[prev in list] [next in list] [prev in thread] [next in thread]
List: clamav-users
Subject: [Clamav-users] patch to dedect encrypted pdf
From: Andreas Schulze <andreas.schulze () datev ! de>
Date: 2009-09-29 12:48:18
Message-ID: 20090929124818.GA13591 () spider ! services ! datevnet ! de
[Download RAW message or body]
[Attachment #2 (multipart/signed)]
Hello,
clamav has the option --block-encrypted / ArchiveBlockEncrypted
this enables clamav to classify passwordprotected zip- and rarfiles as virus.
this simple patch to libclamav/pdf.c classify passwordprotected pdf in the same way:
--- snip
158,159c158,165
< cli_dbgmsg("cli_pdf: Encrypted PDF files not yet supported\n");
< return CL_CLEAN;
---
> if(DETECT_ENCRYPTED) {
> cli_dbgmsg("cli_pdf: Encrypted PDF found.\n");
> *ctx->virname = "Encrypted.Pdf";
> return CL_VIRUS;
> } else {
> cli_dbgmsg("cli_pdf: Encrypted PDF files not yet supported\n");
> return CL_CLEAN;
> }
--- snap
may the a fault inside ?
--
Andreas Schulze
Internetdienste | P532
DATEV eG
90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196
E-Mail info @datev.de | Internet www.datev.de
Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70
Vorstand
Prof. Dieter Kempf (Vorsitzender)
Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender)
Dipl.-Kfm. Michael Leistenschneider
Jörg Rabe v. Pappenheim
Dipl.-Vw. Eckhard Schwarzer
Vorsitzender des Aufsichtsrates: Reinhard Verholen
["GnuPG-Signatur.asc" (application/pgp-signature)]
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic