On Sun, Sep 29, 2013 at 6:16 AM, McGranahan, Jamen < jamen.mcgrana...@vanderbilt.edu> wrote:
> I'm using Clam 0.98 on RedHat 5 servers and since upgrading to 0.98, I am > seeing the following when trying to run a clamscan: > > LibClamAV Warning: SWF: Invalid tag length > LibClamAV Error: cli_scanswf: > GETBITS: Can't read file > > I've never seen this error before and am not sure how to correct it. I > couldn't find anything that remotely relates to this when trying to search > for it, so any advice and/or suggestions are greatly appreciated. Since > this is happening on one of our primary servers, it makes me nervous, so I > really need to get this fixed ASAP. Thank you! > > Jamen McGranahan > Systems Services Librarian > Vanderbilt University LIbrary > Central Library > Room 811 > 419 21st Avenue South > Nashville, TN 37214 > > _______________________________________________ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > http://www.clamav.net/support/ml > This error message comes from reading bits out of a SWF file. It has two potential causes: 1) Invalid offset inside file (less serious, problem with the file) 2) File read failed (more serious, problem accessing the file or the fmap) If you are not seeing other issues and warnings, it is most likely due to problem files and not a more serious issue. If you find a file that re-creates the issue, we can take a look. Any more assessment than this will require a file and/or your configuration as reported by clamconf. Hope this helps, Dave R. -- --- Dave Raynor Sourcefire Vulnerability Research Team dray...@sourcefire.com _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml
