On 05/14/2010 08:59 PM, Mohammed Al-Saleh wrote: > Is this a bug in ClamAV (filtering.c)? > > case CLI_MATCH_NIBBLE_LOW: > spec->start = (p & 0xf); > spec->end = 0xf0 | spec->start; > spec->step = 0x10; > > Should not the step be 1 here?
NIBBLE_LOW means the low nibble is fixed, high nibble is anything, i.e. ?X, where X is a hexadecimal digit. Step 0x10 is correct. ?a = 0a,1a,2a,3a,... Best regards, --Edwin _______________________________________________ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net
