On Thu, May 11, 2006 at 02:31:35PM +0200, [EMAIL PROTECTED] wrote: > Hi, > > I'm currently working on a port of clamav for our embedded firewall > appliance "mGuard". Right now I am trying to implement the database > loading in a way that does not require extra space in the tmp directory > (an extra 10 MB of RAMdisk space to load the database is a problem > on a device with only 64 MB of RAM). So everything is parsed from > the 512 byte blocks read by gzread(), needing only one extra linebuffer > of < 1kB and no unpacked database files in tmp space. > > Please let me know if you're interested in a patch (which is only > tested on our embedded hardware so far ). > > The database loads fine, viruses are detected, however I'm still > getting an error in libclamav when scanning the Eicar Testfile: > > "LibClamAV debug: Bad offset in signature (Eicar-Test-Signature)" > > Since my insight into the scanengine is still limited, could you > give me a hint where to look ? Probably an off-by-one string copy > error while parsing the signature ?
I noticed that in my implementation the order of added patterns is different from the original method. With my method, I'm bound to add the patterns in the exact order they appear in the tar archive, while with the original method the *.db/*.ndb ... files are read in the order of their temp directory entries. Could that pose a problem for the functionality of the root structure ? Best Regards Peter -- Peter Vollmer Software Engineer Innominate Security Technologies AG /device attached security/ Albert-Einstein-Str. 14 D-12489 Berlin, Germany www.innominate.com _______________________________________________ http://lurker.clamav.net/list/clamav-devel.html
