Just had a crash from what looks like a bad zip in 20031109. I'm trying
to find the zip that caused it now. Meanwhile, here's the backtrace:
(gdb) backtrace
#0 0x48137489 in fclose () from /usr/lib/libc_r.so.4
#1 0x4807692f in cli_scanzip (desc=6, virname=0x8c9af08, scanned=0x0,
root=0x807d800, limits=0xbfbffc74, options=513, reclev=0x8c9ada8)
at scanners.c:356
#2 0x480771ec in cli_magic_scandesc (desc=6, virname=0x8c9af08,
scanned=0x0,
root=0x807d800, limits=0xbfbffc74, options=513, reclev=0x8c9ada8)
at scanners.c:653
#3 0x48077454 in cl_scandesc (desc=6, virname=0x8c9af08, scanned=0x0,
root=0x807d800, limits=0xbfbffc74, options=513) at scanners.c:692
#4 0x480774b1 in cl_scanfile (
filename=0x8079200
"/var/spool/exim/back/scan/1AJ36Z-000Pjg-Ln/1AJ36Z-000Pjg-Ln-00000.zip",
virname=0x8c9af08, scanned=0x0, root=0x807d800,
limits=0xbfbffc74, options=513) at scanners.c:703
#5 0x804c532 in dirscan (
dirname=0x8c9afbd "/var/spool/exim/back/scan/1AJ36Z-000Pjg-Ln",
virname=0x8c9af08, scanned=0x0, root=0x807d800, limits=0xbfbffc74,
options=513, copt=0x8053400, odesc=3, reclev=0x8c9af04, contscan=0)
at scanner.c:91
#6 0x804c7e2 in scan (
filename=0x8c9afbd "/var/spool/exim/back/scan/1AJ36Z-000Pjg-Ln",
scanned=0x0, root=0x807d800, limits=0xbfbffc74, options=513,
copt=0x8053400, odesc=3, contscan=0) at scanner.c:162
#7 0x804b247 in threadscanner (arg=0x8bd3420) at server.c:80
#8 0x480d60a8 in _thread_start () from /usr/lib/libc_r.so.4
#9 0x0 in ?? ()
Operating system is FreeBSD 4.8. Zip, when extracted from e-mail message
and base64 decoded, runs against clamscan and clamdscan without a problem,
both of them detecting Worm.Mimail.C. I can make both the zip and the
queue file I extracted it from available on request. I can also
re-compile with any needed debugging flags/etc to assist in debugging.
Tim Wilde
--
Tim Wilde
[EMAIL PROTECTED]
Systems Administrator
Dynamic DNS Network Services
http://www.dyndns.org/
-------------------------------------------------------
This SF.Net email sponsored by: ApacheCon 2003,
16-19 November in Las Vegas. Learn firsthand the latest
developments in Apache, PHP, Perl, XML, Java, MySQL,
WebDAV, and more! http://www.apachecon.com/
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
