Mailing List Archive

[QUESTION] How does clamAV updates the signature database on-the-fly?
I'm researching ways of updating a signature database on-the-fly, so the way
clamAV does it, can really help me out...
I mean, what structures are there? how is it implemented?
Is there a data structure used to store the signatures on memory? If so, how
exactly is it updated?
what type of data structure? dynamic or static?
I need to know if you guys use a pointer to the structure, and then just set
it to point to the new updated structure,
and if for example, there's a condition, that limits when this pointer can
be changed...like a thread needing to finish first....

I tried to look for the implementation on the code itself...but it's so
big...i don't know in which file to look =/



Thank you very much, for the help

Thyago
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net
Re: [QUESTION] How does clamAV updates the signature database on-the-fly? [ In reply to ]
On Wed, 28 Jul 2010 20:18:57 -0300 thyago <thyago.porpino@gmail.com> wrote:
> I'm researching ways of updating a signature database on-the-fly, so the way
> clamAV does it, can really help me out...
> I mean, what structures are there? how is it implemented?
> Is there a data structure used to store the signatures on memory? If so, how
> exactly is it updated?
> what type of data structure? dynamic or static?
> I need to know if you guys use a pointer to the structure, and then just set
> it to point to the new updated structure,
> and if for example, there's a condition, that limits when this pointer can
> be changed...like a thread needing to finish first....
>
> I tried to look for the implementation on the code itself...but it's so
> big...i don't know in which file to look =/

You should analyze the calls to cl_engine_*() and the functions themselves

--
oo ..... Tomasz Kojm <tkojm@clamav.net>
(\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg
\..........._ 0DCA5A08407D5288279DB43454822DC8985A444B
//\ /\ Thu Jul 29 10:11:30 CEST 2010
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net