ClamAV

Recent Commits

• John Humlick(22 Oct 26)

  Merge pull request #1814 from val-ms/CLAM-3074-mime-boundary-parsing Improve MIME boundary parameter handling

• John Humlick(22 Oct 26)

  Merge pull request #1818 from val-ms/CLAM-3096-handler-type-alert libclamav: avoid duplicate HandlerType alerts after retyping

• John Humlick(22 Oct 26)

  Merge pull request #1843 from val-ms/CLAM-3108-clamsubmit-post Fix clamsubmit submission workflow and error handling

• John Humlick(22 Oct 26)

  Merge pull request #1826 from val-ms/CLAM-3066-apm-string-bounds libclamav: Bound APM partition strings

• John Humlick(22 Oct 26)

  Merge pull request #1825 from val-ms/CLAM-3065-7z-pack-stream-bounds libclamav: Validate 7z folder pack stream ranges

• John Humlick(22 Oct 26)

  Merge pull request #1828 from val-ms/CLAM-3073-autoit-header-bounds libclamav: Validate AutoIt compressed headers

• John Humlick(22 Oct 26)

  Merge pull request #1829 from val-ms/CLAM-3077-ole2-property-bounds libclamav: Harden OLE2 property parsing

• John Humlick(22 Oct 26)

  Merge pull request #1830 from val-ms/CLAM-3086-ac-virname-lifetime libclamav: Clear borrowed names after prefiltering

• John Humlick(22 Oct 26)

  Merge pull request #1831 from val-ms/CLAM-3101-html-tag-contents-bounds libclamav: Bound HTML tag content normalization

• John Humlick(22 Oct 26)

  Merge pull request #1832 from val-ms/CLAM-3102-zip-truncation-alert libclamav: Alert on truncated ZIP members

• Valerie Snyder(29 Sept 26)

  Use page CSRF token for presigned requests

• Valerie Snyder(28 Sept 26)

  Check alternate CA bundle configuration

• Valerie Snyder(28 Sept 26)

  Fix clamsubmit submission workflow and error handling

• Valerie Snyder(26 Aug 26)

  libclamav: Clear borrowed names after prefiltering cli_ac_addsig() temporarily assigns the caller-owned signature name to an AC pattern while adding it to the prefilter. Logical signature subpatterns do not later replace that alias with an owned per-pattern copy, leaving a stale pointer in the compiled matcher. Clear the temporary alias immediately after the prefilter call and make the relative-offset diagnostic safe for patterns without a per-pattern name. Add unit coverage for the logical-subsignature ownership invariant. Reported by Alexander Leidinger. CLAM-3086

• Valerie Snyder(17 Sept 26)

  libclamav: Alert on truncated ZIP members ZIP decompression truncates member output that exceeds MaxFileSize, but the local truncation paths did not report the limit through AlertExceedsMax. This could leave an intentionally incomplete scan with a clean result even when the caller requested limit alerts. Report MaxFileSize at each actual truncation point for stored, DEFLATE/DEFLATE64, BZIP2, and IMPLODE members. Add coverage for each compressed method and verify that the alert remains opt-in. CLAM-3102

• Valerie Snyder(17 Sept 26)

  libclamav: Bound HTML tag content normalization Reserve room for the current input byte when a multibyte full stop is normalized into the fixed-size anchor-text buffer. This prevents the write index from advancing beyond the logical content limit and keeps final NUL termination within the declared array. Preserve the two-byte Big5 full-stop behavior and add boundary coverage for both normalization paths. Reported by Ishan Nim. CLAM-3101

• Valerie Snyder(09 Sept 26)

  libclamav: Reject whitespace after RFC 2231 suffixes Use one boundary parameter parser for tokenizer look-ahead and final boundary selection so malformed extended names cannot become authoritative. Require RFC 2231 suffixes to be immediately followed by their separator while preserving legacy ordinary-name whitespace, spaced suffix, and colon-separator behavior. Cover direct and continued forms with both supported separators. CLAM-3074

• Valerie Snyder(05 Sept 26)

  libclamav: exclude HandlerType rescans from clean cache The clean-cache key does not include the HandlerType used for a retyped layer. Bypass cache lookup and insertion for these layers so one HandlerType scan cannot suppress a later scan of the same content with another handler. Add regression coverage combining ZIP and PE HandlerType signatures with a PE-specific detection. Tests: ctest --test-dir build -V -R '^clamscan$' CLAM-3096

• Valerie Snyder(24 Aug 26)

  libclamav: Validate AutoIt compressed headers Compressed AutoIt EA05 and EA06 members contain an eight-byte header with a four-byte magic value followed by the uncompressed size. The parsers only required four bytes before reading both fields, allowing short inputs to be read beyond their allocation. Require the complete eight-byte header before decompression. Validate variable-length record fields before advancing the parser cursor and consume rejected short payloads so malformed members cannot hide valid members that follow. Harden bitstream and back-reference arithmetic so malformed lengths cannot underflow cursor bounds, overflow match lengths, or copy from uninitialized output. Reported by Nebula Security. CLAM-3073

• Valerie Snyder(03 Sept 26)

  libclamav: avoid duplicate HandlerType alerts after retyping Return clean when evaluating a HandlerType signature on a layer that was already retyped, so the signature is not reported again after the child scan. Add a clamscan regression covering the Target:0 and --allmatch case. Tests: ctest --test-dir build -V -R '^clamscan$' CLAM-3096

• Val S.(27 Aug 26)

  Merge pull request #1758 from Cisco-Talos/slow-signature-repeat-starting-character CLAM-3049 perf(matcher): avoid slow AC heads with repeated bytes

• Valerie Snyder(26 Aug 26)

  libclamav: Harden OLE2 property parsing OLE2 metadata property offsets and lengths are archive-controlled 32-bit values. Adding them in bounds checks could wrap and allow the parser to read beyond the property set while generating JSON metadata. Use subtraction-based range checks for the property-set and typed-value ranges. Decode floating-point properties by endian-converting their bit patterns, reject non-finite values, honor explicit UTF-16 encoding, and preserve unsigned metadata values in JSON. CLAM-3077

• Valerie Snyder(26 Aug 26)

  libclamav: Split parameters after quoted boundaries Canonical boundary parsing kept parameter-shaped text that immediately followed a closing boundary quote in the same argument. This could cause an earlier boundary to be restored after the legacy parser had selected a later value. Split immediate MIME parameter tokens after closing quotes and recognize a resumed boundary after an intervening quoted parameter. Cover ordinary, colon-separated, extended, and continued declarations while preserving whitespace and literal-text compatibility cases. CLAM-3074

• Valerie Snyder(26 Aug 26)

  libclamav: Split before adjacent extended boundaries Preserve whitespace adjacency only when both MIME boundary declarations use the ordinary form. Keep RFC 2231 declarations distinct when they follow ordinary or quoted ordinary boundaries, including continued and colon-separated forms. CLAM-3074

• Valerie Snyder(26 Aug 26)

  libclamav: Split adjacent extended boundaries Limit space-containing MIME boundary compatibility to ordinary parameters so RFC 2231 values retain legacy token boundaries. Cover adjacent direct and continued declarations, trailing text, escaped whitespace, quoted spaces, and colon separators. CLAM-3074

• Valerie Snyder(26 Aug 26)

  libclamav: Align MIME boundary seek state Apply the canonical value quote rules while seeking resumed MIME parameters so embedded quotes cannot hide later boundaries. Honor quoted and escaped semicolons during the seek and cover both real and boundary-like quoted parameter values. CLAM-3074

• Valerie Snyder(26 Aug 26)

  libclamav: Preserve colon-separated boundaries Recognize ClamAV's legacy colon separator during canonical MIME boundary tokenization and resolution so later declarations remain authoritative. Cover direct, extended, continued, escaped-semicolon, whitespace-packed, and mixed-separator forms. CLAM-3074

• Valerie Snyder(26 Aug 26)

  libclamav: Limit MIME quote state to quoted values Only open canonical quoted syntax when a quote begins a parameter value. Treat quotes embedded in an unquoted value as data so they cannot consume later boundary declarations. Cover embedded quotes in both ordinary parameters and boundary values while retaining the quoted media type regression case. CLAM-3074

• Valerie Snyder(26 Aug 26)

  libclamav: Keep boundary lookahead outside quotes Do not treat escaped whitespace inside a quoted media type as the start of a MIME boundary parameter. Add end-to-end coverage that keeps the real boundary following the quoted media type authoritative. CLAM-3074

• Valerie Snyder(26 Aug 26)

  libclamav: Align MIME argument limit handling Allow bounded canonical boundary parsing to inspect the complete Content-Type header instead of returning a stale boundary after 255 tokens. Count whitespace-separated MIME arguments in the legacy parser so a single semicolon chunk cannot bypass the limit or cause unchecked argument growth. Add regression coverage for direct, extended, and continued boundaries at the threshold and for the argument limit heuristic. CLAM-3074