Hi,
On 27.08.2014 09:26, Sebastian Andrzej Siewior wrote:
On 2014-08-26 23:51:49 [+0200], Andreas Cadhalpun wrote:
Apropos libclamunrar: It would be nice if we could get rid of that package
in non-free. There is a free 'unar' package, which can extract RAR v2 and
v3, so I think it should be possible to let unar extract rar archives to
some temporary directory and then let clamav scan the extracted files,
eliminating the need for libclamunrar. Just an idea.
Hmmm. Not sure if there is a typo and you meant 'unrar' instead but
there is also an 'unar' package.
I really meant 'unar', which is a LGPL-2.1+ implementation that can
extract RAR archives.
The former has problems with "some v3"
archives and the latter does not mention any limitions. But then it
depends on gnustep (yay!) and nothing else so I wonder where that rar
code is comming from. It isn't documented as far as I can tell and you
can't study the unrar code. 7z has a rar plugin which is also in
non-free. So I would be suprised if the situation here is different. But
lets have a look :)
Then let me surprise you: it is actually a free implementation, see e.g.
[1].
The only problem I see is that it is no library, but only a command line
tool...
Looking further, there is also libarchive [2], which claims to support
rar (read only, with some limitations).
Best regards,
Andreas
1: https://www.fsf.org/blogs/licensing/free-rarv3-extraction
2: https://tracker.debian.org/pkg/libarchive
_______________________________________________
Pkg-clamav-devel mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-clamav-devel
