CLAMBC(1)

📦
version 1.5.4 · 6 versions
, in arch rolling, nixpkgs unstable, opensuse-leap 16.0, ubuntu jammy, ubuntu noble, ubuntu resolute, ubuntu stonking

💖 CLAMBC(1) — the Clam AntiVirus bestie files 💖

okay so bestie, welcome to clambc, aka the Bytecode Analysis and Testing Tool from the Clam AntiVirus fam. she's the girl who lets you poke at bytecode signatures and see how they perform. let's get into it 💅

✨ SYNOPSIS ✨

clambc <file> [function] [param1 ...]

🦋 DESCRIPTION 🦋

so. bytecode signatures are a platform independent executable plugin format that extend ClamAV's malware detection capabilities. that's the whole vibe — little plugins that make ClamAV see more malware. 🫶

this tool exists for signature authors and ClamAV developers to test bytecode signatures and to test bytecode runtime performance. iykyk.

Caution: You should NEVER run bytecode signatures from untrusted sources. Doing so may result in arbitrary code execution. not me being dramatic, that is literally what the manpage says. do not do it. periodt. 💀

🌸 OPTIONS 🌸

  • --help, -h — Show help. your girl's got your back when you forget stuff 🎀
  • --version, -V — Show version. just the numbers, no notes ✨
  • --debug — Show debug. all the messy details, out loud 🙈
  • --force-interpreter, -f — Force using the interpreter instead of the JIT. no speedrunning today, we're doing it the long way 💅
  • --trust-bytecode, -t — Trust loaded bytecode (default yes). bestie trust is default-on, but you can turn it off if you're feeling suspicious 👑
  • --info, -i — Print information about bytecode. gossip about the bytecode, basically 🍓
  • --printsrc, -p — Print bytecode source. show me the receipts 📜
  • --printbcir, -c — Print IR of bytecode signature. the intermediate representation, lowkey the main character 🧚
  • --input, -r — Input file to run the bytecode on. gotta feed her something 🌈
  • --trace <level>, -T — Set bytecode trace level 0..7 (default 7). yes, 0 through 7, and yes, the default is the max. she's chatty fr fr 🔥
  • --no-trace-showsource — Don't show source line during tracing. for when the tracing is giving too much 💀
  • --statistics=bytecode — Collect and print bytecode execution statistics. numbers, we love numbers ⭐
  • file — File to test. the whole point, honestly 💜

💖 CREDITS 💖

Please check the full documentation for credits. they said it, not me 🫶

👑 AUTHOR 👑

Tomasz Kojm <tkojm@clamav.net>, Kevin Lin <klin@sourcefire.com>

🌟 SEE ALSO 🌟

clamscan(1), sigtool(1)

and that's the whole page, bestie!! this was ClamAV 1.5.4, dated September 2014, and it slayed in the most CLAMBC(1) way possible. go forth and test responsibly (and never ever run untrusted bytecode, i'm begging) 💅✨🎀

📦 where this page comes from