From: Christian Roessner <c@roessner-network-solutions.com>
Date: Wed, 1 Mar 2017 13:47:05 +0000 (+0100)
Subject: [Minor] SAVAPI deal correctly with archives
X-Git-Tag: 1.5.1~11^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F1466%2Fhead;p=thirdparty%2Frspamd.git

[Minor] SAVAPI deal correctly with archives
---

diff --git a/src/plugins/lua/antivirus.lua b/src/plugins/lua/antivirus.lua
index d848d789ba..de455f8058 100644
--- a/src/plugins/lua/antivirus.lua
+++ b/src/plugins/lua/antivirus.lua
@@ -529,7 +529,9 @@ local function savapi_check(task, rule)
       elseif string.find(result, '310') then
         -- infected message
         rspamd_logger.debugm(N, task, 'infected message')
-        local vname = rspamd_str_split(result, ' ')[4]
+	-- Recursive result
+	local parts = rspamd_str_split(result, ' <<< ')
+        local vname = rspamd_str_split(parts[2], ';')[1]:match "^%s*(.-)%s*$"
         rspamd_logger.infox(task, 'SAVAPI: virus found: %s', vname)
         yield_result(task, rule, vname)
         save_av_cache(task, rule, vname)