On Tue, 2003-09-16 at 19:15, Tomasz Kojm wrote:
> > I have a feeling that (recursive) archieve processing should be a
> > separate library, I mean, separate from scanning for viruses.  The API
> > could be like this:
> > 
> > process_archieve(char *arch, size_t asize, int recurse_depth,
> >     int(*scan_buffer)(char *buf, size_t size, void *priv),
> >     void *priv);
> > 
> > scan_buffer would be called on every indivilual archieve member mmaped()
> > into RAM (or better just unpacked into RAM).
> > 
> > What do you think?
>  
> There might be an additive command for that, but using it instead of the
> current model will break the "transparent" archive support.

Maybe transparent processing could be a wrapper around archieve
processor and direct scanner?

blind_scan:
        magic analysis detects archieve?
                yes: process_archieve(data,...,virus_scan,...)
                no: virus_scan(data,...)

Just a thought...

Eugene



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Clamav-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-devel

Reply via email to