Re: [Clamav-devel] [QUESTION] How does clamAV updates the signature database on-the-fly?

2010-08-14 Thread Ladar Levison
On 8/14/2010 5:30 AM, Török Edwin wrote: Heuristics.Phishing.* will not stop the scan, and report only if nothing else is found. Other engine detections could be changed to behave the same way. Signature based detections however always stop on first match, and that is not configurable. If you wa

Re: [Clamav-devel] [QUESTION] How does clamAV updates the signature database on-the-fly?

2010-08-14 Thread Török Edwin
On Sat, 14 Aug 2010 05:00:46 -0500 Ladar Levison wrote: > On 8/14/2010 3:19 AM, Török Edwin wrote: > >> > >> // Scan the message. The OLE code has a bug in it that causes > >> segfaults. > > > > What bug ?? > > That comment was related to a bug I found in Feb/2008 and v0.92.1, > but has long s

Re: [Clamav-devel] [QUESTION] How does clamAV updates the signature database on-the-fly?

2010-08-14 Thread Ladar Levison
On 8/14/2010 3:19 AM, Török Edwin wrote: // Scan the message. The OLE code has a bug in it that causes segfaults. What bug ?? That comment was related to a bug I found in Feb/2008 and v0.92.1, but has long since been patched. See this email thread for details: http://marc.info/?l=clamav-

Re: [Clamav-devel] [QUESTION] How does clamAV updates the signature database on-the-fly?

2010-08-14 Thread Török Edwin
> /** > * @file /magma/providers/external/clamav.c > * > * @brief Interface for the ClamAV library. > * > * $Author: Ladar Levison $ > * $Date: 2010/08/13 10:32:38 $ > * $Revision: ecaee526d4ba88a141c5b889dd023b13c05c2654 $ > // Scan the message. The OLE code has a bug in it that cause

Re: [Clamav-devel] [QUESTION] How does clamAV updates the signature database on-the-fly?

2010-08-14 Thread Ladar Levison
On 7/28/2010 6:18 PM, thyago wrote: I'm researching ways of updating a signature database on-the-fly, so the way clamAV does it, can really help me out... I mean, what structures are there? how is it implemented? Is there a data structure used to store the signatures on memory? If so, how exactl

Re: [Clamav-devel] [QUESTION] How does clamAV updates the signature database on-the-fly?

2010-07-29 Thread Tomasz Kojm
On Wed, 28 Jul 2010 20:18:57 -0300 thyago wrote: > I'm researching ways of updating a signature database on-the-fly, so the way > clamAV does it, can really help me out... > I mean, what structures are there? how is it implemented? > Is there a data structure used to store the signatures on memory

[Clamav-devel] [QUESTION] How does clamAV updates the signature database on-the-fly?

2010-07-28 Thread thyago
I'm researching ways of updating a signature database on-the-fly, so the way clamAV does it, can really help me out... I mean, what structures are there? how is it implemented? Is there a data structure used to store the signatures on memory? If so, how exactly is it updated? what type of data stru