[R-pkg-devel] False positive antivirus reports on package vignettes

[Dirk Eddelbuettel]

On 18 February 2025 at 16:26, Ivan Krylov wrote:
| On Tue, 18 Feb 2025 07:05:06 -0600
| Dirk Eddelbuettel <edd using debian.org> wrote:
| 
| > one of the two pdf vignettes (which I happen to create as a shallow
| > Rnw -> pdf wrapper around a pre-made pdf, here that inner pdf had not
| > changed in five years, sigh ...)  now upsets one of these (idiotic,
| > but hey, I am sure that at least they are very expensive) anti-virus
| > checkers.
| 
| Does VirusTotal confirm the non-zero virus detection?

I have no idea. They have not communicated with me. I am only the relevant
author so why whould they. 
 
| > Has anybody figured out a workaround?
| 
| Last time [*] it turned out to be a collision of a 32-bit checksum in
| the virus database. Try re-compressing the vignette or finding a
| comment that can be changed. For example, (La)TeX-produced vignettes
| sometimes contain a comment that says charToRaw('PTEX') |> as.integer()
| |> bitwXor(0x80) |> as.raw(), and these four bytes can be replaced by
| four spaces.

Can you translate that tip into an actionable `sed` (or, of course `Rscript`
or `r`) expression I could add to the Makefile?

I just updated the (outdated, here) bibliography also adding DOI fields so we
have a net gain.  The particular vignette needs a refresh, I will try to
check some content too.

Dirk

-- 
dirk.eddelbuettel.com | @eddelbuettel | edd using debian.org