You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by gb...@apache.org on 2019/12/04 07:53:41 UTC

svn commit: r1870809 - in /spamassassin: branches/3.4/lib/Mail/SpamAssassin/Plugin/OLEVBMacro.pm trunk/lib/Mail/SpamAssassin/Plugin/OLEVBMacro.pm

Author: gbechis
Date: Wed Dec  4 07:53:41 2019
New Revision: 1870809

URL: http://svn.apache.org/viewvc?rev=1870809&view=rev
Log:
better regexp

Modified:
    spamassassin/branches/3.4/lib/Mail/SpamAssassin/Plugin/OLEVBMacro.pm
    spamassassin/trunk/lib/Mail/SpamAssassin/Plugin/OLEVBMacro.pm

Modified: spamassassin/branches/3.4/lib/Mail/SpamAssassin/Plugin/OLEVBMacro.pm
URL: http://svn.apache.org/viewvc/spamassassin/branches/3.4/lib/Mail/SpamAssassin/Plugin/OLEVBMacro.pm?rev=1870809&r1=1870808&r2=1870809&view=diff
==============================================================================
--- spamassassin/branches/3.4/lib/Mail/SpamAssassin/Plugin/OLEVBMacro.pm (original)
+++ spamassassin/branches/3.4/lib/Mail/SpamAssassin/Plugin/OLEVBMacro.pm Wed Dec  4 07:53:41 2019
@@ -415,7 +415,7 @@ sub check_olemacro_csv {
     if ($name =~ /\.csv/i) {
       dbg("Found csv file with name $name");
       $data = $part->decode($chunk_size) unless defined $data;
-      if($data =~ /MSEXCEL|.*Windows\\System32\\cmd\\.exe/) {
+      if($data =~ /MSEXCEL\|.{1,20}Windows\\System32\\cmd\.exe/) {
         $pms->{olemacro_csv} = 1;
       }
     }

Modified: spamassassin/trunk/lib/Mail/SpamAssassin/Plugin/OLEVBMacro.pm
URL: http://svn.apache.org/viewvc/spamassassin/trunk/lib/Mail/SpamAssassin/Plugin/OLEVBMacro.pm?rev=1870809&r1=1870808&r2=1870809&view=diff
==============================================================================
--- spamassassin/trunk/lib/Mail/SpamAssassin/Plugin/OLEVBMacro.pm (original)
+++ spamassassin/trunk/lib/Mail/SpamAssassin/Plugin/OLEVBMacro.pm Wed Dec  4 07:53:41 2019
@@ -415,7 +415,7 @@ sub check_olemacro_csv {
     if ($name =~ /\.csv/i) {
       dbg("Found csv file with name $name");
       $data = $part->decode($chunk_size) unless defined $data;
-      if($data =~ /MSEXCEL|.*Windows\\System32\\cmd\\.exe/) {
+      if($data =~ /MSEXCEL\|.{1,20}Windows\\System32\\cmd\.exe/) {
         $pms->{olemacro_csv} = 1;
       }
     }