Can you dissect the email to find what exactly it is in the email causing this?
On Fri, Aug 22, 2008 at 12:48 PM, Noel Jones <[EMAIL PROTECTED]> wrote: > ClamAV 0.94rc1-exp-exp/8073/Fri Aug 22 07:48:21 2008 > > Running on FreeBSD 7.0-RELEASE-p2 amd64 > duplicated on FreeBSD 5.3-SECURITY i386 > > When processing a specific ~120k html file, both clamd and > clamscan crash. Clamscan processes for a number of minutes > and eventually says: > > LibClamAV Error: cli_realloc(): Attempt to allocate 184565600 > bytes. Please report to http://bugs.clamav.net > > when scanning the file with clamdscan, it appears to just hang > with clamd using 99+% cpu, and must run "killall -9 clamd" to > get clamd to stop. > > > Last few lines of debug output (sorry about line wrapping): > > LibClamAV debug: * Submodule SCRENC: On > LibClamAV debug: * Submodule RIFF: On > LibClamAV debug: * Submodule JPEG: On > LibClamAV debug: * Submodule CRYPTFF: On > LibClamAV debug: * Submodule DLP: On > LibClamAV debug: Module PHISHING On > LibClamAV debug: * Submodule ENGINE: On > LibClamAV debug: * Submodule ENTCONV: On > LibClamAV debug: Matched signature for file type HTML data at 116 > LibClamAV debug: in cli_scanhtml() > LibClamAV debug: cli_scanhtml: using tempdir > /var/tmp//clamav-20b37dd747db4958a5ec511b4e742957 > LibClamAV debug: mmap'ed file > LibClamAV debug: JS-Norm: cli_js_init() done > LibClamAV debug: hashtab.c:Growing hashtable 0x805fa7200, > because it has exceeded maxfill, old size:64 > LibClamAV debug: hashtab.c: new capacity: 128 > LibClamAV debug: hashtab.c: Warning: growing open-addressing > hashtables is slow. Either allocate more storage when > initializing, or use other hashtable types! > LibClamAV debug: Table 0x805fa7200 size after grow:128 > LibClamAV debug: hashtab.c:Growing hashtable 0x805fa7200, > because it has exceeded maxfill, old size:128 > LibClamAV debug: hashtab.c: new capacity: 256 > LibClamAV debug: hashtab.c: Warning: growing open-addressing > hashtables is slow. Either allocate more storage when > initializing, or use other hashtable types! > LibClamAV debug: Table 0x805fa7200 size after grow:256 > LibClamAV debug: hashtab.c:Growing hashtable 0x805fa7200, > because it has exceeded maxfill, old size:256 > LibClamAV debug: hashtab.c: new capacity: 512 > LibClamAV debug: hashtab.c: Warning: growing open-addressing > hashtables is slow. Either allocate more storage when > initializing, or use other hashtable types! > LibClamAV debug: Table 0x805fa7200 size after grow:512 > LibClamAV debug: hashtab.c:Growing hashtable 0x80449b4c0, > because it has exceeded maxfill, old size:64 > LibClamAV debug: hashtab.c: new capacity: 128 > LibClamAV debug: hashtab.c: Warning: growing open-addressing > hashtables is slow. Either allocate more storage when > initializing, or use other hashtable types! > LibClamAV debug: Table 0x80449b4c0 size after grow:128 > LibClamAV debug: JS-Norm: in cli_js_parse_done() > LibClamAV debug: JS-Norm: dumped/appended normalized script > to: /var/tmp//clamav-20b37dd747db4958a5ec511b4e742957/javascript > LibClamAV debug: JS-Norm: cli_js_destroy() done > LibClamAV debug: JS-Norm: cli_js_init() done > LibClamAV debug: JS-Norm: in cli_js_parse_done() > LibClamAV debug: JS-Norm: dumped/appended normalized script > to: /var/tmp//clamav-20b37dd747db4958a5ec511b4e742957/javascript > LibClamAV debug: JS-Norm: cli_js_destroy() done > LibClamAV debug: JS-Norm: cli_js_init() done > LibClamAV Error: cli_realloc(): Attempt to allocate 184565600 > bytes. Please report to http://bugs.clamav.net > LibClamAV Error: cli_realloc(): Attempt to allocate 184565600 > bytes. Please report to http://bugs.clamav.net > LibClamAV Error: cli_realloc(): Attempt to allocate 184565600 > bytes. Please report to http://bugs.clamav.net > > With the last line repeated until clamscan is killed. > > Where can I send the offending file? It's a private email > and I can't share it publicly. > > > -- > Noel Jones > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml > -- http://www.volatileminds.net _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
