2004 -> Reading databases from /var/lib/clamav
Thu Nov 11 20:05:10 2004 -> Database correctly reloaded (26467 viruses)
Thu Nov 11 20:06:24 2004 -> Segmentation fault :-( Bye..
Thu Nov 11 20:09:32 2004 ->
/var/spool/exim/scan/1CSKK4-0002nr-2L/1CSKK4-0002nr-2L.eml:
Worm.Mydoom.M FOUND
What exact version of zlib do you have installed? Upgrade to zlib 1.2.2.
1.1.4 is installed
smime.p7s
Description: S/MIME Cryptographic Signature
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Ok, please run clamd under gdb and do a backtrace.
gdb /opt/clamav/sbin/clamd
run --config-file=/etc/clamav/clamd.conf.debug
1st segfault:
LibClamAV debug: boundaryStart: line = '--Next_Part_' boundary =
'Next_Part_'
LibClamAV debug: boundaryStart: found Next_Part_ in -Next_Part_
LibClamAV debug:
I should have said that you will need to do this with the
current version from CVS - my mistake!
clamav-devel is installed, waiting for a segfault ;-)
smime.p7s
Description: S/MIME Cryptographic Signature
___
http://lists.clamav.net/cgi-bin/mailman/list
gdb /opt/clamav/sbin/clamd
run --config-file=/etc/clamav/clamd.conf.debug
I should have said that you will need to do this with the
current version from CVS - my mistake!
This is using clamav-devel:
[...]
LibClamAV debug: Now read in part 1
LibClamAV debug: Multipart 1: About to parse folded heade
gdb /opt/clamav/sbin/clamd
run --config-file=/etc/clamav/clamd.conf.debug
I should have said that you will need to do this with the
current version from CVS - my mistake!
Here's another segfault using clamd-devel:
[...]
LibClamAV debug: Parsing mail file
LibClamAV debug: mimeType = 5
LibClamAV deb
#0 parseMimeHeader (m=0x84b0ba0,
cmd=0x85356ae ";
name=\"/usr/local/apache/htdocs/ftp/www.pressedienst.saarland.de/prd/anhaenge/anhang_6781.pdf\"",
rfc821Table=0x84aa5c8, arg=0x0)
at string2.h:1092
#1 0x4002faac in parseEmailHeader (m=0x84b0ba0,
line=0x85356a0 "Content-Type", rfc821
#0 parseMimeHeader (m=0x84b0ba0,
cmd=0x85356ae ";
name=\"/usr/local/apache/htdocs/ftp/www.pressedienst.saarland.de/prd/anhaenge/anhang_6781.pdf\"",
rfc821Table=0x84aa5c8, arg=0x0)
at string2.h:1092
#1 0x4002faac in parseEmailHeader (m=0x84b0ba0,
line=0x85356a0 "Content-Type", rfc821
Nigel Horne wrote:
Try as I might I cannot reproduce your problem.
Please send me a copy of the mail which reproduces
the error when you scan it.
Don't know how to get a copy. The mail is scanned before accepting it.
smime.p7s
Description: S/MIME Cryptographic Signature
__
