50
50
#define CL_EACCES -110 /* access denied */
51
51
#define CL_ENULLARG -111 /* null argument */
52
52
#define CL_ETMPFILE -112 /* tmpfile() failed */
53
#define CL_EFSYNC -113 /* fsync() failed */
53
/* #define CL_EFSYNC -113 *//* fsync() failed */
54
54
#define CL_EMEM -114 /* memory allocation error */
55
55
#define CL_EOPEN -115 /* file open error */
56
56
#define CL_EMALFDB -116 /* malformed database */
63
63
#define CL_EIO -123 /* general I/O error */
64
64
#define CL_EFORMAT -124 /* (internal) bad format or broken file */
65
65
#define CL_ESUPPORT -125 /* not supported data format */
66
#define CL_ELOCKDB -126 /* can't lock DB directory */
67
66
#define CL_EARJ -127 /* ARJ handler error */
72
71
#define CL_DB_PHISHING_URLS 0x8
73
72
#define CL_DB_PUA 0x10
74
73
#define CL_DB_CVDNOTMP 0x20
74
#define CL_DB_OFFICIAL 0x40
75
#define CL_DB_PUA_MODE 0x80
76
#define CL_DB_PUA_INCLUDE 0x100
77
#define CL_DB_PUA_EXCLUDE 0x200
76
79
/* recommended db settings */
77
80
#define CL_DB_STDOPT (CL_DB_PHISHING | CL_DB_PHISHING_URLS)
80
#define CL_SCAN_RAW 0x0
81
#define CL_SCAN_ARCHIVE 0x1
82
#define CL_SCAN_MAIL 0x2
83
#define CL_SCAN_OLE2 0x4
84
#define CL_SCAN_BLOCKENCRYPTED 0x8
85
#define CL_SCAN_HTML 0x10
86
#define CL_SCAN_PE 0x20
87
#define CL_SCAN_BLOCKBROKEN 0x40
88
#define CL_SCAN_MAILURL 0x80
89
#define CL_SCAN_BLOCKMAX 0x100 /* ignored */
90
#define CL_SCAN_ALGORITHMIC 0x200
91
#define CL_SCAN_PHISHING_BLOCKSSL 0x800 /* ssl mismatches, not ssl by itself*/
92
#define CL_SCAN_PHISHING_BLOCKCLOAK 0x1000
93
#define CL_SCAN_ELF 0x2000
94
#define CL_SCAN_PDF 0x4000
83
#define CL_SCAN_RAW 0x0
84
#define CL_SCAN_ARCHIVE 0x1
85
#define CL_SCAN_MAIL 0x2
86
#define CL_SCAN_OLE2 0x4
87
#define CL_SCAN_BLOCKENCRYPTED 0x8
88
#define CL_SCAN_HTML 0x10
89
#define CL_SCAN_PE 0x20
90
#define CL_SCAN_BLOCKBROKEN 0x40
91
#define CL_SCAN_MAILURL 0x80
92
#define CL_SCAN_BLOCKMAX 0x100 /* ignored */
93
#define CL_SCAN_ALGORITHMIC 0x200
94
#define CL_SCAN_PHISHING_BLOCKSSL 0x800 /* ssl mismatches, not ssl by itself*/
95
#define CL_SCAN_PHISHING_BLOCKCLOAK 0x1000
96
#define CL_SCAN_ELF 0x2000
97
#define CL_SCAN_PDF 0x4000
98
#define CL_SCAN_STRUCTURED 0x8000
99
#define CL_SCAN_STRUCTURED_SSN_NORMAL 0x10000
100
#define CL_SCAN_STRUCTURED_SSN_STRIPPED 0x20000
101
#define CL_SCAN_PARTIAL_MESSAGE 0x40000
102
#define CL_SCAN_HEURISTIC_PRECEDENCE 0x80000
96
104
/* recommended scan settings */
97
105
#define CL_SCAN_STDOPT (CL_SCAN_ARCHIVE | CL_SCAN_MAIL | CL_SCAN_OLE2 | CL_SCAN_HTML | CL_SCAN_PE | CL_SCAN_ALGORITHMIC | CL_SCAN_ELF)
155
166
* within a single archive
157
168
unsigned short archivememlim; /* limit memory usage for some unpackers */
170
/* This is for structured data detection. You can set the minimum
171
* number of occurences of an CC# or SSN before the system will
172
* generate a notification.
174
unsigned int min_cc_count;
175
unsigned int min_ssn_count;