AMF
AMF copied to clipboard
GPUOpen-LibrariesAndSDKs
[Bug]: Virus Reported in file_to_header.exe
Describe the bug The file file_to_header.exe seems to have a virus or a false positive.
To Reproduce Run the file_to_header.exe file into virustotal. Oddly, the previous version on this repository seems to be clean.
Setup (please complete the following information): Windows 11.
Debug Log (please upload or paste):
N/A
Expected behavior No viruses detected.
Screenshots You can see the result here - https://www.virustotal.com/gui/file/4430f8912ad061519c33891a6fa8854da5634f37f050bd309ee175b10a53d574
Additional context I'm not sure what changed between the last version and this one.
This virus report is indeed a false positive. The exe is used to turn input shaders into bytecode format. Common antivirus vendors might have recently updated their heuristics in a way that flags this binary. The windows file has not been updated since July-20, 2021 (AMF 1.4.21).
@rhutsAMD would it be possible to add the source code for the executable to the repo or is the executable under an incompatible license or some other restriction?
The source code is trivial and is mostly IO fopen / fclose / fread / fwrite etc …, but we would need to bring it up to public standards and clear it with legal in order to publish.
We have seen such a false positive before.
I see, understandable then.
Would it be possible to request a recompile with the latest, or at least a later version, of Visual Studio to see if it changes the false positive?
The current suggestion is to add this file to your antivirus’s list of allowed exceptions since you cannot compile the binary locally.
Another option is to wait a few days for the next antivirus update or to submit a ticket to the antivirus support team.
I have recompiled the binary with the latest VS 2022 and shared it. The cause of the flag may be related to the binary being downloaded from the internet. Regardless, if you would like to try it, I have shared this recompiled version below: file_to_header.zip
Just a quick update, the recompiled file_to_header.exe is now pushed to the repo itself.