[Clamav-devel] html dtection problem

[Alch]

Title: Message

Hi,

 

I have received oaidl.i file (auto-generated COM include file), which causes clamscan to hang on cygwin and takes 53 seconds to scan 18 MB file on freebsd machine.

From the debug output I have gathered that it incorrectly recognises html in the file and takes ages to scan HTML.

 

If I run ./clamscan --debug --verbose --no-html oaidl.i it takes only 12.5 seconds to scan it.

 

Below is the clamscan debug output (latest CVS: ClamAV devel-20050808/1008).

 

You can download oaidl.i here:

http://www.clamwin.com/download/oaidl.i.gz

 

Regards,

Alex

 

P.S. Link on clamav.net on the mailing lists page http://lists.clamav.net/mailman/listinfo/clamav-devel yields an error "You don't have permission to access /cgi-bin/mailman/ on this server."

./clamscan --debug --verbose oaidl.i
LibClamAV debug: Loading databases from /usr/local/share/clamav
LibClamAV debug: Loading /usr/local/share/clamav/main.cvd
LibClamAV debug: in cli_cvdload()
LibClamAV debug: MD5(.tar.gz) = 7c497735a7e1a3e15dde75832bef48f3
LibClamAV debug: Decoded signature: 7c497735a7e1a3e15dde75832bef48f3
LibClamAV debug: Digital signature is correct.
LibClamAV debug: in cli_untgz()
LibClamAV debug: Unpacking /var/tmp//clamav-2b4305aca5115dbd43a71d6bdb43efdc/COPYING
LibClamAV debug: Unpacking /var/tmp//clamav-2b4305aca5115dbd43a71d6bdb43efdc/main.db
LibClamAV debug: Unpacking /var/tmp//clamav-2b4305aca5115dbd43a71d6bdb43efdc/main.hdb
LibClamAV debug: Unpacking /var/tmp//clamav-2b4305aca5115dbd43a71d6bdb43efdc/main.ndb
LibClamAV debug: Unpacking /var/tmp//clamav-2b4305aca5115dbd43a71d6bdb43efdc/main.zmd
LibClamAV debug: Unpacking /var/tmp//clamav-2b4305aca5115dbd43a71d6bdb43efdc/main.fp
LibClamAV debug: Loading databases from /var/tmp//clamav-2b4305aca5115dbd43a71d6bdb43efdc
LibClamAV debug: Loading /var/tmp//clamav-2b4305aca5115dbd43a71d6bdb43efdc/main.db
LibClamAV debug: Initializing main node
LibClamAV debug: Initializing trie
LibClamAV debug: Initializing BM tables
LibClamAV debug: in cli_bm_init()
LibClamAV debug: BM: Number of indexes = 63744
LibClamAV debug: Loading /var/tmp//clamav-2b4305aca5115dbd43a71d6bdb43efdc/main.hdb
LibClamAV debug: Initializing md5 list structure
LibClamAV debug: Loading /var/tmp//clamav-2b4305aca5115dbd43a71d6bdb43efdc/main.ndb
LibClamAV debug: Loading /var/tmp//clamav-2b4305aca5115dbd43a71d6bdb43efdc/main.zmd
LibClamAV debug: Loading /var/tmp//clamav-2b4305aca5115dbd43a71d6bdb43efdc/main.fp
LibClamAV debug: Loading /usr/local/share/clamav/daily.cvd
LibClamAV debug: in cli_cvdload()
LibClamAV debug: MD5(.tar.gz) = bfef017cae5344a64b3710d3f09790f7
LibClamAV debug: Decoded signature: bfef017cae5344a64b3710d3f09790f7
LibClamAV debug: Digital signature is correct.
LibClamAV debug: in cli_untgz()
LibClamAV debug: Unpacking /var/tmp//clamav-dbd4516dfd29aa26eabbeb0e04b1384c/COPYING
LibClamAV debug: Unpacking /var/tmp//clamav-dbd4516dfd29aa26eabbeb0e04b1384c/daily.db
LibClamAV debug: Unpacking /var/tmp//clamav-dbd4516dfd29aa26eabbeb0e04b1384c/daily.hdb
LibClamAV debug: Unpacking /var/tmp//clamav-dbd4516dfd29aa26eabbeb0e04b1384c/daily.ndb
LibClamAV debug: Loading databases from /var/tmp//clamav-dbd4516dfd29aa26eabbeb0e04b1384c
LibClamAV debug: Loading /var/tmp//clamav-dbd4516dfd29aa26eabbeb0e04b1384c/daily.db
LibClamAV debug: Loading /var/tmp//clamav-dbd4516dfd29aa26eabbeb0e04b1384c/daily.hdb
LibClamAV debug: Loading /var/tmp//clamav-dbd4516dfd29aa26eabbeb0e04b1384c/daily.ndb
Scanning oaidl.i
LibClamAV debug: Matched signature for file type: HTML data
LibClamAV debug: Matched signature for file type: HTML data
LibClamAV debug: Matched signature for file type: HTML data
LibClamAV debug: Matched signature for file type: HTML data
LibClamAV debug: Matched signature for file type: HTML data
LibClamAV debug: Calculated MD5 checksum: afe796d9a95929a5a8d0418914ad120d
LibClamAV debug: in cli_scanhtml()
LibClamAV debug: mmap'ed file
LibClamAV debug: Calculated MD5 checksum: c0ed624c717cd2f10e1e081975fbdcd9
LibClamAV debug: Calculated MD5 checksum: c0ed624c717cd2f10e1e081975fbdcd9
LibClamAV debug: Calculated MD5 checksum: d41d8cd98f00b204e9800998ecf8427e
oaidl.i: OK

 

----------- SCAN SUMMARY -----------
Known viruses: 38187
Engine version: devel-20050808
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 53.37 MB
Time: 50.635 sec (0 m 50 s)

_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html