discussion: Oversized.{Zip,RAR} and BLOCKMAX

Hello all,

Recently I got a bug report that eventually boiled down to asking,
"why aren't the Oversized.foo tests wrapped in an if (BLOCKMAX) test
like the other archive checks?"  My first reaction is that --block-max is
not set by default, but this one test is important enough to be enabled
by default.  The submitter is not happy with my logic - they feel that
if it is returning CL_VIRUS when it's not actually a virus, it should
be governed by BLOCKMAX.

So, I promised them that I would ask if there was something I was missing,
and so I am.  I am not asking to change the behavior, just asking for
a discussion in case I'm missing something.  I am well aware that you
can't please all the people all the time, but I wanted to bring it up
for discussion.

Thanks,
-- 
 --------------------------------------------------------------------------
|  Stephen Gran                  | <liiwi> udp - universal dropping of an  |
|  steve@xxxxxxxxxxx             | pigeon                                  |
|  http://www.lobefin.net/~steve |                                         |
 --------------------------------------------------------------------------

signature.asc
Description: Digital signature

_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html