[Clamav-devel] [Regular Expression] HEXSIG[x-y]aa

kimdien kimdien at ampm.com.vn
Thu Dec 4 21:35:50 EST 2014


Hi,

My thesis is related with regex signatures in ClamAV database.

I don't understand type HexSIG[x-y]aa or aa[x-y]HexSIG.

 

In https://bugzilla.clamav.net/show_bug.cgi?id=776#add_comment, you use

testsig:7:5:64[4-4]61616161{2}6262[3-6]65:27

 

And test data(HexSIG):64616161616161616164646262626262636365 is match with
testsig

My question is:

is HexSIG: "64676767676161616164646262626262636365" match?

is HexSIG: "64616161616161616169696262626262636365" match?

Please help me

Best Regards




More information about the clamav-devel mailing list