2023-11-26 18:01:19 -05:00
yara_arena.h Fix assorted sign-compare compilation warnings 2022-03-02 14:40:33 -08:00
yara_clam.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
yara_compiler.c Fix typos (no functional changes) 2023-11-26 18:01:19 -05:00
yara_compiler.h Add the YARA compiler files. 2015-05-28 18:00:16 -04:00
yara_exec.c Yara: Fix crash with partially loaded yara files 2021-10-11 11:50:45 -07:00
yara_exec.h Yara: Fix crash with partially loaded yara files 2021-10-11 11:50:45 -07:00
yara_grammar.c Fix typos (no functional changes) 2023-11-26 18:01:19 -05:00
yara_grammar.h CMake: Remove Flex & Bison hard build dependency 2020-08-31 12:19:53 -07:00
yara_grammar.y Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
yara_hash.c Fix YARA arena management, improve error reporting, clean up some code. 2015-05-07 15:50:37 -04:00
yara_hash.h YARA work in progress: enable parser functions, add YARA arenas and hash tables. 2015-02-20 17:31:10 -05:00
yara_lexer.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
yara_lexer.h clang-format'd using new .clang-format rules. 2019-10-02 16:08:16 -04:00
yara_lexer.l Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
yara_parser.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
yara_parser.h fix to update autogenerated files for machines that do not have bison installed. also eliminating warning in .y file at the same time by removing ifdef from yara_parser.h 2017-09-11 14:16:12 -04:00
yc.c Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00
yc.h Bump copyright dates for 2025 2025-02-14 10:24:30 -05:00