

The unit test build is included in the time limit for the test itself and was timing out on slower systems. Increased the limit for memory allocations based on untrusted input and altered the warning message when the limit is exceeded so that it is more helpful and less dramatic.ĭramatically improved the build time of libclamav-Rust unit tests. Increased the SONAME major version for libclamav because of ABI changes between the 0.103 LTS release and the 1.0 LTS release.Īdd checks to limit PDF object extraction recursion. The separate repository will make it easier to update the images and fix issues with images for released ClamAV versions.Īny users building the ClamAV Docker image rather than pulling them from Docker Hub will have to get the latest Docker files from the new location. Moved the Dockerfile and supporting scripts from the main ClamAV repository over to a new repository: The ENABLE_EXTERNAL_TOMSFASTMATH build is now ignored. Without this change, database and Windows EXE/DLL authenticode certificate validation may fail. ClamAV requires non-default build options for TomsFastMath to support bigger floating point numbers. The option to build with an external TomsFastMath library has been removed. The last parameter for the function may be set to verify if a CVD's signature is valid before unpacking the CVD content to the destination directory. We may alter this function in a subsequent feature version.Īdded a new function to the public API for unpacking CVD signature archives. This new callback is to be considered unstable for the 1.0 release. The function cl_engine_set_clcb_file_inspection() may be used to enable the callback prior to performing a scan. The new callback function type is clcb_file_inspection defined in clamav.h. This project fixed several known issues with signature detection in all- match mode:Įnabled embedded file-type recognition signatures to match when a malware signature also matched in a scan of the same layer.Įnabled bytecode signatures to run in all-match mode after a match has occurred.įixed an assortment of all-match edge case issues.Īdded multiple test cases to verify correct all-match behavior.Īdded a new callback to the public API for inspecting file content during a scan at each layer of archive extraction.

The newer code is more reliable and easier to maintain. Overhauled the implementation of the all-match feature. Use of the default password will now appear in the metadata JSON.

Support for decrypting read-only OLE2-based XLS files that are encrypted with the default password. The ClamAV 1.0.0 feature release is now stable and available for download on or through Docker Hub.ĬlamAV 1.0.0 includes the following improvements and changes.
