Re: [Clamav-devel] 0.96.2 scan discrepency/reliability in Mac OS X 10.4, 10.5 and 10.6.

2010-08-14 Thread Török Edwin
On Sat, 14 Aug 2010 08:35:42 -0400 Dale Walsh wrote: > all older versions and dependancies have been removed, config files > updated per instructions. > > Tested on PowerPC and Intel based Macs with the same results. > > > > TEST SCAN USING CLAMSCAN: clam.ea06.exe not detected ea06 not det

Re: [Clamav-devel] [QUESTION] How does clamAV updates the signature database on-the-fly?

2010-08-14 Thread Ladar Levison
On 8/14/2010 5:30 AM, Török Edwin wrote: Heuristics.Phishing.* will not stop the scan, and report only if nothing else is found. Other engine detections could be changed to behave the same way. Signature based detections however always stop on first match, and that is not configurable. If you wa

[Clamav-devel] 0.96.2 scan discrepency/reliability in Mac OS X 10.4, 10.5 and 10.6.

2010-08-14 Thread Dale Walsh
all older versions and dependancies have been removed, config files updated per instructions. Tested on PowerPC and Intel based Macs with the same results. TEST SCAN USING CLAMSCAN: clam.ea06.exe not detected amavis-stats:/Volumes/Builds/8A428 root# sudo /save_clamav 1208 Saving clamav inst

Re: [Clamav-devel] [QUESTION] How does clamAV updates the signature database on-the-fly?

2010-08-14 Thread Török Edwin
On Sat, 14 Aug 2010 05:00:46 -0500 Ladar Levison wrote: > On 8/14/2010 3:19 AM, Török Edwin wrote: > >> > >> // Scan the message. The OLE code has a bug in it that causes > >> segfaults. > > > > What bug ?? > > That comment was related to a bug I found in Feb/2008 and v0.92.1, > but has long s

Re: [Clamav-devel] [QUESTION] How does clamAV updates the signature database on-the-fly?

2010-08-14 Thread Ladar Levison
On 8/14/2010 3:19 AM, Török Edwin wrote: // Scan the message. The OLE code has a bug in it that causes segfaults. What bug ?? That comment was related to a bug I found in Feb/2008 and v0.92.1, but has long since been patched. See this email thread for details: http://marc.info/?l=clamav-

Re: [Clamav-devel] [QUESTION] How does clamAV updates the signature database on-the-fly?

2010-08-14 Thread Török Edwin
> /** > * @file /magma/providers/external/clamav.c > * > * @brief Interface for the ClamAV library. > * > * $Author: Ladar Levison $ > * $Date: 2010/08/13 10:32:38 $ > * $Revision: ecaee526d4ba88a141c5b889dd023b13c05c2654 $ > // Scan the message. The OLE code has a bug in it that cause

Re: [Clamav-devel] [QUESTION] How does clamAV updates the signature database on-the-fly?

2010-08-14 Thread Ladar Levison
On 7/28/2010 6:18 PM, thyago wrote: I'm researching ways of updating a signature database on-the-fly, so the way clamAV does it, can really help me out... I mean, what structures are there? how is it implemented? Is there a data structure used to store the signatures on memory? If so, how exactl