Re: [Clamav-devel] Clam* build incompat with OpenSSL 1.1.0x ? patch available

2017-12-01 Thread Steven Morgan
| head > commit 6f8290632b6e1ddcf08b3a64c6cbc9d8b98571e3 > Author: Steven Morgan <stevm...@cisco.com> > Date: Wed Nov 29 17:38:57 2017 -0500 > > ClamAV 0.99.3 beta2 versioning. > > commit 0a320049f1fe058dbed05606c925bb2ec2584264

Re: [Clamav-devel] Why is error 13 fatal?

2017-10-31 Thread Steven Morgan
gt; proceed. When error 13 is encountered, the whole clamscan process > terminates. > > Mark > > > On 30 Oct 2017, at 7:43 pm, Steven Morgan <smor...@sourcefire.com> > wrote: > > > > Mark, > > > > To clarify, this patch allows the scan of the cur

Re: [Clamav-devel] Why is error 13 fatal?

2017-10-30 Thread Steven Morgan
Mark, To clarify, this patch allows the scan of the current file to continue. ClamAV is not aborting scans of subsequent files, right? THanks, Steve On Mon, Oct 30, 2017 at 1:03 PM, Mark Allan wrote: > Hi Micah, > > Thanks for getting back to me. > > Just so you know, I

Re: [Clamav-devel] Problem compiling with libxml2 and Xcode 9

2017-10-10 Thread Steven Morgan
Yes, I see it fail in the libxml2 test in looking for /usr/lib/system/libsystem_darwin.dylib for x64. Steve On Tue, Oct 10, 2017 at 12:02 PM, Mark Allan wrote: > Hi Steve, > > Attached are the extracted lines from the config.log of the non-working > version. The one

Re: [Clamav-devel] Problem compiling with libxml2 and Xcode 9

2017-10-10 Thread Steven Morgan
Mark, The file config.log should contain the details of the configure test performed for -lxml2. Can you tell what are the relevant differences in those files? Thanks, Steve On Tue, Oct 10, 2017 at 7:48 AM, Mark Allan wrote: > Hi all, > > I just updated Xcode (Apple's

Re: [Clamav-devel] More issues with 0.99.3 beta 1

2017-08-15 Thread Steven Morgan
Mark, Thanks, we are also observing these same FP's in our testing. They are on the roadmap for 0.99.3. Steve On Tue, Aug 15, 2017 at 6:34 AM, Mark Allan wrote: > I have two files which are being wrongly reported as infected by 0.99.3 > beta 1. ClamAV 0.99.2 doesn't

Re: [Clamav-devel] Pull request to add parallel scanning to clamscan

2017-06-20 Thread Steven Morgan
Hi Michal, Thanks for your code submission. I opened a bugzilla bug https://bugzilla.clamav.net/show_bug.cgi?id=11856 to review for ClamAV 0.99.4. Steve ___ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla:

Re: [Clamav-devel] clamav-devel Digest, Vol 138, Issue 1

2016-12-02 Thread Steven Morgan
Ajay, Thanks, good to know. Please keep us posted on anything else in this area as VS2015 is new for the upcoming release. Steve On Fri, Dec 2, 2016 at 2:09 PM, Ajay Parashar wrote: > Hi Steve, > > Thanks for your reply, As per your suggestion i tried to compile >

Re: [Clamav-devel] Building Errors for Windows Platrom

2016-12-01 Thread Steven Morgan
Hi, ClamAV on Windows is moving to Visual Studio 2015 for releases beyond 0.99.2. Please try it with Visual Studio 2015. Steve On Thu, Dec 1, 2016 at 5:06 AM, Ajay Parashar wrote: > Hi, > > I have download the clamav code by using following git URL > git clone

Re: [Clamav-devel] [clamav-devel] New socket to manage dynamic mount/umount

2016-09-19 Thread Steven Morgan
Hi, Thank you for your effort. Probably, the best way is to open a ticket at bugzilla.clamav.net and describe the problem, what you have done, and attach your patches there. Then it can be evaluated, tested, and scheduled for including with the ClamAV code base. Also, include your name so you can

Re: [Clamav-devel] (no subject)

2016-08-30 Thread Steven Morgan
Hi, The documentation for writing signatures for ClamAV is located in docs/signatures.pdf within the ClamAV tar file. ClamAV also supports YARA rules (http://yara.readthedocs.io/en/v3.2.0/writingrules.html), which may be helpful as well. Best wishes for your project, Steve On Mon, Aug 29, 2016

Re: [Clamav-devel] Centralised Management Console for ClamaAV Clients

2016-05-18 Thread Steven Morgan
Hi Traiano, I don't know of any such console applications. If you are up for developing something and you are using clamd, there is a protocol that runs on top of TCP. clamdtop uses this protocol (see 'man clamd' for details). Clamd protocol commands PING, SHUTDOWN, RELOAD, and STATS may be of

Re: [Clamav-devel] Signal Response for clamscan

2016-05-02 Thread Steven Morgan
Daniel, Yes, thanks for your interest! Please open a ticket at bugzilla.clamav.net and attach your patch. We will take a look at it and try to get it into an upcoming release of ClamAV. Thanks, Steve ___ http://lurker.clamav.net/list/clamav-devel.html

Re: [Clamav-devel] Patch to force freshclam download progress meter

2015-12-15 Thread Steven Morgan
Mark, Thank you for sending a patch. Tracking with https://bugzilla.clamav.net/show_bug.cgi?id=11455 Steve On Tue, Dec 15, 2015 at 9:24 AM, Mark Allan wrote: > Hi all, > > With the release of 0.99, I got caught out by a change to freshclam's > output. The end result is

Re: [Clamav-devel] ClamAV(R) blog: ClamAV 0.99 Release Candidate has been posted!

2015-10-16 Thread Steven Morgan
Hi Mark, Thanks for your feedback. Three work arounds were provided in comment 22 of bugzilla 11309 toward the problem of compiling built-in llvm on recent OS X 10.10 releases: - compile llvm unoptimized: ./configure CXXFLAGS='-O0' - use llvm library already your system: ./configure

Re: [Clamav-devel] Clam Scan on Android APK

2015-10-16 Thread Steven Morgan
Hi, What is the virus name? I believe there are byte code signatures that process APKs. Steve On Fri, Oct 16, 2015 at 7:51 AM, Sujit Nandan wrote: > Hi Everybody, > > I want to know how clam creates signature with infected android APK. Right > now we are totally in

Re: [Clamav-devel] Clam Scan on Android APK

2015-10-16 Thread Steven Morgan
One of the triggers for the BC.Exploit.Andr bytecode is the zip file magic at offset 0. If you are using --leave-temps, the inner files are extracted, but the zip file magic is lost. On Fri, Oct 16, 2015 at 7:51 AM, Sujit Nandan wrote: > Hi Everybody, > > I want to

Re: [Clamav-devel] Multipart form data virus file detection

2015-08-19 Thread Steven Morgan
P K, Please open a bugzilla ticket at bugzilla.clamav.net. Please attach the original PDF file and the multipart document. I think there is only multipart support for mail, but we can take a look at the files and see what needs to be done. Thanks! On Tue, Aug 18, 2015 at 2:24 PM, P K

Re: [Clamav-devel] ClamAV built from Source - Assertion failure.

2015-04-21 Thread Steven Morgan
Mohamed, Please see if the pre-compiled Windows binaries work for you. They can be found at: http://sourceforge.net/projects/clamav/files/clamav/win32/0.98.6/ Are you using a Release or Debug build? Steve On Tue, Apr 21, 2015 at 2:31 PM, Mohamed Ibrahim csharpi...@gmail.com wrote: Hi , I

Re: [Clamav-devel] Upgrade win32 Pthreads

2015-01-30 Thread Steven Morgan
Thanks for your report. I've opened ticket 11253 at http://clamav.bugzilla.net for tracking. Steve On Thu, Jan 29, 2015 at 9:43 PM, Andy Singer a...@orbitech.org wrote: When compiling for x64 using Visual Studio 2013, ClamAV hangs when scanning a file. The stack trace is below

Re: [Clamav-devel] [clamav-users] ClamAV(R): ClamAV 0.98.5 beta has been posted!

2014-07-18 Thread Steven Morgan
Mark, Interesting, we'll check out that commented code. We've been working on fixing the code to get rid of compiler warnings. Many are already fixed and will be gone in the final 0.98.5 release. Hope to get rid of most (except for 3rd party code) over the next couple releases. Steve On Fri,

Re: [Clamav-devel] fanotify based on-access scanning doesn't work as expected

2014-07-02 Thread Steven Morgan
Martin, You are correct. I've opened ticket 11049 on bugzilla.clamav.net to track the issues. Thanks, Steve On Mon, Jun 30, 2014 at 12:10 PM, Martin Wilck martin.wi...@ts.fujitsu.com wrote: Hello, I have recently made some experiments with on-access scanning with clamd, using clamav

Re: [Clamav-devel] clamd: Keep scanning while reloading database

2014-04-28 Thread Steven Morgan
Thanks for sending a patch, we will look at integrating it with ClamAV. I have opened bug # 10979 at bugzilla.clamav.net for tracking. On Mon, Apr 28, 2014 at 10:29 AM, Julius Plenz pl...@cis.fu-berlin.dewrote: Hi, * Julius Plenz pl...@cis.fu-berlin.de [2014-04-07 20:43]: 1) Start

Re: [Clamav-devel] enabling DMG and XAR support

2014-03-26 Thread Steven Morgan
FYI, This just in (from clamdoc.pdf): quote The following packages are optional, but required for bytecode JIT support:  GCC C and C++ compilers (minimum 4.1.3, recommended 4.3.4 or newer) the package for these compilers are usually called: gcc, g++, or gcc-c++. /quote Mileage may be better

Re: [Clamav-devel] enabling DMG and XAR support

2014-03-24 Thread Steven Morgan
...@uvasoftware.com mailto:r...@uvasoftware.com wrote: That worked, thanks! On February 10, 2014 at 4:29:41 PM, Steven Morgan ( smor...@sourcefire.commailto:smor...@sourcefire.com) wrote: Rafael, Probably all you need to do install libxmllibxml2-dev, which is used by dmg and xar, then do

Re: [Clamav-devel] enabling DMG and XAR support

2014-03-19 Thread Steven Morgan
MB Data read: 10.02 MB (ratio 1.01:1) Time: 4.845 sec (0 m 4 s) Does this work as expected for anyone else? Mark On 10 Feb 2014, at 23:38, Rafael Ferreira r...@uvasoftware.com wrote: That worked, thanks! On February 10, 2014 at 4:29:41 PM, Steven Morgan ( smor

Re: [Clamav-devel] Wrong type for memory allocation calculation

2014-02-24 Thread Steven Morgan
Ian, Thanks for the report. We are looking into the problem. Steve On Mon, Feb 24, 2014 at 3:08 AM, Ian Collins i...@ianshome.com wrote: Hello, I'm new here, so please forgive me if I'm posting to the wrong list! I think have found a bug in fmap.c which causes a crash when scanning a

Re: [Clamav-devel] Basics of ClamAV: developing for Win8 and dist thru app store

2014-02-18 Thread Steven Morgan
James, Some comments inline: On Mon, Feb 17, 2014 at 9:13 PM, Northern Technical northtech...@gmail.comwrote: Hello, From what I can see so far, ClamAV provides a shared library which does the scanning and provides tools, e.g. unpacking archives for scanning, updating the malware

Re: [Clamav-devel] enabling DMG and XAR support

2014-02-10 Thread Steven Morgan
Rafael, Probably all you need to do install libxmllibxml2-dev, which is used by dmg and xar, then do your configure/make. Steve On Mon, Feb 10, 2014 at 6:05 PM, Rafael Ferreira r...@uvasoftware.comwrote: Folks, I'm compiling clamav 0.98.1 on Linux (Ubuntu 12.04 LTS) and I'm not getting

Re: [Clamav-devel] about the MaxFileSize limit during scan

2014-02-10 Thread Steven Morgan
Hi Oyamada, Thanks, there is a bug report for this issue already in the clamav bugzilla system: #6005. I've attached your report to the bug. Steve On Thu, Feb 6, 2014 at 9:23 AM, Tsutomu Oyamada oyam...@promark-inc.comwrote: Hi, all. We can set a limitation to MaxFileSize and MaxRecursion,

Re: [Clamav-devel] clamav-devel Digest, Vol 100, Issue 6

2013-03-25 Thread Steven Morgan
Hello, Partially, but now I realize that what you are asking is probably more extensive than disabling llvm compilation. Steve On Sat, Mar 23, 2013 at 8:05 AM, G.W. Haywood clamav-de...@jubileegroup.co.uk wrote: Hi there, On Sat, 23 Mar 2013, Steven Morgan wrote: On Thu, 21 Mar 2013, G.W

Re: [Clamav-devel] Does clamav work with hex or characters?

2013-03-25 Thread Steven Morgan
Kaushik, Those assumptions are correct. You should also have a look at the file libclamav/readdb.c. That is where the signatures are read and loaded into memory for the pattern matchers. Steve On Sat, Mar 23, 2013 at 3:34 PM, Kaushik Vaidyanathan kvaid...@andrew.cmu.edu wrote: Hi Matt

Re: [Clamav-devel] New Version of ClamAV

2013-03-22 Thread Steven Morgan
G.W. Haywood, Please try running ./configure with the --disable-llvm option. Steve On Fri, Mar 22, 2013 at 11:47 AM, G.W. Haywood clamav-de...@jubileegroup.co.uk wrote: Hi there, On Thu, 21 Mar 2013, Matt Olney wrote: ... I wanted to solicit some feedback from our users about what you