Password protected RARs

Rick Cooper rcooper at DWFORD.COM
Tue Mar 16 20:58:50 GMT 2004


I thought, this morning, that clamAV was going to detect password
protected RARs but apparently it only works if it's using the
internal unrar (not 3.x). That kind of miffed me a bit so I wrote
a patch for Message.pm that would add the password detection,
unpack and filename/type checks for .RAR files.

I have attached the patch, it requires you have unrar installed,
if not then it just does a return 1;. If Julian would have a look
at it and see if it's worth while that would be nice. You will
note it's a duplication of your UnpackZip function (literal
duplicate) with the appropriate changes to call unrar instead of
the Unzip module, it will detect the password protection and
behaves in every way the same as the Unzip checks do.

I have tested it quite a bit today and have had no problems but I
would feel better if Julian looks it over, and feels it wouldn't
be another resource drain.

Thanks

Rick
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Message.pm.diff
Type: application/octet-stream
Size: 4724 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20040316/953f2bf9/Message.pm.obj


More information about the MailScanner mailing list