On 2011-04-07 12:03, Török Edwin wrote: > On 2011-04-07 11:36, RACZYNSKI, Kamil wrote: >> David, >> >> I met it. ClamAV on Solaris 9 & 10 SPARC versions. Tried with 0.97, 0.96.5 & >> 0.96.4 . I used binaries from Citrus IT & sunfreeware. Same result - clamd >> crashes - nothing in logs. >> >> I found out that clamd ( as well as clamscan ) crashes when it tries to scan >> some specific .exe file. McAffee detects this .exe file as infected. I >> uploaded it to VirusTotal - it is not recognized by ClamAV. >> http://www.virustotal.com/file-scan/report.html?id=7de229cf3050bff42daae135b65c53f348e6d53ba1d68720c9fd808de5e9dc22-1301235904 >> >> Linux ClamAV versions ( 0.96.5 & 0.97 on Debian & RHEL ) do not crash, but >> they also do not detect malware in this file. >> >> After further testing I managed to make clamscan succesfully scan this file >> without crash. It worked when I scanned it just after installation, before >> running freshclam. After database update clamascan is again crashing when >> scanning this file. But even if I use package databases with default >> configuration and freshclam turned off clamd still crashes. So I guess older >> db just made these crashes less frequent. > > Can you upload the compressed core file somewhere and send me a link to > it? (and a link to the binaries you used to create it, so I can match > symbols) >
Thanks for the files, as I thought its an alignment issue, (SIGBUS) I opened a bug here https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2695 Best regards, --Edwin _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
