diff options
| author | Andrew Lewis <nerf@judo.za.org> | 2020-11-04 15:39:45 +0200 |
|---|---|---|
| committer | Andrew Lewis <nerf@judo.za.org> | 2020-11-04 15:39:45 +0200 |
| commit | c167e307883e84dc60f3acf193f3ef4a3804a535 (patch) | |
| tree | 1474ac89de90e5b857cfef2962de7e156983632d /lualib/lua_scanners | |
| parent | 6e105da2247e85be60ff31f6046dc8e24c87d807 (diff) | |
| download | rspamd-c167e307883e84dc60f3acf193f3ef4a3804a535.tar.gz rspamd-c167e307883e84dc60f3acf193f3ef4a3804a535.zip | |
[Fix] Fix ClamAV result for cached encrypted file (#3395)
Diffstat (limited to 'lualib/lua_scanners')
| -rw-r--r-- | lualib/lua_scanners/clamav.lua | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/lualib/lua_scanners/clamav.lua b/lualib/lua_scanners/clamav.lua index 855eefac9..7c56f5798 100644 --- a/lualib/lua_scanners/clamav.lua +++ b/lualib/lua_scanners/clamav.lua @@ -139,10 +139,11 @@ local function clamav_check(task, content, digest, rule) if string.find(vname, '^Heuristics%.Encrypted') then rspamd_logger.errx(task, '%s: File is encrypted', rule.log_prefix) common.yield_result(task, rule, 'File is encrypted: '.. vname, 0.0, 'encrypted') - cached = 'encrypted' + cached = 'ENCRYPTED' elseif string.find(vname, '^Heuristics%.OLE2%.ContainsMacros') then rspamd_logger.errx(task, '%s: ClamAV Found an OLE2 Office Macro', rule.log_prefix) common.yield_result(task, rule, vname, 0.0, 'macro') + cached = 'MACRO' elseif string.find(vname, '^Heuristics%.Limits%.Exceeded') then rspamd_logger.errx(task, '%s: ClamAV Limits Exceeded', rule.log_prefix) common.yield_result(task, rule, 'Limits Exceeded: '.. vname, 0.0, 'fail') |