clamav-users October 2007 archive
Main Archive Page > Month Archives  > clamav-users archives
clamav-users: [Clamav-users] Signature precedence

[Clamav-users] Signature precedence

From: Karsten Bräckelmann <guenther_at_nospam>
Date: Mon Oct 22 2007 - 17:37:16 GMT

I seem to recall I have come across this before, but I just can't find it. Maybe someone knows off-hand. :)

When using additional, third party signatures, is there any particular order in the signatures? If both, the official as well as the third party sigs match, which one is being reported?

  karsten -- char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}} _______________________________________________ Help us build a comprehensive ClamAV guide: visit