Mailing List Archive

Fuzzy image signatures, Y U no work?
Today I installed 0.105.0 to test the new fuzzy image signatures.

I was able to determine the fuzzy hash for a set of given pictures of
questionable content using:

sigtool --fuzzy-img pr0npic.jpg

Alas, I started up my trusty editor an generated an rezeptfrei.hdb
signature file containing:

pr0n1.jpg;Engine:150-255,Target:0;0;fuzzy_img#cb32363464cb5bca
pr0n1.jpg-2;Engine:150-255,Target:0;0&1;49484452;fuzzy_img#cb32363464cb5bca

and clamscan would bail with:
=============================

LibClamAV Error: cli_loadhash: Invalid value for the size field
LibClamAV Error: cli_loadhash: Problem parsing database at line 1
LibClamAV Error: Can't load /var/lib/clamav/rezeptfrei.hdb: Malformed database
LibClamAV Error: cli_loaddbdir: error loading database /var/lib/clamav/rezeptfrei.hdb
ERROR: Malformed database

I then tried the exact example from
https://blog.clamav.net/2022/03/clamav-01050-release-candidate-now.html
which reads:

--- snip ---
For example:

logo.png;Engine:150-255,Target:0;0;fuzzy_img#af2ad01ed42993c7
logo.png-2;Engine:150-255,Target:0;0&1;49484452;fuzzy_img#af2ad01ed42993c7
--- snip ---

alas, this one fails as well, with the same error message:
==========================================================

LibClamAV Error: cli_loadhash: Invalid value for the size field
LibClamAV Error: cli_loadhash: Problem parsing database at line 1
LibClamAV Error: Can't load /var/lib/clamav/rezeptfrei.hdb: Malformed database
LibClamAV Error: cli_loaddbdir: error loading database /var/lib/clamav/rezeptfrei.hdb
ERROR: Malformed database

So what IS the correct syntax?

--
Ralf Hildebrandt
Charité - Universitätsmedizin Berlin
Geschäftsbereich IT | Abteilung Netzwerk

Campus Benjamin Franklin (CBF)
Haus I | 1. OG | Raum 105
Hindenburgdamm 30 | D-12203 Berlin

Tel. +49 30 450 570 155
ralf.hildebrandt@charite.de
https://www.charite.de
_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: Fuzzy image signatures, Y U no work? [ In reply to ]
* Ralf Hildebrandt via clamav-users <clamav-users@lists.clamav.net>:

> Today I installed 0.105.0 to test the new fuzzy image signatures.

I'm a moron: "Added image fuzzy hash sub-signatures for logical
signatures" -- thus it must be an LDB file :/

> Alas, I started up my trusty editor an generated an rezeptfrei.hdb
> signature file containing:

With rezeptfrei.ldb it's working ok.

Ralf Hildebrandt
Charité - Universitätsmedizin Berlin
Geschäftsbereich IT | Abteilung Netzwerk

Campus Benjamin Franklin (CBF)
Haus I | 1. OG | Raum 105
Hindenburgdamm 30 | D-12203 Berlin

Tel. +49 30 450 570 155
ralf.hildebrandt@charite.de
https://www.charite.de
_______________________________________________

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat