Tomasz Kojm wrote:

It doesn't support multi-part signatures so you will miss most of the
stuff.


OK, this is bad.
My problem is that I am trying to scan web trafic. We are talking about thousands html files,
graphics, javascripts etc. If I am going to build a file for each web object It result to a
bad performance (maybe the solution is the memory mapped files.....).
For downloads it is not so bad, corresponds to a significant smaller number of files.


For a moment I had a thought that if someones going to replace all open/read/lseek functions
with driver-functions will let clamav to scan from every source. But it looks impossible
because of different methods for accessing files which used from different clamav libraries
(file descriptors/FILE's/ memory mapped files etc).
Which is your opinions about that?
(Iam asking if it is possible for someone to implement it, Iam not saying "do it"......)


What about for gif or jpeg files?



Why do you want to scan gifs?



I  read somewhere that there are exploits and viruses for gifs as for jpegs.

One more question. How safe can be the following:
I have the first part of an uncompressed file. I am scaning it for viruses
with cl_scandesc function and it looks clean. When I had the rest
part of the file I am scaning overall file and a virus found.
Can I say that the first part is safe? Maybe It has a part of the virus but
this part can not be used in practice (I think ......).


Sory for these boring questions,
       Christos



_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-devel

Reply via email to