On Fri, Aug 10, 2012 at 08:08:48AM +0300, Henrik K wrote: > On Thu, Aug 09, 2012 at 07:32:32PM +0100, Anthony Dickinson wrote: > > > > Sorry off subject, but... > > > > Really? Surely no engine would allow incomplete signatures to load and be > > used? > > Well yes you should not make any assumptions. Clamav doesn't care if there > isn't any newline at the end of the file
> it doesn't even seem to complain if the signature hex isn't complete (even > number of characters). Sorry it's morning, it does complain.. Anyways the facts remain, MBL can send incomplete files because the http server does not report Content-Length (they don't seem to serve static files which is just stupid). Also their signature backend could have any number of problems if they can't even get that right. I've been personally filtering out any signatures less than 7 chars for a long time. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
