9005 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Kevin Lin	523e4264e0	msxml_parser: add MSXML_JSON_MULTI option for tracking multiple entries for same key	2015-12-17 16:18:17 -05:00
Kevin Lin	b6549d301e	json: allow for object or array insertion into array	2015-12-17 16:18:17 -05:00
Kevin Lin	6cd5a9dc4e	hwpole2: new filetype and handler for hwp embedded ole2 files	2015-12-17 16:18:17 -05:00
Mickey Sola	631baca8d5	bb11443 - fixing possible oob dereference when parsing mbox files	2015-12-17 12:47:00 -05:00
Mickey Sola	bc80d89afc	bb11442 - adding explicit wwunpack oob checks	2015-12-17 12:47:00 -05:00
Mickey Sola	2e67cefc17	bb11445 - fixing edge case where a null terminator was unintentionally written into an adjacent buffer.	2015-12-17 12:47:00 -05:00
Kevin Lin	b8af0f70f5	hwpml: use msxml_parser callback scanner for binary data	2015-12-16 16:16:01 -05:00
Kevin Lin	416456da73	msxml_parser: add callback-based scanning mechanism	2015-12-16 16:16:01 -05:00
Kevin Lin	d2eea44a6d	HWPML: added hwpml_keys for hwpml parsing	2015-12-16 16:16:01 -05:00
Kevin Lin	904fe15510	add HMPML filetype, tab fixes in filetype.c	2015-12-16 16:16:01 -05:00
Kevin Lin	66e314847c	msxml_parser: add MSXML_SCAN_B64_TRIM4 key field (for HWPML)	2015-12-16 16:16:01 -05:00
Kevin Lin	c09f95f480	Hwp: respect the len argument to the decompress_and_callback	2015-12-16 16:16:00 -05:00
Kevin Lin	0361351cba	Hwp5.x: change to use decompress callback + general debug message changes	2015-12-16 16:16:00 -05:00
Kevin Lin	fad48cf5b6	Hwp3.x: inflate compressed segment and offset tracking	2015-12-16 16:16:00 -05:00
Kevin Lin	5b2a3e5ad1	Hwp3.x: simplify property string handling	2015-12-16 16:16:00 -05:00
Kevin Lin	5cab01bd9f	Hwp3.x file header parsing and preclass	2015-12-16 16:16:00 -05:00
Kevin Lin	404b1e3e5b	changed 'HwpSummaryInfo' to 'Hwp5SummaryInfo'	2015-12-16 16:16:00 -05:00
Kevin Lin	621c90d8bf	autoreconf	2015-12-16 14:57:13 -05:00
Kevin Lin	8f4bf30ec2	pcre: fixed minimum pcre version check	2015-12-16 14:56:56 -05:00
Steven Morgan	bb6379cab9	bb11454 - correct if/else bracketing for ooxml file typing.	2015-12-15 12:06:15 -05:00
Steven Morgan	1f85811128	bb11452 - endianess correction for swf files on sparc - patch supplied by Jim Morris.	2015-12-11 19:55:16 -05:00
Kevin Lin	2ee7af7b06	add lower limit to pcre and fix various pcre config issues	2015-12-10 13:23:52 -05:00
Mickey Sola	d6a7a3e5ed	bb11424 - correcting buffer alignemnt for riff detection on sparc systems; patch by Jim Morris	2015-12-09 16:37:41 -05:00
Steven Morgan	06251c2d5c	autoreconf for bb11447.	2015-12-09 16:33:06 -05:00
Andreas Cadhalpun	3189987680	fix detecion of libcheck without pkg-config file ... Signed-off-by: Steven Morgan <smorgan@sourcefire.com>	2015-12-09 16:01:47 -05:00
Kevin Lin	60c0c0d832	hwp: fixed windows build	2015-12-09 15:23:35 -05:00
Kevin Lin	cd8bceda77	add HWP5 filetype tracking to preclassification	2015-12-09 11:43:35 -05:00
Kevin Lin	9103b7e984	various name changes and dereference fix	2015-12-09 10:41:53 -05:00
Kevin Lin	146fbb29ad	add HWP 3.x internal filetypes	2015-12-09 10:41:52 -05:00
Kevin Lin	5acdcfcb17	add hwp5 contents to preclass set	2015-12-09 10:41:52 -05:00
Kevin Lin	ebca1de02b	autoreconf	2015-12-09 10:41:52 -05:00
Kevin Lin	9a1232d280	HWP: parsing and scanning, add new source files	2015-12-09 10:41:52 -05:00
Kevin Lin	5fce7b44f1	proper identification of HWP file format	2015-12-09 10:41:52 -05:00
Kevin Lin	033145cc9b	removed redundant declaration of cli_ole2_summary_json	2015-12-09 10:41:52 -05:00
Steven Morgan	fd1e2dd3ad	bb11438 - strengthen file typing for OOXML.	2015-12-08 18:37:38 -05:00
Mickey Sola	a0fb64197f	updating sig normalization function to comply with older standards	2015-12-03 10:05:53 -05:00
Mickey Sola	5f86ff20cd	bb-11099 - normalization of whitelist signatures	2015-12-02 14:07:23 -05:00
Steven Morgan	e8fa23ac7f	github issue #9 - wrong length & offset.	2015-12-02 16:23:48 -05:00
Mickey Sola	7f8862a816	bb11431 - cleaning up yara config macro	2015-11-18 15:26:37 -05:00
Mickey Sola	d98d6fdbd1	bb11432 - resolving onaccess warnings	2015-11-18 15:01:09 -05:00
Kevin Lin	07e80411dc	regenerated signature documentation	2015-11-12 10:33:36 -05:00
Kevin Lin	8c0425473a	github-issue#33 - fix incorrect subsignature modifier examples	2015-11-12 10:33:10 -05:00
Kevin Lin	b461497f21	autoreconf	2015-11-05 12:50:02 -05:00
Kevin Lin	4b82656100	fix compilation issue with clamsubmit on OSX 10.11	2015-11-05 12:49:18 -05:00
Kevin Lin	5dd34c851a	fix LLVM SSL compilation issues for MacOSX	2015-11-05 12:45:33 -05:00
Kevin Lin	51aa1417e5	autojunk'd	2015-11-04 17:57:00 -05:00
Kevin Lin	f36da5014f	bb#11414 - fix for static linking of LLVM	2015-11-04 17:55:32 -05:00
Steven Morgan	c670ffc826	Changelog	2015-11-04 16:48:03 -05:00
Steven Morgan	b5581c8722	0.99-rc2 NEWS/README.	2015-11-04 16:28:40 -05:00
Steven Morgan	cd02ca436c	0.99-rc2 Changelog.	2015-11-04 15:57:20 -05:00