Piotr, > In amavisd-new 2.5.x, 2.6.x, in 'do_unrar' subroutine, I found > following flags: > > my(@common_rar_switches) = qw(-c- -p- -av- -idcdp); > > AFAIK '-av-' switch was always silently ignored by unrar, but > version 3.7.5 changed default behaviour and now this case is > treated as error (BadSwitch() is called in unrar code).
Interestingly, the unrar 3.7.8 still lists 'av-' as a valid option in its 'usage' help text, and claims its version is 3.71, yet indeed as you sate, it aborts with an 'Unknown option' error when 'av-' is used. Btw, the older rar and unrar 3.70 are vulnerable to DoS: CVE-2007-3725 > In result amavisd child died with something like: > > Feb 18 09:39:29 mail03 amavis[1978]: (01978-233-2) (!)killing process > [11247] running /usr/pkg/bin/unrar (reason: Error reading: Bad file > descriptor at (eval 92) line 810, <GEN6486> line 2.) > > Looks like we need separate subroutine for rar and unrar OR > @common_rar_switches without '-av-'. > > After removing '-av-' from @common_rar_switches problems was gone. I'll remove the '-av-', apparently it is not needed for rar either (where '-av' is used to explicitly turn on av checks, the option is available for registered users only). The change will be in 2.5.4 and 2.6.0. Thanks! Mark ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
