Re: [Clamav-users] send virus problem

2008-09-02 Thread Aron
Hi Luca

OK,this time I know the mails goes right,and I will continue my progress.
Thank you!

Regards,
Aron Xu






From: "Luca Gibelli" <[EMAIL PROTECTED]>
To: "ClamAV users ML" 
Date: Mon, 1 Sep 2008 20:56:26 +0800 (CST)
Subject: Re: [Clamav-users] send virus problem



> 
> Hello Aron,
> 
> > You haven't solve my problem now,what's wrong? I compressed and encrypted 
> > the files correctly and sent them correctly,but I still didn't see them in 
> > the clamav-virusdb mailing list?Need I send them once more?
> 
> so far you only sent one sample that we didn't already have:
> 
> 9kgen_up.int (md5: 49a912bcc13a23aa8dce00acf88acb3a)
> 
> It has not been reviewed yet, but hopefully one of the sigmakers
> will take care about it soon.
> 
> Best regards
> 
> -- 
> Luca Gibelli (luca _at_ clamav.net)   ClamAV, a GPL anti-virus toolkit
> [Tel] +39 0187 1851862 [Fax] +39 0187 1852252 [IM] nervous/jabber.linux.it
> PGP key id 5EFC5582 @ any key-server || http://www.clamav.net/gpg/luca.gpg
> ___
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
> 
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] ClamAV 0.94 release

2008-09-02 Thread Brandon Perry
On Ubuntu 8.04, make check fails with:

gcc -DSRCDIR=\"/root/clamav-0.94/unit_tests\" -g -O2 -o .libs/check_clamav
check_clamav-check_clamav.o check_clamav-check_jsnorm.o
check_clamav-check_str.o check_clamav-check_regex.o
check_clamav-check_disasm.o check_clamav-check_uniq.o
check_clamav-check_matchers.o  ../libclamav/.libs/libclamav.so -lpthread
-lcheck -lz
/usr/bin/ld: cannot find -lcheck
collect2: ld returned 1 exit status
make[2]: *** [check_clamav] Error 1
make[2]: Leaving directory `/root/clamav-0.94/unit_tests'
make[1]: *** [check-am] Error 2
make[1]: Leaving directory `/root/clamav-0.94/unit_tests'
make: *** [check-recursive] Error 1

Compiles fine obviously. After doing make uninstall and make install,
running freshclam says that I am still running 0.94-exp, not 0.94. Running
freshclam from the source dir says the same thing:

[EMAIL PROTECTED]:~/clamav-0.94/freshclam$ ./freshclam
ClamAV update process started at Tue Sep  2 16:03:03 2008
WARNING: Your ClamAV installation is OUTDATED!
WARNING: Local version: 0.94-exp Recommended version: 0.94
DON'T PANIC! Read http://www.clamav.net/support/faq
main.cvd is up to date (version: 47, sigs: 312304, f-level: 31, builder:
sven)
Trying host database.clamav.net (209.170.150.7)...

[EMAIL PROTECTED]:~/clamav-0.94/freshclam$


-- 
http://www.volatileminds.net
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV 0.94 release

2008-09-02 Thread Török Edwin
On 2008-09-02 19:06, Brandon Perry wrote:
> On Ubuntu 8.04, make check fails with:
>
> gcc -DSRCDIR=\"/root/clamav-0.94/unit_tests\" -g -O2 -o .libs/check_clamav
> check_clamav-check_clamav.o check_clamav-check_jsnorm.o
> check_clamav-check_str.o check_clamav-check_regex.o
> check_clamav-check_disasm.o check_clamav-check_uniq.o
> check_clamav-check_matchers.o  ../libclamav/.libs/libclamav.so -lpthread
> -lcheck -lz
> /usr/bin/ld: cannot find -lcheck
> collect2: ld returned 1 exit status
> make[2]: *** [check_clamav] Error 1
> make[2]: Leaving directory `/root/clamav-0.94/unit_tests'
> make[1]: *** [check-am] Error 2
> make[1]: Leaving directory `/root/clamav-0.94/unit_tests'
> make: *** [check-recursive] Error 1
>
>   

Run apt-get install check.

> Compiles fine obviously. After doing make uninstall and make install,
> running freshclam says that I am still running 0.94-exp, not 0.94. Running
> freshclam from the source dir says the same thing:
>
>   

Did you configure with --enable-experimental?

Best regards,
--Edwin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV 0.94 release

2008-09-02 Thread Brandon Perry
Ok, make check works. valgrind check fails, but that is't an issue to me.

On Tue, Sep 2, 2008 at 11:11 AM, Brandon Perry <[EMAIL PROTECTED]>wrote:

>
>
>
>
>>
>> Run apt-get install check.
>>
>> > Compiles fine obviously. After doing make uninstall and make install,
>> > running freshclam says that I am still running 0.94-exp, not 0.94.
>> Running
>> > freshclam from the source dir says the same thing:
>> >
>> >
>>
>> Did you configure with --enable-experimental?
>
>
> Yes, I used --enable-experimental
>
>>
>> ___
>> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
>> http://www.clamav.net/support/ml
>>
>
>
>
> --
> http://www.volatileminds.net
>



-- 
http://www.volatileminds.net
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] [EMAIL PROTECTED]: Question about dual processor&Mandriva. Please kindly help.

2008-09-02 Thread Matus UHLAR - fantomas
> On Mon, 1 Sep 2008 Ken LEpee wrote:
> > I read once that many anti viruses which are meant for linux based
> > os don't work in computers using dual processor

On 01.09.08 11:34, G.W. Haywood wrote:
> That is nonsense.

I guess that should mean that many antiviruses can't use two CPUs/cores etc.
Clamav does support multithreading, which with support of kernel and libs
(usually libc) meant it can use more cpus/cores/cpu threads

> http://garr.dl.sourceforge.net/sourceforge/clamav/clamav-0.93.3.tar.gz

0.94 is out now...
-- 
Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
A day without sunshine is like, night.
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV 0.94 release

2008-09-02 Thread Brandon Perry
>
> Run apt-get install check.
>
> > Compiles fine obviously. After doing make uninstall and make install,
> > running freshclam says that I am still running 0.94-exp, not 0.94.
> Running
> > freshclam from the source dir says the same thing:
> >
> >
>
> Did you configure with --enable-experimental?


Yes, I used --enable-experimental

>
> ___
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>



-- 
http://www.volatileminds.net
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] ClamAV 0.94 Webinar Reminder

2008-09-02 Thread Nigel Horne
Hi Everyone,

My apologies for sending this again if you've already read this. It's a 
reminder for those
who may have missed it last week.

The next ClamAV users webcast will be tomorrow at 1700GMT
(1800BST; 1900CEST; 1300EDT).

The presentation, given by Török Edwin, will cover the new features of
ClamAV 0.94, such as logical signatures and unit testing, and also its 
improvements
in areas such as anti-phishing and script scanning.

This will be followed by an overview of the evolution of anti-phishing and
script malware detection technology in ClamAV from 0.93 to 0.94, and by a 
live
demonstration of how to use some of the new and improved features in 0.94.

Registration Details for the live session:

Date: Wed 3rd September
Time: 1700GMT
Registration link: 
https://sourcefire.webex.com/sourcefire/onstage/g.php?d=799008644&t=a

As always this session will be recorded and archived on ClamAV.net and 
Sourcefire.com.

I hope you can join us.

Regards,

Nigel

-- 
Nigel Horne, [EMAIL PROTECTED]
Director of Product Management (ClamAV), Sourcefire, 
http://www.sourcefire.com
+44 1226 241048 or +1 706 705 4022 FAX: +44 870 705 9334, Skype: nigelhorne

Come to Las Vegas to see the latest in Sourcefire and open source 
innovation.
Register at www.bossconference.com by September 30th to save $200! 

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV 0.94 release

2008-09-02 Thread Jason Bertoch
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:clamav-users-
> [EMAIL PROTECTED] On Behalf Of Brandon Perry
> Sent: Tuesday, September 02, 2008 12:06 PM
> To: ClamAV users ML
> Subject: [Clamav-users] ClamAV 0.94 release
> 

Configuring on CentOS 5.2 x64 produces the following warnings:

# ./configure --prefix=/usr --sysconfdir=/etc --enable-experimental \
--enable-milter


checking for CHECK... no
configure: WARNING: unable to find 'check' using pkg-config:
No package 'check' found

and

checking for libgmp... no
configure: WARNING: ** GNU MP 2 or newer NOT FOUND - digital signature
support will be disabled !



however, 

# yum provides check
check-devel.x86_64 : Libraries and headers for developing programs with
check
check-devel.i386 : Libraries and headers for developing programs with check

# yum install check-devel
Package check-devel - 0.9.3-5.fc6.i386 is already installed.
Package check-devel - 0.9.3-5.fc6.x86_64 is already installed.

# yum install gmp-devel
Package gmp-devel - 4.1.4-10.el5.i386 is already installed.
Package gmp-devel - 4.1.4-10.el5.x86_64 is already installed.


Additionally, configure seems to find libgmp when option "--prefix=/usr" is
not used.

# ./configure |grep gmp
checking for libgmp... yes

# ./configure --prefix=/usr |grep gmp
checking for libgmp... no


What's the deal with the new requirement for 'check' and why would option
"--prefix=/usr" break the ability to find libgmp?



Jason A. Bertoch
Network Administrator
[EMAIL PROTECTED]
Electronet Broadband Communications
3411 Capital Medical Blvd.
Tallahassee, FL 32308
(V) 850.222.0229 (F) 850.222.8771

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV 0.94 release

2008-09-02 Thread Brandon Perry
You need to check to run 'make check' as per above.

On Tue, Sep 2, 2008 at 1:44 PM, Jason Bertoch <[EMAIL PROTECTED]> wrote:

> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:clamav-users-
> > [EMAIL PROTECTED] On Behalf Of Brandon Perry
> > Sent: Tuesday, September 02, 2008 12:06 PM
> > To: ClamAV users ML
> > Subject: [Clamav-users] ClamAV 0.94 release
> >
>
> Configuring on CentOS 5.2 x64 produces the following warnings:
>
> # ./configure --prefix=/usr --sysconfdir=/etc --enable-experimental \
> --enable-milter
>
>
> checking for CHECK... no
> configure: WARNING: unable to find 'check' using pkg-config:
> No package 'check' found
>
> and
>
> checking for libgmp... no
> configure: WARNING: ** GNU MP 2 or newer NOT FOUND - digital signature
> support will be disabled !
>
>
>
> however,
>
> # yum provides check
> check-devel.x86_64 : Libraries and headers for developing programs with
> check
> check-devel.i386 : Libraries and headers for developing programs with check
>
> # yum install check-devel
> Package check-devel - 0.9.3-5.fc6.i386 is already installed.
> Package check-devel - 0.9.3-5.fc6.x86_64 is already installed.
>
> # yum install gmp-devel
> Package gmp-devel - 4.1.4-10.el5.i386 is already installed.
> Package gmp-devel - 4.1.4-10.el5.x86_64 is already installed.
>
>
> Additionally, configure seems to find libgmp when option "--prefix=/usr" is
> not used.
>
> # ./configure |grep gmp
> checking for libgmp... yes
>
> # ./configure --prefix=/usr |grep gmp
> checking for libgmp... no
>
>
> What's the deal with the new requirement for 'check' and why would option
> "--prefix=/usr" break the ability to find libgmp?
>
>
>
> Jason A. Bertoch
> Network Administrator
> [EMAIL PROTECTED]
> Electronet Broadband Communications
> 3411 Capital Medical Blvd.
> Tallahassee, FL 32308
> (V) 850.222.0229 (F) 850.222.8771
>
> ___
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>



-- 
http://www.volatileminds.net
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV 0.94 release

2008-09-02 Thread Török Edwin
On 2008-09-02 21:44, Jason Bertoch wrote:
>> -Original Message-
>> From: [EMAIL PROTECTED] [mailto:clamav-users-
>> [EMAIL PROTECTED] On Behalf Of Brandon Perry
>> Sent: Tuesday, September 02, 2008 12:06 PM
>> To: ClamAV users ML
>> Subject: [Clamav-users] ClamAV 0.94 release
>>
>> 
>
> Configuring on CentOS 5.2 x64 produces the following warnings:
>
> # ./configure --prefix=/usr --sysconfdir=/etc --enable-experimental \
> --enable-milter
>
>
> checking for CHECK... no
> configure: WARNING: unable to find 'check' using pkg-config:
> No package 'check' found
>
> and
>
> checking for libgmp... no
> configure: WARNING: ** GNU MP 2 or newer NOT FOUND - digital signature
> support will be disabled !
>
>
>
> however, 
>
> # yum provides check
> check-devel.x86_64 : Libraries and headers for developing programs with
> check
> check-devel.i386 : Libraries and headers for developing programs with check
>   

Don't worry about the pkg-config warning, does it say 'checking linking
with check ... ok'?
Does 'make check' work?

You can read more about 'make check' here:
http://www.clamav.net/doc/latest/html/node15.html

And what to do if it fails here:
http://www.clamav.net/doc/latest/html/node16.html

'make check' has been part of 0.94rc1, so you should already know this ;)

> Additionally, configure seems to find libgmp when option "--prefix=/usr" is
> not used.
>
> # ./configure |grep gmp
> checking for libgmp... yes
>
> # ./configure --prefix=/usr |grep gmp
> checking for libgmp... no
>   

Is your libgmp in /usr/lib, or /usr/local/lib?

>
> What's the deal with the new requirement for 'check' and why would option
> "--prefix=/usr" break the ability to find libgmp?
>   

Check is optional, its only needed for 'make check', 'make' and 'make
install' work fine without it.
As for libgmp I don't remember any changes since 0.93.3 in that area.
If you can't get it to work, open a bugreport and attach your config.log.

Best regards,
--Edwin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] bzip2 1.0.5 and clamav 0.94

2008-09-02 Thread Roberto Ullfig
Running redhat and have installed bzip2 1.0.5 in /usr/local/. How can I 
tell clamav's Configure to look in /usr/local/ just for bzip2? Configure 
is returning:

checking how to link with libbz2... /usr/local/lib/libbz2.a
checking for bzReadOpen in -lbz2... no
checking bzlib.h usability... yes
checking bzlib.h presence... yes
checking for bzlib.h... yes
checking for CVE-2008-1372... bugged
configure: WARNING: ** bzip2 libraries are affected by the 
CVE-2008-1372 bug
configure: WARNING: ** We strongly suggest you to update to bzip2 1.0.5.
configure: WARNING: ** Please do not report stability problems to 
the ClamAV developers!

[EMAIL PROTECTED] lib]# /usr/local/bin/bzip2 --help
bzip2, a block-sorting file compressor.  Version 1.0.5, 10-Dec-2007.


-- 
Roberto Ullfig - [EMAIL PROTECTED]

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] bzip2 1.0.5 and clamav 0.94

2008-09-02 Thread Török Edwin
On 2008-09-02 22:49, Roberto Ullfig wrote:
> Running redhat and have installed bzip2 1.0.5 in /usr/local/. How can I 
> tell clamav's Configure to look in /usr/local/ just for bzip2?

Try this:
./configure --with-libbz2-prefix=/usr/local/

or

./configure CPPFLAGS="-I/usr/local/" LIBS="-L/usr/local/lib"

>  Configure 
> is returning:
>
> checking how to link with libbz2... /usr/local/lib/libbz2.a
> checking for bzReadOpen in -lbz2... no
> checking bzlib.h usability... yes
> checking bzlib.h presence... yes
> checking for bzlib.h... yes
> checking for CVE-2008-1372... bugged
> configure: WARNING: ** bzip2 libraries are affected by the 
> CVE-2008-1372 bug
> configure: WARNING: ** We strongly suggest you to update to bzip2 1.0.5.
> configure: WARNING: ** Please do not report stability problems to 
> the ClamAV developers!
>
> [EMAIL PROTECTED] lib]# /usr/local/bin/bzip2 --help
> bzip2, a block-sorting file compressor.  Version 1.0.5, 10-Dec-2007.

I assume you have an older bzip2 in /usr/lib too?
You can try removing the old bzip2 package using yum.

Best regards,
--Edwin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] bzip2 1.0.5 and clamav 0.94

2008-09-02 Thread Roberto Ullfig
Török Edwin wrote:
> On 2008-09-02 22:49, Roberto Ullfig wrote:
>   
>> Running redhat and have installed bzip2 1.0.5 in /usr/local/. How can I 
>> tell clamav's Configure to look in /usr/local/ just for bzip2?
>> 
>
> Try this:
> ./configure --with-libbz2-prefix=/usr/local/
>
> or
>
> ./configure CPPFLAGS="-I/usr/local/" LIBS="-L/usr/local/lib"
>
>   
>>  Configure 
>> is returning:
>>
>> checking how to link with libbz2... /usr/local/lib/libbz2.a
>> checking for bzReadOpen in -lbz2... no
>> checking bzlib.h usability... yes
>> checking bzlib.h presence... yes
>> checking for bzlib.h... yes
>> checking for CVE-2008-1372... bugged
>> configure: WARNING: ** bzip2 libraries are affected by the 
>> CVE-2008-1372 bug
>> configure: WARNING: ** We strongly suggest you to update to bzip2 1.0.5.
>> configure: WARNING: ** Please do not report stability problems to 
>> the ClamAV developers!
>>
>> # /usr/local/bin/bzip2 --help
>> bzip2, a block-sorting file compressor.  Version 1.0.5, 10-Dec-2007.
>> 
>
> I assume you have an older bzip2 in /usr/lib too?
> You can try removing the old bzip2 package using yum.
>
> Best regards,
> --Edwin
> ___
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>
>   
The first suggestion didn't change things and I'd rather not do the 
second one. Note in my output that it seems to know about the new version:

checking how to link with libbz2... /usr/local/lib/libbz2.a

But still complains about the bug!

/usr/local/lib/libbz2.a is definitely the new 1.0.5 version I installed.

I think I'll have to remove the old redhat version in /usr/lib but 
something seems wrong here otherwise.

-- 
Roberto Ullfig - [EMAIL PROTECTED]


___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] bzip2 1.0.5 and clamav 0.94

2008-09-02 Thread Török Edwin
On 2008-09-02 23:04, Roberto Ullfig wrote:
> Török Edwin wrote:
>   
>> On 2008-09-02 22:49, Roberto Ullfig wrote:
>>   
>> 
>>> Running redhat and have installed bzip2 1.0.5 in /usr/local/. How can I 
>>> tell clamav's Configure to look in /usr/local/ just for bzip2?
>>> 
>>>   
>> Try this:
>> ./configure --with-libbz2-prefix=/usr/local/
>>
>> or
>>
>> ./configure CPPFLAGS="-I/usr/local/" LIBS="-L/usr/local/lib"
>>
>>   
>> 
>>>  Configure 
>>> is returning:
>>>
>>> checking how to link with libbz2... /usr/local/lib/libbz2.a
>>> checking for bzReadOpen in -lbz2... no
>>> checking bzlib.h usability... yes
>>> checking bzlib.h presence... yes
>>> checking for bzlib.h... yes
>>> checking for CVE-2008-1372... bugged
>>> configure: WARNING: ** bzip2 libraries are affected by the 
>>> CVE-2008-1372 bug
>>> configure: WARNING: ** We strongly suggest you to update to bzip2 1.0.5.
>>> configure: WARNING: ** Please do not report stability problems to 
>>> the ClamAV developers!
>>>
>>> # /usr/local/bin/bzip2 --help
>>> bzip2, a block-sorting file compressor.  Version 1.0.5, 10-Dec-2007.
>>> 
>>>   
>> I assume you have an older bzip2 in /usr/lib too?
>> You can try removing the old bzip2 package using yum.
>>
>> Best regards,
>> --Edwin
>> ___
>> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
>> http://www.clamav.net/support/ml
>>
>>   
>> 
> The first suggestion didn't change things and I'd rather not do the 
> second one. Note in my output that it seems to know about the new version:
>
> checking how to link with libbz2... /usr/local/lib/libbz2.a
>
> But still complains about the bug!
>
> /usr/local/lib/libbz2.a is definitely the new 1.0.5 version I installed.
>
> I think I'll have to remove the old redhat version in /usr/lib but 
> something seems wrong here otherwise.

Send me your config.log (off-list, this list strips attachments).

Best regards,
--Edwin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] ClamAV 0.94 build problem on Cygwin

2008-09-02 Thread René Berber
Hi,

Something changed in configure which results on a wrong setting for the
existence of gethostbyname_r, it worked fine on 0.94rc1, now it doesn't
build unless using the following.

Simple solution: add '--disable-gethostbyname_r' to configure line.

I haven't found what changed and how the result for the test is coming
out wrong, for reference here is the configure output line for both
versions:

0.94rc1
---
checking for gethostbyname_r... support disabled

0.94

checking for gethostbyname_r... yes, and it takes 5 arguments
... (and the failure)
clamav-0.94/libclamav/mbox.c:4537: undefined reference to `_gethostbyname_r'

Creating library file: .libs/libclamav.dll.a

No problem building with the proposed workaround, except 'make check'
which needs removing the socket before testing, as in lines 25 and 39 of
check_clamd.sh:

rm -f clamdscan.log clamd-test.socket

But then testing passing a file descriptor fails... I don't think Cygwin
has that functionality, can't pass file descriptors around.

Hope this is useful.
-- 
René Berber

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV 0.94 build problem on Cygwin

2008-09-02 Thread Brandon Perry
IIRC, the announcement said that POSIX breakage would happen if you tried to
compile 0.94 on cygwin...

On Tue, Sep 2, 2008 at 4:16 PM, René Berber <[EMAIL PROTECTED]> wrote:

> Hi,
>
> Something changed in configure which results on a wrong setting for the
> existence of gethostbyname_r, it worked fine on 0.94rc1, now it doesn't
> build unless using the following.
>
> Simple solution: add '--disable-gethostbyname_r' to configure line.
>
> I haven't found what changed and how the result for the test is coming
> out wrong, for reference here is the configure output line for both
> versions:
>
> 0.94rc1
> ---
> checking for gethostbyname_r... support disabled
>
> 0.94
> 
> checking for gethostbyname_r... yes, and it takes 5 arguments
> ... (and the failure)
> clamav-0.94/libclamav/mbox.c:4537: undefined reference to
> `_gethostbyname_r'
>
> Creating library file: .libs/libclamav.dll.a
>
> No problem building with the proposed workaround, except 'make check'
> which needs removing the socket before testing, as in lines 25 and 39 of
> check_clamd.sh:
>
>rm -f clamdscan.log clamd-test.socket
>
> But then testing passing a file descriptor fails... I don't think Cygwin
> has that functionality, can't pass file descriptors around.
>
> Hope this is useful.
> --
> René Berber
>
> ___
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>



-- 
http://www.volatileminds.net
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV 0.94 build problem on Cygwin

2008-09-02 Thread Brandon Perry
>From the announcement:


** This version drops the special support for Cygwin. Our QA process showed
** serious problems with ClamAV builds under Cygwin due to some low-level
** incompatibilities in the POSIX compatibility layer, resulting in
unreliable
** ClamAV behaviour.

On Tue, Sep 2, 2008 at 4:22 PM, Brandon Perry <[EMAIL PROTECTED]>wrote:

> IIRC, the announcement said that POSIX breakage would happen if you tried
> to compile 0.94 on cygwin...
>
>
> On Tue, Sep 2, 2008 at 4:16 PM, René Berber <[EMAIL PROTECTED]>wrote:
>
>> Hi,
>>
>> Something changed in configure which results on a wrong setting for the
>> existence of gethostbyname_r, it worked fine on 0.94rc1, now it doesn't
>> build unless using the following.
>>
>> Simple solution: add '--disable-gethostbyname_r' to configure line.
>>
>> I haven't found what changed and how the result for the test is coming
>> out wrong, for reference here is the configure output line for both
>> versions:
>>
>> 0.94rc1
>> ---
>> checking for gethostbyname_r... support disabled
>>
>> 0.94
>> 
>> checking for gethostbyname_r... yes, and it takes 5 arguments
>> ... (and the failure)
>> clamav-0.94/libclamav/mbox.c:4537: undefined reference to
>> `_gethostbyname_r'
>>
>> Creating library file: .libs/libclamav.dll.a
>>
>> No problem building with the proposed workaround, except 'make check'
>> which needs removing the socket before testing, as in lines 25 and 39 of
>> check_clamd.sh:
>>
>>rm -f clamdscan.log clamd-test.socket
>>
>> But then testing passing a file descriptor fails... I don't think Cygwin
>> has that functionality, can't pass file descriptors around.
>>
>> Hope this is useful.
>> --
>> René Berber
>>
>> ___
>> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
>> http://www.clamav.net/support/ml
>>
>
>
>
> --
> http://www.volatileminds.net
>



-- 
http://www.volatileminds.net
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV 0.94 build problem on Cygwin

2008-09-02 Thread René Berber
Brandon Perry wrote:

> IIRC, the announcement said that POSIX breakage would happen if you tried to
> compile 0.94 on cygwin...

If you mean this part :

** This version drops the special support for Cygwin. Our QA process showed
** serious problems with ClamAV builds under Cygwin due to some low-level
** incompatibilities in the POSIX compatibility layer, resulting in
unreliable
** ClamAV behaviour.

It sounds like non-sense to me, version 0.94rc1 works fine, and both
versions build fine.  The above statement seems to come from somebody
that didn't even test, didn't look at what 'make check' was doing, and
didn't really care.

"serious problems" ?  Only problem is the test I mentioned, passing a
file descriptor is not supported under Cygwin as far as I know.

"unreliable behaviour" ? Does that mean the distribution/use of older
bzip2 libraries?  The warning at configure time is clear, I'm not sure
it is correct, the CVE says "before 1.0.5", Cygwin uses 1.0.5 .

And the gem: "incompatibilties in ... compatibility layer"; it is or it
isn't compatible?  The Cygwin folks make an effort for being POSIX
compatible.
-- 
René Berber

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] 0.94-exp

2008-09-02 Thread christian

WARNING: Local version: 0.94-exp Recommended version: 0.94

yes, with --enable-experimental.

1) yes, i tested rc1, and it worked here.

2) the `-exp` suffix seems to be a last-minute improvement for release?

would the conclusion be not/never to use '--enable-experimental'?

__cut__
Wed Sep  3 06:05:32 2008 -> --
Wed Sep  3 06:05:32 2008 -> freshclam daemon 0.94-exp (OS: linux-gnu, ARCH: 
i386, CPU: i686)
Wed Sep  3 06:05:32 2008 -> ClamAV update process started at Wed Sep  3 
06:05:32 2008
Wed Sep  3 06:05:32 2008 -> WARNING: Your ClamAV installation is OUTDATED!
Wed Sep  3 06:05:32 2008 -> WARNING: Local version: 0.94-exp Recommended 
version: 0.94
Wed Sep  3 06:05:32 2008 -> DON'T PANIC! Read http://www.clamav.net/support/faq
Wed Sep  3 06:05:32 2008 -> main.cld is up to date (version: 47, sigs: 312304, 
f-level: 31, builder: sven)
Wed Sep  3 06:05:32 2008 -> daily.cvd is up to date (version: 8142, sigs: 
95436, f-level: 35, builder: neo)
Wed Sep  3 06:05:32 2008 -> --
__cut__

-- 
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV 0.94 build problem on Cygwin

2008-09-02 Thread Sarocet
René Berber wrote:
> "serious problems" ?  Only problem is the test I mentioned, passing a
> file descriptor is not supported under Cygwin as far as I know.
>   
I have no cygwin experience, but Windows *does* allow passing file 
descriptors to child process. Not in the same way as unix, but I'd find 
odd the cygwin guys didn't manage to adapt that, given that they were 
able to do much more complex things, such as emulating fork()
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV 0.94 build problem on Cygwin

2008-09-02 Thread René Berber
Sarocet wrote:

> René Berber wrote:
>> "serious problems" ?  Only problem is the test I mentioned, passing a
>> file descriptor is not supported under Cygwin as far as I know.
>>   
> I have no cygwin experience, but Windows *does* allow passing file 
> descriptors to child process. Not in the same way as unix, but I'd find 
> odd the cygwin guys didn't manage to adapt that, given that they were 
> able to do much more complex things, such as emulating fork()

My reference is old, so things could have changed.

  http://sourceware.org/ml/cygwin/2005-10/msg00672.html

I have no first hand experience using fd passing, the problem could be
more specific to passing stdin's fd, which is what the test script does.
-- 
René Berber

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] ClamAV 0.94 build problem on Solaris 9

2008-09-02 Thread René Berber
Hello,

Sorry for the long post.

The following command and error stops clamav build, any ideas?

gcc -shared -Wl,-h -Wl,libclamav.so.5 -o .libs/libclamav.so.5.0.1
.libs/matcher-ac.o .libs/matcher-bm.o .libs/matcher.o .libs/md5.o
.libs/others.o .libs/readdb.o .libs/cvd.o .libs/dsig.o .libs/str.o
.libs/scanners.o .libs/textdet.o .libs/filetypes.o .libs/rtf.o
.libs/blob.o .libs/mbox.o .libs/message.o .libs/table.o .libs/text.o
.libs/ole2_extract.o .libs/vba_extract.o .libs/msexpand.o .libs/pe.o
.libs/disasm.o .libs/upx.o .libs/htmlnorm.o .libs/chmunpack.o
.libs/rebuildpe.o .libs/petite.o .libs/wwunpack.o .libs/unsp.o
.libs/aspack.o .libs/packlibs.o .libs/fsg.o .libs/mew.o .libs/upack.o
.libs/line.o .libs/untar.o .libs/unzip.o .libs/inflate64.o
.libs/special.o .libs/binhex.o .libs/is_tar.o .libs/tnef.o
.libs/autoit.o .libs/strlcpy.o .libs/regcomp.o .libs/regerror.o
.libs/regexec.o .libs/regfree.o .libs/unarj.o .libs/bzlib.o
.libs/nulsft.o .libs/infblock.o .libs/pdf.o .libs/spin.o .libs/yc.o
.libs/elf.o .libs/sis.o .libs/uuencode.o .libs/phishcheck.o
.libs/phish_domaincheck_db.o .libs/phish_whitelist.o .libs/regex_list.o
.libs/regex_suffix.o .libs/mspack.o .libs/cab.o .libs/entconv.o
.libs/hashtab.o .libs/dconf.o .libs/lzma_iface.o .libs/explode.o
.libs/textnorm.o .libs/dlp.o .libs/js-norm.o .libs/uniq.o
.libs/version.o -Wl,-z -Wl,allextract lzma/.libs/liblzma.a -Wl,-z
-Wl,defaultextract
-R/usr/share/src/clamav-0.94/libclamunrar_iface/.libs -R/usr/local/lib
-R/usr/local/lib ../libclamunrar_iface/.libs/libclamunrar_iface.so
-L/usr/share/src/clamav-0.94/libclamunrar/.libs -L/usr/local/lib -lz
-lbz2 /usr/local/lib/libgmp.so /usr/local/lib/libiconv.so -L/usr/lib
-L/usr/openwin/lib -L/usr/local/ssl/lib -L/usr/local/BerkeleyDB.4.2/lib
-lpthread -lnsl -lsocket -lc  -Wl,-M -Wl,../libclamav/libclamav.map
ld: fatal: ../libclamav/libclamav.map: 109: symbol `uniq_get' is already
defined in file: ../libclamav/libclamav.map

The file libclamav.map does indeed have uniq_get twice, I can't find
where the duplicate comes from, it's not duplicated on clamav's code.
Here's the contents of the map:

CLAMAV_PUBLIC {
  global:
cl_build;
cl_cvdfree;
cl_cvdhead;
cl_cvdparse;
cl_cvdverify;
cl_debug;
cl_dup;
cl_free;
cl_load;
cl_loaddb;
cl_loaddbdir;
cl_retdbdir;
cl_retflevel;
cl_retver;
cl_scandesc;
cl_scanfile;
cl_settempdir;
cl_statchkdir;
cl_statfree;
cl_statinidir;
cl_strerror;
  local:
*;
};
CLAMAV_PRIVATE {
  global:
cli_ac_setdepth;
cli_strtok;
cli_untgz;
cli_regcomp;
cli_regexec;
cli_regfree;
cli_strrcpy;
cli_strbcasestr;
cli_isnumber;
cli_gentemp;
cli_gentempfd;
cli_rmdirs;
cli_chomp;
cli_rndnum;
cli_decodesig;

cli_calloc;
cli_ole2_extract;
cli_errmsg;
cli_debug_flag;
cli_dbgmsg_internal;
cli_vba_readdir;
cli_vba_inflate;
cli_ppt_vba_read;
cli_wm_readdir;
cli_wm_decrypt_macro;
cli_readn;
cli_str2hex;
cli_md5file;
cli_md5stream;
html_normalise_fd;
cli_utf16toascii;

cli_malloc;
cli_memstr;
cli_strdup;
cli_realloc;
cli_ctime;
tableCreate;
tableDestroy;
tableRemove;
tableFind;
tableIterate;
tableUpdate;
tableInsert;
cli_warnmsg;
cli_strtokbuf;
cli_leavetemps_flag;
uniq_get;  <---
cli_js_init;
cli_js_process_buffer;
cli_js_parse_done;
cli_js_destroy;
cli_js_output;
cli_unescape;
cli_textbuffer_append_normalize;
cli_dconf_init;
cli_regex2suffix;
html_normalise_mem;
init_regex_list;
is_regex_ok;
regex_list_done;
regex_list_add_pattern;
cli_build_regex_list;
regex_list_match;
cli_initengine;
phishing_init;
init_domainlist;
init_whitelist;
phishing_done;
blobCreate;
blobAddData;
phishingScan;
blobDestroy;
load_regex_matcher;
html_tag_arg_free;
disasmbuf;
uniq_init;
uniq_free;
uniq_add;
uniq_get;  <---
cli_hex2str;
cli_ac_init;
cli_ac_initdata;
cli_ac_buildtrie;
cli_ac_scanbuff;
cli_ac_freedata;
cli_ac_free;
cli_parse_add;
cli_bm_init;
cli_bm_scanbuff;
cli_bm_free;
  local:
*;
};

I did not test 0.94rc1 on this system.
-- 
René Berber

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] strcat(newname, ".UNOFFICIAL");

2008-09-02 Thread Dennis Peterson
This little tidbit has really screwed up a lot of reporting code for me. 
Thanks but no thanks, I'll be taking it out. You might want to make this 
a configure switch for your users who know the difference between 
official and not official signatures.

dp
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] Abnormal end

2008-09-02 Thread Dennis Peterson
What might have happened here:

 > clamdscan test

/test/.split/split.clam.arjaa: Input/Output error ERROR
...

$ clamscan test/.split
]$ clamscan test/.split
test/.split/split.clam-upack.exeaa: OK
test/.split/split.clam-upack.exeab: OK
test/.split/split.clam.ole.docaa: OK
test/.split/split.clam.ole.docab: OK
test/.split/split.clam.arjaa: Input/Output error
test/.split/split.clam.arjab: OK
test/.split/split.clam.cabaa: OK
test/.split/split.clam.cabab: OK
test/.split/split.clam.chmaa: OK
test/.split/split.clam.chmab: OK
test/.split/split.clam.exeaa: OK
test/.split/split.clam.exeab: OK
test/.split/split.clam.pdfaa: OK
test/.split/split.clam.pdfab: OK
test/.split/split.clam.pptaa: OK
test/.split/split.clam.pptab: OK
test/.split/split.clam.sisaa: OK
test/.split/split.clam.sisab: OK
test/.split/split.clam-mew.exeaa: OK
test/.split/split.clam-mew.exeab: OK
test/.split/split.clam.zipaa: OK
test/.split/split.clam.zipab: OK
test/.split/split.clam-petite.exeaa: OK
test/.split/split.clam-petite.exeab: OK
test/.split/split.clam.d64.zipaa: OK
test/.split/split.clam.d64.zipab: OK
test/.split/split.clam-wwpack.exeaa: OK
test/.split/split.clam-wwpack.exeab: OK
test/.split/split.clam-aspack.exeaa: OK
test/.split/split.clam-aspack.exeab: OK
test/.split/split.clam-fsg.exeaa: OK
test/.split/split.clam-fsg.exeab: OK
test/.split/split.clam.mailaa: OK
test/.split/split.clam.mailab: OK
test/.split/split.clam.exe.mbox.uuaa: OK
test/.split/split.clam.exe.mbox.uuab: OK
test/.split/split.clam.exe.mbox.base64aa: OK
test/.split/split.clam.exe.mbox.base64ab: OK
test/.split/split.clam.ea05.exeaa: OK
test/.split/split.clam.ea05.exeab: OK
LibClamAV Error: TNEF: Incorrect length field in tnef_attachment
LibClamAV Error: Error reading TNEF attachment
test/.split/split.clam.tnefaa: OK
test/.split/split.clam.tnefab: OK
test/.split/split.clam.exe.szddaa: OK
test/.split/split.clam.exe.szddab: OK
test/.split/split.clam.exe.binhexaa: OK
test/.split/split.clam.exe.binhexab: OK
test/.split/split.clam.ea06.exeaa: OK
test/.split/split.clam.ea06.exeab: OK
test/.split/split.clam-upx.exeaa: OK
test/.split/split.clam-upx.exeab: OK
test/.split/split.clam-nsis.exeaa: OK
test/.split/split.clam-nsis.exeab: OK
test/.split/split.clam-pespin.exeaa: OK
test/.split/split.clam-pespin.exeab: OK
test/.split/split.clam.exe.bz2aa: OK
test/.split/split.clam.exe.bz2ab: OK
test/.split/split.clam.exe.rtfaa: OK
test/.split/split.clam.exe.rtfab: OK
test/.split/split.clam-v2.raraa: OK
test/.split/split.clam-v2.rarab: OK
test/.split/split.clam.tar.gzaa: OK
test/.split/split.clam.tar.gzab: OK
test/.split/split.clam-v3.raraa: OK
test/.split/split.clam-v3.rarab: OK
test/.split/split.clam.impl.zipaa: OK
test/.split/split.clam.impl.zipab: OK

--- SCAN SUMMARY ---
Known viruses: 446156
Engine version: 0.94-exp
Scanned directories: 1
Scanned files: 66
Infected files: 0
Data scanned: 0.59 MB
Time: 21.529 sec (0 m 21 s)

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] Abnormal end

2008-09-02 Thread Dennis Peterson
Dennis Peterson wrote:
> What might have happened here:

Should have added: Solaris 9, gcc 3.3.2.

Also seeing the duplicate uniq_get in libclamav.map on one but not both 
sol 9 systems.

dp

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV 0.94 build problem on Solaris 9

2008-09-02 Thread René Berber
Additional info:

gcc is version 3.4.6, ld in not GNU ld, it is Sun's version 5.9-1.378 .

In fact, ld's -M parameter seems to have different meaning, and it also
could be a bug (ld itself added the symbol twice).
-- 
René Berber

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] Average resolution time for a bug

2008-09-02 Thread Benoit Schmid
Good morning,

I opened the Bug 1151 two days ago.
I have opened it as P3/Normal as it is not a blocking bug.

Unfortunately, nobody seems to be interested by it.
As I am not very familiar with clamd bug resolution,
could you please tell me how long it generally takes before
that kind of bug is processed?

Thanks in advance for your answer.
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV 0.94 build problem on Cygwin

2008-09-02 Thread Török Edwin
On 2008-09-03 01:39, René Berber wrote:
> Brandon Perry wrote:
>
>   
>> IIRC, the announcement said that POSIX breakage would happen if you tried to
>> compile 0.94 on cygwin...
>> 
>
> If you mean this part :
>
> ** This version drops the special support for Cygwin. Our QA process showed
> ** serious problems with ClamAV builds under Cygwin due to some low-level
> ** incompatibilities in the POSIX compatibility layer, resulting in
> unreliable
> ** ClamAV behaviour.
>
> It sounds like non-sense to me, version 0.94rc1 works fine, and both
> versions build fine.  The above statement seems to come from somebody
> that didn't even test, didn't look at what 'make check' was doing, and
> didn't really care.
>
> "serious problems" ?  Only problem is the test I mentioned, passing a
> file descriptor is not supported under Cygwin as far as I know.
>   

No, file descriptor passing is not a 'critical' feature, and is not the
reason for dropping Cygwin.
Passing file descriptors among arbitrary processes can't work on Windows
because it is not supported by the OS,
it only works on systems supporting Unix domain sockets. [of course file
desc passing works across fork(), but that is not the point here]
This is not cygwin's fault, and there isn't anything cygwin could do
about it.

> "unreliable behaviour" ? Does that mean the distribution/use of older
> bzip2 libraries?  The warning at configure time is clear, I'm not sure
> it is correct, the CVE says "before 1.0.5", Cygwin uses 1.0.5 .
>
> And the gem: "incompatibilties in ... compatibility layer"; it is or it
> isn't compatible?  The Cygwin folks make an effort for being POSIX
> compatible.
>   

Have a look at bb #1139 for an example: lstat() failing for no apparent
reason.
Try 'clamdscan ../test/clam.exe' vs. 'clamdscan clam.exe'.

Best regards,
--Edwin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml