On 2008-12-16 01:13, Thomasz Blaszczyk wrote:
Hello,
I just reviewed few multi-pattern string scanning algorithms.
And there are many variants for multi-pattern for Boyer-Moore.
I am curious if the one implemented in Clamav is Boyer-Moore-Horspool
or the one taken from authors of GLIMPSE or
And there is also 'groot'.
Tom
On Tue, Dec 9, 2008 at 4:51 PM, Thomasz Blaszczyk [EMAIL PROTECTED] wrote:
Thank you for answer,
I have another question. I cannot figure out meaning for ftonly and troot.
Can I get some explanation for this 2 variables?
They are used in matcher.c [code
Thank you for fast reply,
Sorry for bothering you again. I am missing something in this huge project.
I cannot understand why both functions: cli_ac_scanbuff and
cli_ac_scanbuff are called in one cli_scandesc() function call.
I just have one signature in database and for me it was obvious that
Another thing,
If I force troot-ac_only=0
if(troot) {troot-ac_only=0;printf(\ntroot-ac_only IN TROOT!!!%d
\n,troot-ac_only);
if(troot-ac_only || (ret = cli_bm_scanbuff(upt, length,
ctx-virname, troot, offset, ftype, desc)) != CL_VIRUS)
ret = cli_ac_scanbuff(upt,
On 2008-12-10 01:31, Thomasz Blaszczyk wrote:
Another thing,
If I force troot-ac_only=0
If I force groot-ac_only to 1 I got 'segmet fault' (seg fault is
another funciotn - cli_scanraw)
That is not the way to go. If you want aconly, use the --dev-ac-only
flag, don't forcibly set it.
You
On 2008-12-06 20:34, Thomasz Blaszczyk wrote:
Thanks,
There were many troubles. (I am building project from files I have
copied from libclamav to my new created project folder).
In many files a line #include inttypes.h was missing.
Guess something wrong with cltypes.h (#ifndef __CLTYPES_H).
