On Mon, 22 Nov 2004, 13:35 GMT+01 Robert Allerstorfer wrote: > On Mon, 22 Nov 2004, 11:01 GMT+01 Tomasz Kojm wrote:
>> On Mon, 22 Nov 2004 02:00:50 +0100 >> Robert Allerstorfer <[EMAIL PROTECTED]> wrote: >>> recent dev versions of clamscan have crashed on this file: >>> >>> http://cvs.openssl.org/getfile/openssl/doc/ssleay.txt?v=1.5.2.1 >>> >>> (this text file is included in the current OpenSSL tarball). [...] >> I can reproduce it on my Debian box with the latest development version. >> 0.80 is not affected. > Yes, fortunately 0.80 does not crash but comparing the scanning > behaviour with vs. without the '--no-mail' option shows that without > '--no-mail', scanning that single 0.27 MB large file took more than 18 > times longer (10.309 vs. 0.559 sec). And the SCAN SUMMARY pretends to > have 13.43 MB Data scanned: [...] > # clamscan /usr/share/doc/openssl-0.9.7a/ssleay.txt > /usr/share/doc/openssl-0.9.7a/ssleay.txt: OK > ----------- SCAN SUMMARY ----------- > Known viruses: 27380 > Scanned directories: 0 > Scanned files: 1 > Infected files: 0 > Data scanned: 13.43 MB <--- !! > I/O buffer size: 131072 bytes > Time: 10.309 sec (0 m 10 s) <--- !! > # clamscan -V > ClamAV 0.80/600/Sun Nov 21 18:58:20 2004 as posted earlier at http://article.gmane.org/gmane.comp.security.virus.clamav.devel/1702 that (or a very similar) problem has been solved in ClamAV 0.81, but is again present in later ClamAV versions (0.82 & 0.83): # clamscan /usr/share/doc/openssl-0.9.7a/ssleay.txt /usr/share/doc/openssl-0.9.7a/ssleay.txt: OK ----------- SCAN SUMMARY ----------- Known viruses: 31250 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 12.73 MB <--- !! I/O buffer size: 131072 bytes Time: 13.253 sec (0 m 13 s) <--- !! # clamscan -V ClamAV 0.83/731/Sun Feb 27 08:39:16 2005 With the --debug option, thousands of lines will be produced, most of them saying LibClamAV debug: parseEmailFile: check 'something' contMarker 0 best regards, rob. _______________________________________________ http://lurker.clamav.net/list/clamav-devel.html
