[Clamav-users] Bug with 0.71 not limiting archive scans? (e.g. 42.zip)

[Jason Haar]

I've just tried running clamdscan and clamscan over 42.zip (with archive 
limits enabled) and it doesn't exit in any decent time (i.e. it's still 
running 15 minutes later at 99% CPU).

e.g
clamscan -v --debug --max-files=100 --max-recursion=4 42.zip
The strange thing is it reports things like:
LibClamAV debug: Zip -> page e.zip, compressed: 10234, normal: 4168266, 
ratio: 407 (max: 200)

That ratio is > 200 - so it should just stop - right?
Also, if I change that to "-max-recursion=2", the ratio drops to 18 out 
of 200 - shouldn't that remain the same irrespective of the 
max-recursion value?

--
Cheers
Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users