Hi, My thesis is related with regex signatures in ClamAV database.
I don't understand type HexSIG[x-y]aa or aa[x-y]HexSIG. In https://bugzilla.clamav.net/show_bug.cgi?id=776#add_comment, you use testsig:7:5:64[4-4]61616161{2}6262[3-6]65:27 And test data(HexSIG):64616161616161616164646262626262636365 is match with testsig My question is: is HexSIG: "64676767676161616164646262626262636365" match? is HexSIG: "64616161616161616169696262626262636365" match? Please help me Best Regards _______________________________________________ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net http://www.clamav.net/contact.html#ml