Hi All,

I have a problem with a zip file with clamav-0.80:

  inflated =   54KB
  deflated = 1100KB

I have ArchiveMaxCompressionRatio set to default (250)
and this zip file is being tagged as Oversized.Zip.

I'm guessing that the ratio is calculated literally as
the ratio difference between the inflated and deflated
size.

  1100/54 = 20

Am I misunderstanding the ArchiveMaxCompressionRatio
or is this a bug?

See info below.

Thanks for any help on this,

Chris

[EMAIL PROTECTED] virus-issue]# ls -l problem.zip
-rw-r--r--    1 rotis23 rotis23    54133 Dec 23 15:56
problem.zip
[EMAIL PROTECTED] virus-issue]# unzip -l problem.zip
Archive:  problem.zip
  Length     Date   Time    Name
 --------    ----   ----    ----
     3147  12-21-04 16:48   problem/test.ab0
     3153  12-21-04 16:48   problem/test.ab1
     3153  12-21-04 16:48   problem/test.ab2
     3147  12-21-04 16:48   problem/test.abl
     1032  12-21-04 16:48   problem/test.afu
     1436  12-21-04 16:48   problem/test.arp
      904  12-21-04 16:48   problem/test.asv
      904  12-21-04 16:48   problem/test.as~
     1957  12-21-04 16:48   problem/test.crp
     2096  12-21-04 16:48   problem/test.da2
   305764  12-21-04 16:48   problem/test.da3
   175820  12-21-04 16:48   problem/test.da4
      272  12-21-04 16:48   problem/test.da5
   175820  12-21-04 16:48   problem/test.da6
   175820  12-21-04 16:48   problem/test.da7
     8180  12-21-04 16:48   problem/test.das
      105  12-21-04 16:48   problem/test.er1
      163  12-21-04 16:48   problem/test.er4
     1051  12-22-04 09:29   problem/test.err
    41257  12-21-04 16:48   problem/test.fob
    10615  12-21-04 16:48   problem/test.frp
      109  12-21-04 16:48   problem/test.glc
      932  12-21-04 21:34   problem/test.ini
      591  08-31-04 14:39   problem/test.jci
    12432  12-21-04 17:11   problem/test.lbk
     3185  12-21-04 16:48   problem/test.map
     1226  12-21-04 16:48   problem/test.mmf
    43967  12-22-04 09:29   problem/test.obj
    28272  12-21-04 16:48   problem/test.pfu
     1252  12-21-04 16:48   problem/test.ppr
     4622  12-21-04 21:34   problem/test.sum
    20741  12-21-04 16:48   problem/test.tt1
     2897  12-21-04 16:48   problem/test.tt2
     2897  12-21-04 16:48   problem/test.tt3
      426  12-21-04 16:48   problem/test.xrf
       64  12-21-04 21:34   problem/test_0.plg
        0  12-22-04 09:29   problem/
 --------                   -------
  1039409                   37 files
[EMAIL PROTECTED] virus-issue]# unzip problem.zip
Archive:  problem.zip
  inflating: problem/test.ab0
  inflating: problem/test.ab1
  inflating: problem/test.ab2
  inflating: problem/test.abl
  inflating: problem/test.afu
  inflating: problem/test.arp
  inflating: problem/test.asv
  inflating: problem/test.as~
  inflating: problem/test.crp
  inflating: problem/test.da2
  inflating: problem/test.da3
  inflating: problem/test.da4
  inflating: problem/test.da5
  inflating: problem/test.da6
  inflating: problem/test.da7
  inflating: problem/test.das
  inflating: problem/test.er1
  inflating: problem/test.er4
  inflating: problem/test.err
  inflating: problem/test.fob
  inflating: problem/test.frp
  inflating: problem/test.glc
  inflating: problem/test.ini
  inflating: problem/test.jci
  inflating: problem/test.lbk
  inflating: problem/test.map
  inflating: problem/test.mmf
  inflating: problem/test.obj
  inflating: problem/test.pfu
  inflating: problem/test.ppr
  inflating: problem/test.sum
  inflating: problem/test.tt1
  inflating: problem/test.tt2
  inflating: problem/test.tt3
  inflating: problem/test.xrf
  inflating: problem/test_0.plg
[EMAIL PROTECTED] virus-issue]# mv problem
problem      problem_tmp
[EMAIL PROTECTED] virus-issue]# mv problem problem
[EMAIL PROTECTED] virus-issue]# du -h problem
1.1M    problem
[EMAIL PROTECTED] virus-issue]#
[EMAIL PROTECTED] virus-issue]# clamscan problem.zip
problem.zip: Oversized.Zip FOUND

----------- SCAN SUMMARY -----------
Known viruses: 29363
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 0.29 MB
I/O buffer size: 131072 bytes
Time: 0.603 sec (0 m 0 s)
[EMAIL PROTECTED] virus-issue]#



                
__________________________________ 
Do you Yahoo!? 
Yahoo! Mail - Easier than ever with enhanced search. Learn more.
http://info.mail.yahoo.com/mail_250
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Reply via email to