Re: [Clamav-devel] I would like to contribute as a developer to the Clam-AV project

2012-04-10 Thread Tomasz Kojm
On Tue, 10 Apr 2012 11:04:34 -0700 Vikram Hegde wrote: > Hi Tomasz, > > I would be very happy to work on the Flash disassembler. I will get to > work on it immediately. Great to hear this. Thanks in advance! -- oo..... Tomasz Kojm (\/)\.

Re: [Clamav-devel] I would like to contribute as a developer to the Clam-AV project

2012-04-10 Thread Tomasz Kojm
mprovements listed here: http://wiki.clamav.net/bin/view/Main/GoogleSummerOfCode2012 For example the flash (ActionScript 3) disassembly is something that would be very useful for our signature writers. Please let me know if you're interested in working on any of those

Re: [Clamav-devel] Can I join the Mac dev of clamAV

2012-04-10 Thread Tomasz Kojm
efuse or accept it. I once raise a bug of it: > http://lkml.indiana.edu/hypermail/linux/kernel/1110.1/00292.html. > I think we can use fanotify on Linux too, then it becomes driverless. We'll support fanotify in ClamAV 0.98. -- oo.

Re: [Clamav-devel] Can I join the Mac dev of clamAV

2012-04-05 Thread Tomasz Kojm
with Growl would be a good start! Thanks, -- oo. Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Thu Apr 5 18:06:10 CEST 2012 ___

Re: [Clamav-devel] Can I join the Mac dev of clamAV

2012-04-04 Thread Tomasz Kojm
On Wed, 4 Apr 2012 22:58:01 +0800 boyd yang wrote: > Hi Guys, > > Cay I join the Mac Dev of clamav? > How can I know something about Mac dev of clamav? Hi, are you a mac developer? Have you ever played with ClamAV on OS X? Regards, -- oo.....

Re: [Clamav-devel] Question about wildcards ?? and {n} in signatures

2012-03-06 Thread Tomasz Kojm
On Wed Mar 07 2012 01:21:25 GMT+0100 (CET) Alexandre Dias wrote: > Hello, > > I am doing my Msc thesis work in pattern matching, and I am using > ClamAV's signature database. > > I've got a question about two specific wildcards that are stated in > the signatures.pdf file (titled "Creating Signa

Re: [Clamav-devel] Why the function ac_maketrans defined size of array is 256?

2012-02-03 Thread Tomasz Kojm
s.right? My plan for optimized algorithm code of string > matching with GPU. I'd suggest you have a look at the source code - all the information is there. -- oo. Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/tkojm.g

Re: [Clamav-devel] plz help me!!

2012-01-31 Thread Tomasz Kojm
as early as possible. > Thanks in advance. You can find some ideas here: http://wiki.clamav.net/bin/view/Main/GoogleSummerOfCode2011 -- oo . Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB4345

Re: [Clamav-devel] Hello

2011-09-21 Thread Tomasz Kojm
rovide a multi-language interface. When it comes to the website, please send a mail to luca clamav.net and he'll send you the instructions. Thanks in advance, -- oo..... Tomasz Kojm (\/)\. http://www.ClamA

Re: [Clamav-devel] Creating signature excluding part of string

2011-08-26 Thread Tomasz Kojm
On Fri, 26 Aug 2011 16:47:00 +0200 Asle Skage wrote: > Thank you! > That worked as expected. You're welcome! Glad to hear it worked for you. > The same story: Reading the manual more thoroughly cold have told me > the same! ;-) -- oo .....

Re: [Clamav-devel] Creating signature excluding part of string

2011-08-26 Thread Tomasz Kojm
must be matched 0 times"). HTH, -- oo. Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Fri Aug 26 13:08:48 CEST 2011 ___

Re: [Clamav-devel] Improvement suggestion : Scan & Hash to optmize re-scan

2011-07-12 Thread Tomasz Kojm
ed one. Hi Philippe, we already do this (see libclamav/cache.c). The cache gets purged after a database update. Regards, -- oo. Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B

Re: [Clamav-devel] Custom CVD Server question

2011-06-21 Thread Tomasz Kojm
u can use any name for the db, but all internal files (listed with 'ls' in the example) need to have the same base name as well. Hope this helps, -- oo. Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5

Re: [Clamav-devel] music and video related signatures?

2011-03-04 Thread Tomasz Kojm
ultimedia malware you have in mind? -- oo. Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Fri Mar 4 17:20:18

[Clamav-devel] Upcoming release of ClamAV

2010-10-19 Thread Tomasz Kojm
ot;h=refs/heads/master;sf=tgz Thanks in advance, -- oo. Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Tue Oct 19 16:21:33 CEST 2010 ___

Re: [Clamav-devel] Patch: Clamuko: add ClamukoIgnoreSuperuser option

2010-09-10 Thread Tomasz Kojm
it. > > If someone finds this sort of thing useful, it should be relatively > simple to modify the patch so that Clamuko can accept a list of ignored > uid's, instead of just uid 0. Hey Alfred, please open an enhancement request in our bugzilla (http://bugs.clamav

Re: [Clamav-devel] automatic file submission

2010-09-01 Thread Tomasz Kojm
ills those > in and understands not to submit more than 2 per day (for example). The name/e-mail address is a must be. The user should also be able to provide a description which is very welcome and (very important!) be able to mark the file either as 'not detected&#

Re: [Clamav-devel] [QUESTION] How does clamAV updates the signature database on-the-fly?

2010-07-29 Thread Tomasz Kojm
hat limits when this pointer can > be changed...like a thread needing to finish first > > I tried to look for the implementation on the code itself...but it's so > big...i don't know in which file to look =/ You should analyze the calls to cl_engine_*() and the f

Re: [Clamav-devel] The upcoming 15 April kill-switch

2010-04-07 Thread Tomasz Kojm
e the diversity of software run by our mirrors makes this solution ineffective. Regards, -- oo. Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Wed

Re: [Clamav-devel] Bytecode interpreter

2010-03-11 Thread Tomasz Kojm
On Thu, 11 Mar 2010 14:26:07 -0500 "David F. Skoll" wrote: > Tomasz Kojm wrote: > > > Due to security reasons all bytecodes need to be digitally signed, > > so no 3rd parties will be able to inject any code into your installations. > > I believe this

Re: [Clamav-devel] Bytecode interpreter

2010-03-11 Thread Tomasz Kojm
no" in freshclam.conf. > In the same man page there are a couple of small formatting errors in > the bold attributes for LocalSocketGroup and LocalSocketMode. Thanks, this will be fixed in the next release Regards, -- oo. Tomasz Kojm (\/)\.

Re: [Clamav-devel] [PATCH] Clamuko: DazukoFS support + fix reload race

2009-09-10 Thread Tomasz Kojm
On Thu, 10 Sep 2009 22:46:25 +0200 John Ogness wrote: > On 2009-09-09, Tomasz Kojm wrote: > > if possible, please open two bug reports at bugs.clamav.net (for > > race condition and dazukofs support) and attach your patches there - > > this will help us to better schedule t

Re: [Clamav-devel] [PATCH] Clamuko: DazukoFS support + fix reload race

2009-09-09 Thread Tomasz Kojm
together with > DazukoFS 3.1.0-rc2. Hi John, if possible, please open two bug reports at bugs.clamav.net (for race condition and dazukofs support) and attach your patches there - this will help us to better schedule the changes. Thanks!! Best regards, -- oo. Toma

Re: [Clamav-devel] I am uncertain of the meaning of cl_engine_field members

2009-05-27 Thread Tomasz Kojm
On Wed, 27 May 2009 12:08:54 +0200 Janos SUTO wrote: > Tomasz Kojm wrote: > > > Most of them are self-explanatory, also the source code of clamd and > > clamscan should clear up any doubts. Which particular fields confuse you? > > These: > > CL_ENGINE_MAX_FILE

Re: [Clamav-devel] I am uncertain of the meaning of cl_engine_field members

2009-05-27 Thread Tomasz Kojm
particular fields confuse you? -- oo. Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Wed May 27 11:12:05 CEST 2009 ___ http:

Re: [Clamav-devel] PATCH: Enhanced exclude / include support for clamscan

2009-05-21 Thread Tomasz Kojm
e the regex with (?i), eg. clamscan --exclude-dir="(?i)^/SyS$" will skip /sys, /Sys, /sYs, /syS, /SYs, /SyS, /sYS, and /SYS :-) -- oo . Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279

Re: [Clamav-devel] PATCH: Enhanced exclude / include support for clamscan

2009-05-21 Thread Tomasz Kojm
y > file or via stdin. I added support for --file-list/-f in both clamscan and clamdscan in SVN. Thanks, -- oo. Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D528

Re: [Clamav-devel] PATCH: Enhanced exclude / include support for clamscan

2009-05-13 Thread Tomasz Kojm
's happening with the stuff. Thanks, -- oo. Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Wed May 13 09:51:25 CEST 2009

Re: [Clamav-devel] Fix clamav-milter bug on FreeBSD ports tree

2009-04-07 Thread Tomasz Kojm
On Tue, 7 Apr 2009 18:19:42 +0200 Tomasz Kojm wrote: > > What is the status of this release? Will it happen today? > > Yes, it will. Well, we will have a small delay - please expect the new release tomorrow. Sorry for the inconvenience. -- oo.....

Re: [Clamav-devel] Fix clamav-milter bug on FreeBSD ports tree

2009-04-07 Thread Tomasz Kojm
gt; > What is the status of this release? Will it happen today? Yes, it will. -- oo. Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Tue Apr 7 18:19:38 C

Re: [Clamav-devel] Help to fix some code with new API

2009-03-25 Thread Tomasz Kojm
ome real world tests of these applications to make sure they're functioning correctly. -- oo. Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Wed Mar 25

Re: [Clamav-devel] Help to fix some code with new API

2009-03-25 Thread Tomasz Kojm
On Wed Mar 25 2009 19:05:13 GMT+0100 (CET) Renato Botelho wrote: > And for the other one: > cfg->maxfiles = 100; Setting maxfiles to such a low value is not a good idea. -- oo. Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/

Re: [Clamav-devel] API concerns

2009-03-13 Thread Tomasz Kojm
igned int cl_statsigtotal(const struct cl_stat *dbstat); Please open a bug report, mark it as enhancement, and we will consider such a feature for one of the future releases. -- oo. Tomasz Kojm (\/)\.

Re: [Clamav-devel] New 0.95 API concerns

2009-03-12 Thread Tomasz Kojm
ese particular changes to the API shouldn't have much impact on the 3rd party applications at this point. Thanks, -- oo. Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /

Re: [Clamav-devel] New 0.95 API concerns

2009-03-12 Thread Tomasz Kojm
On Thu, 12 Mar 2009 20:01:59 +0300 Eugene Crosser wrote: > Tomasz, > > thank you for your attention to my concerns. Now I can go ahead and > adjust zmscanner's clamav plugin to use the new API ... with confidence! :-) You're welcome! -- oo ...

Re: [Clamav-devel] New 0.95 API concerns

2009-03-12 Thread Tomasz Kojm
t; And a final note: I think it's worth mentioning in the documentation > what is the relation between "options" passed to cl_init() and "options" > passed to scanning functions. If they are different, maybe it's better > to name them differently, like &qu

Re: [Clamav-devel] [fabio....@libero.it: [Pkg-clamav-devel] Bug#512776: License incompatibility with libgmp ("GPLv2 only" linking to "LGPLv3 or later")]

2009-01-26 Thread Tomasz Kojm
ich seem unfortunate. > > Well, we could link against gmp-4.2.1 which has still the old license. > For cygwin we would have to create a gmp-compat package based on gmp-4.2.1 The problem has been fixed in SVN - we're now using LibTomMath (bundled with ClamAV) instead of libgmp. Th

Re: [Clamav-devel] [fabio....@libero.it: [Pkg-clamav-devel] Bug#512776: License incompatibility with libgmp ("GPLv2 only" linking to "LGPLv3 or later")]

2009-01-24 Thread Tomasz Kojm
ormation as well: https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1366 Thanks, -- oo . Tomasz Kojm (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Sat

Re: [Clamav-devel] installation of 64bit libaries in /usr/lib ?

2008-08-28 Thread Tomasz Kojm
correct. We'll probably need some additional configure check to handle it. -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /

Re: [Clamav-devel] installation of 64bit libaries in /usr/lib ?

2008-08-28 Thread Tomasz Kojm
On Thu, 28 Aug 2008 11:47:43 +0300 Tuomo Soini <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Tomasz Kojm wrote: > > | Most likely your distribution is not truly 64-bit, otherwise > /usr/lib64 would > | be a symlink to /usr/lib &g

Re: [Clamav-devel] installation of 64bit libaries in /usr/lib ?

2008-08-28 Thread Tomasz Kojm
On Thu, 28 Aug 2008 10:47:44 +0200 Per Jessen <[EMAIL PROTECTED]> wrote: > Tomasz Kojm wrote: > > > On Thu, 28 Aug 2008 10:00:01 +0200 > > Per Jessen <[EMAIL PROTECTED]> wrote: > > > >> I've just built 0.93.3 on an AMD64 machine - for some rea

Re: [Clamav-devel] installation of 64bit libaries in /usr/lib ?

2008-08-28 Thread Tomasz Kojm
otherwise /usr/lib64 would be a symlink to /usr/lib -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Thu

Re: [Clamav-devel] chm submodule disabled with daily.cvd

2008-08-22 Thread Tomasz Kojm
or the update on this. -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Fri Aug 22 14:52:35 CEST 2008 __

Re: [Clamav-devel] chm submodule disabled with daily.cvd

2008-08-22 Thread Tomasz Kojm
ses a single .hdb entry for detection) -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Fri Aug 22 09:35:30 CEST 2008 _

Re: [Clamav-devel] chm submodule disabled with daily.cvd

2008-08-21 Thread Tomasz Kojm
a known problem? Hi, the CHM module is currently switched off and will be re-enabled in 0.94-final. Regards, -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A

Re: [Clamav-devel] Silly code in clamav-0.93.1/shared/cfgparser.c

2008-06-12 Thread Tomasz Kojm
more issues like this, please open a bug report in our bugzilla and report them there. Thanks, -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //

Re: [Clamav-devel] ClamAV stopps working if it's database directory is locked

2008-04-07 Thread Tomasz Kojm
pr=122534 > > and let me know if is a known bug and if have a solution? This is a known issue and has been addressed in 0.93rc1 (0.93-final is to be released very soon). -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\.

Re: [Clamav-devel] file descriptor passing

2008-03-31 Thread Tomasz Kojm
sider it in the near future. Thanks, -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Mon

Re: [Clamav-devel] .cld file status

2008-01-02 Thread Tomasz Kojm
#x27;t reproduce it on my local box; does it fix the problem if you change this line in readdb.c: ret = cli_cvdload(fs, engine, signo, warn, options | CL_DB_CVDNOTMP, 1); to ret = cli_cvdload(fs, engine, signo, warn, options, 1); Thanks, -- oo. Tomasz Kojm <[EMAIL PROTECT

Re: [Clamav-devel] thread memory stack size consumption in clamav-milter

2007-12-06 Thread Tomasz Kojm
hould be enough to keep sane limits, but you will need to determine proper settings empirically. -- oo . Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\

Re: [Clamav-devel] License violation in unrar code

2007-10-25 Thread Tomasz Kojm
On Thu, 25 Oct 2007 03:34:05 +0200 Gianluigi Tiesi <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Tomasz Kojm wrote: > > On Fri, 19 Oct 2007 21:04:03 +0200 > > Enrico Scholz <[EMAIL PROTECTED]> wrote: >

Re: [Clamav-devel] License violation in unrar code

2007-10-23 Thread Tomasz Kojm
nced under LGPL + original unrar restrictions) and we will add a special clause to ClamAV's licence to allow linking with this library. -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08

Re: [Clamav-devel] false positives

2007-10-05 Thread Tomasz Kojm
an file. > > Any ideas how to track this down? Please post the output of clamconf -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\

Re: [Clamav-devel] Problem decompress cab file

2007-06-07 Thread Tomasz Kojm
On Thu, 7 Jun 2007 16:26:15 -0300 (BRT) [EMAIL PROTECTED] wrote: > Hi Tomasz , tanks for regard. I guess the problem is on block: [...] > What do you think about it ? Let me repeat myself: there's no problem with libclamav. -- oo..... Tomasz Kojm <[E

Re: [Clamav-devel] Problem decompress cab file

2007-06-06 Thread Tomasz Kojm
compress and mszip_decompress). No, there's no problem with ClamAV and it properly unpacks the cab file included in http://www.guerradigital.com.br/CABDECOMPRESS.ZIP -- oo ..... Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.C

Re: [Clamav-devel] Problem decompress cab file

2007-06-06 Thread Tomasz Kojm
I > tried with cab compressed as mszip and lzx, both had the same problem. The > project is available to download in > http://www.guerradigital.com.br/CABDECOMPRESS.ZIP Do you expect us to fix your code? -- oo ..... Tomasz Kojm <[EMAIL PROTECTED]> (\/)\.

Re: [Clamav-devel] clamd false positive, (Oversized.Zip on small zip files)

2007-05-14 Thread Tomasz Kojm
On Mon, 14 May 2007 16:17:11 +0200 (CEST) Martin Blapp <[EMAIL PROTECTED]> wrote: > What do you propose ? Is there a easy config fix for clamd or are we lost ? man clamd.conf -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.ne

Re: [Clamav-devel] clamd false positive, (Oversized.Zip on small zip files)

2007-05-14 Thread Tomasz Kojm
. How do you get 60032 Kbytes ? /tmp$ unzip -lv testzip.zip | head -n 5 | tail -n 1 60032 Defl:X 241 100% 02-16-07 13:15 1c5aa12b Drops von 14V 30s.dpt -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \...

Re: [Clamav-devel] clamd false positive, (Oversized.Zip on small zip files)

2007-05-14 Thread Tomasz Kojm
4 12:49:49 2007 > > Any ideas ? 60032 / 241 = 249.09544 -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Mon May 14 15:11:34 CE

Re: [Clamav-devel] Patch: freshclam: keep downloaded cdiffs for local distribution

2007-03-22 Thread Tomasz Kojm
ocal web server. There's no need for such a patch, please check the latest version of the FAQ. -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B

Re: [Clamav-devel] libclamav - cl_loaddbdir no longer in clamav.h ?

2007-03-13 Thread Tomasz Kojm
e phishing > sigs, but I'll survive :-) You should pass CL_DB_STDOPT into cl_load() -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\

Re: [Clamav-devel] One bug in matching algorithm of ClamAV 0.90

2007-03-08 Thread Tomasz Kojm
t;maxshift[pt->sigid - 1] = mdata->partoff[pt->sigid - 1][j] + pt->maxdist - curroff; else mdata->maxshift[pt->sigid - 1] = -1; -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/g

Re: [Clamav-devel] scaning PDFs in 0.90 is slow

2007-03-05 Thread Tomasz Kojm
eed special configuration for scanning PDF files? Read the manual. -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\

Re: [Clamav-devel] One bug in matching algorithm of ClamAV 0.90

2007-03-05 Thread Tomasz Kojm
pattern "a.db" missed. > > > I think the sample file should be detected too by the pattern files "a.db". Something indeed seems wrong. Please open a bugreport and we will have a closer look at this issue. --

Re: [Clamav-devel] One problem in filetype.c in clamav0.90

2007-03-01 Thread Tomasz Kojm
On Thu, 1 Mar 2007 08:43:18 -0800 "Dan Wilder" <[EMAIL PROTECTED]> wrote: > Logically appears to be true that it evaluates to FALSE. Yes, and it was discussed yesterday. -- oo..... Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www

Re: [Clamav-devel] One problem in filetype.c in clamav0.90

2007-02-28 Thread Tomasz Kojm
acter(s) from range [0x80..0xff] will be misclassified as CL_TYPE_UNKNOWN_DATA with your version of the line 233. Please respect our time, I really spent too much time today explaining this issue. -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.Cla

Re: [Clamav-devel] One problem in filetype.c in clamav0.90

2007-02-28 Thread Tomasz Kojm
line 233 of libclamav/filetypes.c to "if(!(iscntrl(buf[i]) || isprint(buf[i])) || !internat[buf[i] & xff])" you seriously broke the detection. That's all and the rest is off-topic. -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\..

Re: [Clamav-devel] Some programs stop building with clamav-0.90

2007-02-28 Thread Tomasz Kojm
ources? It is hard to build proper version of this module, > if you don't know which clamav is installed on system. > It requires Pyrex and python-devel to build. You should use clamav-config: $ clamav-config --version 0.90 -- oo. Tomasz Kojm <

Re: [Clamav-devel] One problem in filetype.c in clamav0.90

2007-02-28 Thread Tomasz Kojm
its. > > Maybe we should now handle safe_by_default filetypes via DCONF, so, in > case an exploit (for i.e. image/png) comes out we are able to scan it > anyway? We could move the whole cli_magic[] from filetypes.c into the database. -- oo.

Re: [Clamav-devel] One problem in filetype.c in clamav0.90

2007-02-28 Thread Tomasz Kojm
and e.g. iso files are also scanned in > raw mode. > 10-20gb of media/iso is not uncommon to find in a user pc, while > they are very unlikely to be in a mail. Still there are better ways to deal with big files than breaking important parts of code. -- oo. To

Re: [Clamav-devel] One problem in filetype.c in clamav0.90

2007-02-28 Thread Tomasz Kojm
On Wed, 28 Feb 2007 16:03:08 +0100 Gianluigi Tiesi <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Tomasz Kojm wrote: > > On Wed, 28 Feb 2007 15:21:52 +0100 > > Gianluigi Tiesi <[EMAIL PROTECTED]> wrote: > > > >&g

Re: [Clamav-devel] One problem in filetype.c in clamav0.90

2007-02-28 Thread Tomasz Kojm
he one in > file (magic) utility. In your case checking more data will only increase the chance for a false negative. After your change the first condition (i.e. !(iscntrl(buf[i]) || isprint(buf[i]))) will disqualify LOTS (more than 100 for sure) of characters which can

Re: [Clamav-devel] One problem in filetype.c in clamav0.90

2007-02-28 Thread Tomasz Kojm
e basic statistics instead) or dropping it completely. Otherwise, it may in some cases lead to false negatives or allow attackers to fool ClamAV very easily. Regards, -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \.

Re: [Clamav-devel] One problem in filetype.c in clamav0.90

2007-02-28 Thread Tomasz Kojm
gt; > I've noticed it too, in my port I have changed it to: > > if(!(iscntrl(buf[i]) || isprint(buf[i])) || !internat[buf[i] & xff]) This one is much worse because it will lead to many false nagatives with HTML and mail files. -- oo. Tomasz Kojm <[

Re: [Clamav-devel] ClamAV 0.90 fail to compile on Mac OS on a PowerPC Mac

2007-02-22 Thread Tomasz Kojm
uot; in > all makefiles for make to success. Please post the outputs of: * curl-config --libs * pkg-config --libs openssl -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._

Fw: [Clamav-devel] Phishcheck module in clamscan 0.90rc3

2007-02-10 Thread Tomasz Kojm
Begin forwarded message: Date: Sat, 10 Feb 2007 20:52:01 +0200 From: Török Edwin <[EMAIL PROTECTED]> To: Tomasz Kojm <[EMAIL PROTECTED]> Subject: Re: Fw: [Clamav-devel] Phishcheck module in clamscan 0.90rc3 Tomasz Kojm wrote: > Hi Edwin, > > could you have a look at thi

Re: [Clamav-devel] speed up 'cli_bm_scanbuff()'

2007-02-08 Thread Tomasz Kojm
3 is the best approach. Hi Christophe, 2.2 looks best to me. Sorry for the late answer. -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC

Re: [Clamav-devel] Q: handling of format errors

2007-01-29 Thread Tomasz Kojm
gi/clamav-devel/libclamav/mbox.c?revision=1.372&view=markup > > Probably b) has been coded with full intent. Have I missed anything? b) is a completely different story -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkoj

Re: [Clamav-devel] --no-phishing(-scan-urls)?

2007-01-06 Thread Tomasz Kojm
ishing and update its description in the -h > output to make that clear, maybe to something like > > --no-phishing-sigs Disable signature-based phishing > detection Hi Robert, both --no-phishing and DetectPhishing have been renamed. Thanks, -- oo.

Re: [Clamav-devel] a cry for help

2006-12-21 Thread Tomasz Kojm
tree is deemed > appropriate, and give a url to an approriate patch. I am willing to do > whatever would be useful to make this issue disappear. If you want to > do it by phone even, email me off list and we can set something up. "Use the bugzilla, Luke." -- oo.

Re: [Clamav-devel] Scan a list of strings (chars array)

2006-11-07 Thread Tomasz Kojm
k like my list :) > But i'm sure it's possible to hack somewhere and implement a sort of > custom-version :D yes, you need to hack your own code -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \...

Re: [Clamav-devel] [PATCH] fix typo

2006-11-05 Thread Tomasz Kojm
ctively. -- oo..... Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Mon Nov 6 00:14:47 CET 2006 ___

Re: [Clamav-devel] [PATCH] small speed up for 'cli_findpos' in 'libclamav/matcher-ac.c'

2006-11-05 Thread Tomasz Kojm
On Sun, 5 Nov 2006 20:40:08 +0100 "Christophe Jaillet" <[EMAIL PROTECTED]> wrote: > Hi, > > in the function 'cli_findpos' of 'libclamav/matcher-ac.c', a few tests can > be avoided by 'breaking' when we have found what we are looking for

Re: [Clamav-devel] Tb extension

2006-11-05 Thread Tomasz Kojm
On Sun, 05 Nov 2006 22:34:53 +0100 budtse <[EMAIL PROTECTED]> wrote: > Tomasz Kojm wrote: > >> > >> Any other suggestions are very welcome (since i'm not an expert in > >> writing open/portable code, nor an expert in security). > >> > >>

Re: [Clamav-devel] Tb extension

2006-11-05 Thread Tomasz Kojm
On Sun, 05 Nov 2006 20:54:10 +0100 budtse <[EMAIL PROTECTED]> wrote: > Tomasz Kojm wrote: > > On Sun, 05 Nov 2006 17:09:12 +0100 > > Gianluigi Tiesi <[EMAIL PROTECTED]> wrote: > > > > > >> I think you can avoid to pick shitty clamav code :P &

Re: [Clamav-devel] Tb extension

2006-11-05 Thread Tomasz Kojm
On Sun, 05 Nov 2006 17:09:12 +0100 Gianluigi Tiesi <[EMAIL PROTECTED]> wrote: > I think you can avoid to pick shitty clamav code :P What code are you talking about? -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.ne

Re: [Clamav-devel] making concurrent freshclam

2006-10-06 Thread Tomasz Kojm
OTECTED] etc]$ I'm already aware of this issue but I'm not going to address it until I get a definite answer on my question. https://wwws.clamav.net/bugzilla/show_bug.cgi?id=56 -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.n

Re: [Clamav-devel] making concurrent freshclam

2006-10-06 Thread Tomasz Kojm
On Fri, 06 Oct 2006 11:32:52 +0100 Nigel Horne <[EMAIL PROTECTED]> wrote: > Tomasz Kojm wrote: > > On Fri, 06 Oct 2006 10:59:58 +0100 > > Nigel Horne <[EMAIL PROTECTED]> wrote: > > > >> I have found that starting concurrent copies of freshclam can give

Re: [Clamav-devel] making concurrent freshclam

2006-10-06 Thread Tomasz Kojm
logfile locking code, > which it's true should be addressed. What about "LogFileUnlock yes"? -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC89

Re: [Clamav-devel] Patch to allow spaces in file and directorynamesin clamd/freshclam config files

2006-09-14 Thread Tomasz Kojm
te an opening quote without a closing quote and > > > strip the opening quote. > > > > It would be better to warn the user and return an error. > > OK. This version does that. Patch applied in CVS, many thanks! -- oo. Tomasz Kojm <[EMAIL PROTECTED]&g

Re: [Clamav-devel] [patch] workaround for flawed DNS server in Alcatel SpeedTouch 510

2006-09-13 Thread Tomasz Kojm
d.clamav.net descriptive text "0.88.4:40:1672:1155767516:1" > > The patch I have attached makes freshclam try an ANY-query if the > TXT-query has failed. The patch looks OK. Thanks, -- oo. Tomasz Kojm <[EMAIL PROTE

Re: [Clamav-devel] Memory amd file handle leaks in error paths of shared/cfgparser.c

2006-09-12 Thread Tomasz Kojm
obably be best if as much as possible were cleaned up correctly. Applied, thanks. -- oo . Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\

Re: [Clamav-devel] Patch to allow spaces in file and directory names in clamd/freshclam config files

2006-09-04 Thread Tomasz Kojm
d by Tomasz Papszun and others What we really need in this case is support for quoted strings (it's in my TODO). Regards, -- oo . Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A

Re: [Clamav-devel] Freshclam ConnectTimeout patch

2006-08-27 Thread Tomasz Kojm
On Fri, 4 Aug 2006 18:19:37 -0300 Everton da Silva Marques <[EMAIL PROTECTED]> wrote: > Freshclam Timeout Patch > http://nucleo.freeservers.com/freshclam-timeout/ Hi Everton, the patch has been applied to the CVS version. Thank you! -- oo..... Tomasz Kojm <[

Re: [Clamav-devel] Freshclam ConnectTimeout patch

2006-07-27 Thread Tomasz Kojm
that must be added is a copyright header in nbconnect.[ch] -- please send these files updated and I will apply the patch in CVS. Thanks, -- oo..... Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV

Re: [Clamav-devel] segfault in freshclam/manager.c

2006-07-17 Thread Tomasz Kojm
On Mon, 17 Jul 2006 05:01:55 +0200 Gianluigi Tiesi <[EMAIL PROTECTED]> wrote: > or freshclam will crash if it doesn't have db files Fixed, thanks. -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.Clam

Re: [Clamav-devel] clamscan/clamdscan shared patch for Interix

2006-06-19 Thread Tomasz Kojm
some platforms (it's not enough to modify header files, a proper work-around must be also implemented in the code). Best regards, -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A

Re: [Clamav-devel] Coverity

2006-06-13 Thread Tomasz Kojm
d > be eligible for a free scan from Coverity (funded by the US Homeland > Security Department-funded bug hunt). Hello, we have contacted Coverity and hopefully ClamAV will be added to the list in the near future. Thanks, -- oo . Tomasz Kojm <[EMAIL PROTECTED]&

Re: [Clamav-devel] libclamav patch for Interix

2006-06-07 Thread Tomasz Kojm
Hi Brian, we only accept patches against the CVS version of ClamAV. Regards, -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\

Re: [Clamav-devel] [Patch] database load directly from packed archive

2006-06-07 Thread Tomasz Kojm
n. Instead of doing that, you should make the cli_load*() routines work on buffers and only add new functions for direct reading of .tar.gz. Also, please follow the general rules for patches defined by NJH in clamav-milter/INSTALL (5.1 Patches). -- oo. Tomasz Kojm <[EMAIL PR

  1   2   3   4   5   6   >