Christopher X. Candreva <> wrote the following on 23 July 2004 23:19:

> On Fri, 23 Jul 2004, Nigel Horne wrote:
> 
>> Operating system?
> 
> Solaris 8, gcc 3.4.0 . Sorry.
> 
>> Please send me a sample which crashes on your machine, zipped with
>> password "virus" please.
> 
> Will do -- but the mail that is crashing it isn't even a virus. 
> Seems to be spam however.

I am seeing exactly the same behaviour with ClamAV 0.75 on Solaris 8, gcc
version 2.95.3 with any type of email - Clean or infected...

LibClamAV debug: End of header information
LibClamAV debug: parseEmailHeaders: return
LibClamAV debug: in parseEmailBody(nBlobs = 0)
LibClamAV debug: Parsing mail file
LibClamAV debug: mimeType = 5
LibClamAV debug: boundaryStart: line = 'This is a multi-part message in MIME
format.' boundary = '----=_NextPart_000_039C_01C472F1.210C3730'
LibClamAV debug: boundaryStart: line = 'Segmentation Fault

"truss -p <pid>" shows the following at the point of the crash...

write(2, " L i b C l a m A V   d e".., 17)      = 17
write(2, " b o u n d a r y S t a r".., 23)      = 23
    Incurred fault #6, FLTBOUNDS  %pc = 0xFF033144
      siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000
    Received signal #11, SIGSEGV [caught]
      siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000
sigaction(SIGSEGV, 0xFEFEF7A4, 0x00000000)      = 0
setcontext(0xFEA07C38)
    Incurred fault #6, FLTBOUNDS  %pc = 0xFF033144
      siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000
    Received signal #11, SIGSEGV [default]
      siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000
        *** process killed ***


Sean




-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to