[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Virus Checking - COMPLETELY UNENCUMBERED!



Tim Bell <bhat@trinity.unimelb.edu.au> writes:

> For decompressors which can operate in a pipe (like bzip2, gzip), is
> there anything much wrong with doing the decompressing something
> like this:
> 
>     $ cat $TMPFILE | bzcat | head -c $SIZELIMIT > $TMPFILEOUT
> 
> ?  

No. That is exactly what AMaViS-ng does. And security is the reason
why AMaViS-ng only supports unpacking programs that can unpack things
to stdout.

Anybody tried that 2gig.bz2 trick, yet? ;-)

-Hilko


-- 
To UNSUBSCRIBE, email to debian-devel-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org



Reply to: