Hi there

[Summary: I reported such problems back in 0.67 - they still exist]

After seeing that 0.70 had been released, I thought to try clamd again with
Qmail-Scanner. Unfortunately, within 8 hours of using it successfully, clamd
hung and that was that. Any further invocations of clamdscan just hung
forever :-( If it matters, all those clamd processes didn't take much CPU...

By the time I got to look at it, I had over 440 clamd processes running,
with the cause of the problem being one that was 49M in process size!

I run clamd under daemontools with a memory limit of 50M. What looks to have
happened is some bug in clamd allowed it to attempt to grow to 50M - the
limit stopped it, and then all future clamd processes couldn't allocate
memory either. 

I can't be sure, but I think the message it was scanning was a standard
Outlook text message - i.e. a text/plain plus a winmail.dat file... [yeah
Microsoft, let's take a nice 1.5Kb text e-mail and turn it into a 7Kb
monster - well done]


Details:

OS: Redhat8
Ver: 0.70

/service/clamd/run
#!/bin/sh
rm -f /var/spool/qmailscan/clamd
exec /usr/local/bin/softlimit -a 50000000 /usr/local/sbin/clamd \ 
 > /var/log/clamd.log 2>&1
 
 /var/log/clamd.log ends with tonnes of:
 
 LibClamAV Warning: Ignoring empty field in " charset="
 LibClamAV Warning: Ignoring empty field in " charset="
 LibClamAV Error: cli_realloc(): Can't re-allocate memory to 2384880 byte.
 realloc_problem: Cannot allocate memory
 LibClamAV Error: cli_realloc(): Can't re-allocate memory to 3420 byte.
 realloc_problem: Cannot allocate memory
 ...
 
-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to