Since the latest daily update, ClamAV has been crashing here with every
email it scans, has anyone else seen this ?
It appears to be related to the new .hdb file containing an EICAR signature.
ClamAV version devel-20040819
Initial backtrace is (more details when I've investigated a bit more):
Program received signal SIGSEGV, Segmentation fault.
__md5_process_block (buffer=0x1006cfc3a, len=64, ctx=0xffffffff7fffea10)
at md5.c:338
338 OP (A, B, C, D, 7, 0xd76aa478);
(gdb) where
#0 __md5_process_block (buffer=0x1006cfc3a, len=64,
ctx=0xffffffff7fffea10)
at md5.c:338
#1 0xffffffff7f10dd04 in __md5_process_bytes (buffer=0x1006cfc3a,
len=121,
ctx=0xffffffff7fffea10) at md5.c:243
#2 0xffffffff7f10d640 in cli_scandesc (desc=1,
virname=0xffffffff7fffedd8,
scanned=0x10010fe00, root=0x100111270, typerec=1) at matcher.c:168
#3 0xffffffff7f11461c in cli_magic_scandesc (desc=1,
virname=0xffffffff7fffedd8, scanned=0x10010fe00, root=0x100111270,
limits=0x100117940, options=107, arec=0xffffffff7fffed0c,
mrec=0xffffffff7fffed08) at scanners.c:1139
#4 0xffffffff7f114b48 in cl_scandesc (desc=6, virname=0xffffffff7fffedd8,
scanned=0x10010fe00, root=0x100111270, limits=0x100117940,
options=107)
at scanners.c:1186
#5 0x0000000100009648 in checkfile (filename=0x1006cf3b0 "cross.gif",
root=0x100111270, limits=0x100117940, options=107) at manager.c:796
#6 0x0000000100008074 in scanfile (filename=0x1006cf3b0 "cross.gif",
root=0x100111270, user=0x0, opt=0x100110050, limits=0x100117940)
at manager.c:469
#7 0x0000000100007218 in scanmanager (opt=0x100110050) at manager.c:245
#8 0x0000000100005844 in clamscan (opt=0x100110050) at clamscan.c:147
#9 0x0000000100006504 in main (argc=2, argv=0xffffffff7ffff6a8)
at options.c:169
% clamscan --debug cross.gif
LibClamAV debug: Loading databases from /opt/clamav/share/clamav
LibClamAV debug: Loading /opt/clamav/share/clamav/daily.cvd
LibClamAV debug: in cli_cvdload()
LibClamAV debug: MD5(.tar.gz) = 7363d800682d5624f7bd0de61f331724
LibClamAV debug: Decoded signature: 7363d800682d5624f7bd0de61f331724
LibClamAV debug: Digital signature is correct.
LibClamAV debug: in cli_untgz()
LibClamAV debug: Unpacking /var/tmp//clamav-3c02b519428c55b6/COPYING
LibClamAV debug: Unpacking /var/tmp//clamav-3c02b519428c55b6/viruses.db2
LibClamAV debug: Unpacking /var/tmp//clamav-3c02b519428c55b6/malware.hdb
LibClamAV debug: Loading databases from /var/tmp//clamav-3c02b519428c55b6
LibClamAV debug: Loading /var/tmp//clamav-3c02b519428c55b6/viruses.db2
LibClamAV debug: Initializing main node
LibClamAV debug: Initializing trie
LibClamAV debug: Initializing BM tables
LibClamAV debug: in cli_bm_init()
LibClamAV debug: Loading /var/tmp//clamav-3c02b519428c55b6/malware.hdb
LibClamAV debug: Initializing md5 list structure
LibClamAV debug: Loading /opt/clamav/share/clamav/main.cvd
LibClamAV debug: in cli_cvdload()
LibClamAV debug: MD5(.tar.gz) = 65cfe3193203ba5ac9ef23de49ce7eba
LibClamAV debug: Decoded signature: 65cfe3193203ba5ac9ef23de49ce7eba
LibClamAV debug: Digital signature is correct.
LibClamAV debug: in cli_untgz()
LibClamAV debug: Unpacking /var/tmp//clamav-a3072b81627cd46d/COPYING
LibClamAV debug: Unpacking /var/tmp//clamav-a3072b81627cd46d/viruses.db
LibClamAV debug: Loading databases from /var/tmp//clamav-a3072b81627cd46d
LibClamAV debug: Loading /var/tmp//clamav-a3072b81627cd46d/viruses.db
LibClamAV debug: Loading /opt/clamav/share/clamav/localsigs.db
LibClamAV debug: Recognized GIF file
LibClamAV debug: in mydoom_log
LibClamAV debug: key: 18446744072513567175
LibClamAV debug: check: 18446744073155550493
zsh: bus error (core dumped) clamscan --debug cross.gif
-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
