[Regular Expression] HEXSIG[x-y]aa
"kimdien" <[email protected]>
| Newsgroups | gmane.comp.security.virus.clamav.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi,
My thesis is related with regex signatures in ClamAV database.
I don't understand type HexSIG[x-y]aa or aa[x-y]HexSIG.
In https://bugzilla.clamav.net/show_bug.cgi?id=776#add_comment, you use
testsig:7:5:64[4-4]61616161{2}6262[3-6]65:27
And test data(HexSIG):64616161616161616164646262626262636365 is match with
testsig
My question is:
is HexSIG: "64676767676161616164646262626262636365" match?
is HexSIG: "64616161616161616169696262626262636365" match?
Please help me
Best Regards
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net
http://www.clamav.net/contact.html#ml