[Pkg-clamav-devel] Bug#824817: Bug#824817: Please include bytecode.cvd in one .deb

[Sebastian Andrzej Siewior]

On 2016-05-21 03:26:54 [+0200], Mathieu Parent (Debian) wrote:
> I need this for clamd. I currently do:
> http://anonscm.debian.org/cgit/collab-maint/c-icap-modules.git/tree/debian/tests/virus-scan?id=846f5eaf67f92edb26775317dd4ad1699c61a681
> 
> But this dowork offline.

Ah. You scan for the eicar sample. Okay. So you try to do something like
we do in [0] ? Because that shouldn't work:
|$ sigtool -lbytecode.cvd
|BC.Win32.Patched.User32
|BC.PDF.{JS.HighEntropy}
|BC.ClamAV-Test-File-detected-via-bytecode.{}
|ClamAV-Test-File
|Internal-Test-Signature

since I don't see the "Eicar-Test-Signature" in it. So if you use the
bytecode.cvd from the clamav test-repo you have to test against the files
in the testfiles package. 
If this is what you plan then I could a file like sample.cvd which is
the bytecode.cvd with the 5 signatures.

[0] https://sources.debian.net/src/clamav/0.99.2%2Bdfsg-2/debian/tests/clamd/

> 
> Regards

Sebastian