Introduction to ClamAV's Low Level Virtual Machine (LLVM)
ClamAV 0.96 added a bytecode interpreter and a JIT Low Level Virtual Machine (LLVM), which greatly increased the size of the tarball and extended detection capabilities by allowing it to interpret and execute bytecode. The article walks through writing...