Hi Al,
Just got home ans was able to test. Test signature from Steve fails to detect on both Linux and Windows. Tested on Linux with 0.98.7 supplied Debian binaries, and 0.99 binary compiled by myself. Tested in Windows with ClamWin supplied binary. Should I submit my copy of the malware somewhere to aid with testing? Kurt On 2015-12-13 20:00, Al Varnell wrote: > I would want to know the results of using the test signature on both systems > first, and file a bug report if it turns out to be a ClamAV problem. > > Sent from Janet's iPad > > -Al- > > On Dec 13, 2015, at 11:49 AM, Kurt Fitzner wrote: > >> The question remains as to why the signature correctly leads to a match in >> Windows but not Linux. If carriage return linefeed handling differences >> between the two OSes are to blame, then I suggest a two pronged approach. >> Correct the signatures, AND patch clamav so that the signatures as written >> are processed the same way. Even if they are suboptimal signatures, I'd >> suggest they should be processed the same way on all platforms. >> >> That's a lot of signatures that may not be working. Perhaps I'm stating the >> obvious, but if CR/LF are involved, it means these are likely scripts and >> such... just the kind of signatures that would be important to catch in >> Linux. > _______________________________________________ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq [1] > > http://www.clamav.net/contact.html#ml [2] -- YOU DON'T KNOW THE QSO OF THE DARK SIDE! Links: ------ [1] https://github.com/vrtadmin/clamav-faq [2] http://www.clamav.net/contact.html#ml _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
