aboutsummaryrefslogtreecommitdiffstats
path: root/lualib/lua_magic/patterns.lua
diff options
context:
space:
mode:
authorVsevolod Stakhov <vsevolod@highsecure.ru>2019-09-07 15:11:21 +0100
committerVsevolod Stakhov <vsevolod@highsecure.ru>2019-09-07 15:11:21 +0100
commit0f4f770639d8ca2f472df95ba6dab6fa27e5772a (patch)
treeb2e3f1320b21f719842808444fe2095c2bf3188a /lualib/lua_magic/patterns.lua
parent189fea9a636ed0e1fb4525c697fe4c8ff4af8659 (diff)
downloadrspamd-0f4f770639d8ca2f472df95ba6dab6fa27e5772a.tar.gz
rspamd-0f4f770639d8ca2f472df95ba6dab6fa27e5772a.zip
[Project] Lua_magic: Support ole documents recognition
Diffstat (limited to 'lualib/lua_magic/patterns.lua')
-rw-r--r--lualib/lua_magic/patterns.lua13
1 files changed, 13 insertions, 0 deletions
diff --git a/lualib/lua_magic/patterns.lua b/lualib/lua_magic/patterns.lua
index 003073cab..9bb6df182 100644
--- a/lualib/lua_magic/patterns.lua
+++ b/lualib/lua_magic/patterns.lua
@@ -19,6 +19,8 @@ limitations under the License.
-- This module contains most common patterns
--]]
+local heuristics = require "lua_magic/heuristics"
+
local patterns = {
pdf = {
-- These are alternatives
@@ -82,6 +84,17 @@ local patterns = {
}
}
},
+ -- MS Office format, needs heuristic
+ ole = {
+ matches = {
+ {
+ hex = [[d0cf11e0a1b11ae1]],
+ relative_position = 0,
+ weight = 60,
+ heuristic = heuristics.ole_format_heuristic
+ }
+ }
+ },
-- MS Exe file
exe = {
matches = {