On 2008-12-17 21:28, Thomasz Blaszczyk wrote: >> What kind of data was scanned? >> Was it hand-crafted, automatically generated, or real world files? >> > > I create files by calling in loop function: fputc('my_byte') > i.e: > file_builder -n sizeoffile -xB8 > > So entire file consists of bytes 'B8' and I create 2MB, 4MB file, up > to 60MB files >
You might want to scan something resembling a real world file, and I'm not saying to use /dev/urandom instead of B8. I can think of a much more efficient algorithm to match on B8 bytes... Best regards, --Edwin _______________________________________________ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net