Hi people,
browsing clamav source code, (in the struct cl_node) i
found there are aho-corasick fields and boyer-moore
ones; now i'm wondering which algorithm is used when
raw scan (with cl_scanbuff) is performed.
struct cl_node {
...
/* Extended Boyer-Moore */
int *bm_shift;
struct cli_bm_patt **bm_suffix;
/* Extended Aho-Corasick */
struct cli_ac_node *ac_root, **ac_nodetable;
unsigned int ac_partsigs, ac_nodes;
...
};
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
