[Regular Expression] HEXSIG[x-y]aa

"kimdien" <[email protected]>
Newsgroups gmane.comp.security.virus.clamav.devel
Message-ID <[email protected]>
Hi,

My thesis is related with regex signatures in ClamAV database.

I don't understand type HexSIG[x-y]aa or aa[x-y]HexSIG.

 

In https://bugzilla.clamav.net/show_bug.cgi?id=776#add_comment, you use

testsig:7:5:64[4-4]61616161{2}6262[3-6]65:27

 

And test data(HexSIG):64616161616161616164646262626262636365 is match with
testsig

My question is:

is HexSIG: "64676767676161616164646262626262636365" match?

is HexSIG: "64616161616161616169696262626262636365" match?

Please help me

Best Regards

_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

http://www.clamav.net/contact.html#ml
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.