signature_engine.h

См. документацию.

 
#ifndef SIGNATURE_ENGINE_H
#define SIGNATURE_ENGINE_H
 
#include <stddef.h>

#define SIG_MAX_LEN 32U

typedef struct
{
    unsigned char pattern[SIG_MAX_LEN]; 
    unsigned char length;               
    const char   *name;                 
} VirusSignature;

typedef struct
{
    unsigned char carry[SIG_MAX_LEN - 1U]; 
    unsigned int  carry_len;                
} ScanState;

enum Error_Codes_SI
{
    SI_SUCCESS = 0,
    SI_NULL_STATE_POINTER = 1
};

enum Error_Codes_SF
{
    SF_SUCCESS = 0,
    SF_NULL_STATE_POINTER = 1,
    SF_NULL_BLOCK_POINTER = 2,
    SF_NULL_SIGS_POINTER = 3,
    SF_NULL_FLAG_POINTER = 4,
    SF_NULL_MATCH_NAME_POINTER = 5,
    SF_ZERO_SIGNATURE_LENGTH = 6,
    SF_SIGNATURE_TOO_LONG = 7
};
 
int scan_init(ScanState *state);
 
int scan_feed(ScanState *state,
              const unsigned char *block,
              unsigned int block_len,
              const VirusSignature *sigs,
              unsigned int sig_count,
              int *virus_flag,
              const char **match_name);
 
#endif /* SIGNATURE_ENGINE_H */