I am experiencing a problem with clamd crashing shortly after a scan using the STREAM protocol. This affects recent versions of clamd including 0.86.1 and clamav-devel in CVS running on Interix.
There is no core file and clamd doesn't log anything before croaking. If I run it in the foreground with libclamav messages enabled, I see something like this: [EMAIL PROTECTED] /usr/local/sbin/clamd LibClamAV debug: Loading databases from /usr/local/share/clamav LibClamAV debug: Loading /usr/local/share/clamav/daily.cvd LibClamAV debug: in cli_cvdload() LibClamAV debug: MD5(.tar.gz) = df80bc7c18d325ed710c110d4a5a045b LibClamAV debug: Decoded signature: df80bc7c18d325ed710c110d4a5a045b LibClamAV debug: Digital signature is correct. LibClamAV debug: in cli_untgz() LibClamAV debug: Unpacking /tmp/clamav-c85cee7d754fad3b800ddd65436354e4/COPYING LibClamAV debug: Unpacking /tmp/clamav-c85cee7d754fad3b800ddd65436354e4/daily.db LibClamAV debug: Unpacking /tmp/clamav-c85cee7d754fad3b800ddd65436354e4/daily.hd b LibClamAV debug: Unpacking /tmp/clamav-c85cee7d754fad3b800ddd65436354e4/daily.nd b LibClamAV debug: Loading databases from /tmp/clamav-c85cee7d754fad3b800ddd654363 54e4 LibClamAV debug: Loading /tmp/clamav-c85cee7d754fad3b800ddd65436354e4/daily.db LibClamAV debug: Initializing main node LibClamAV debug: Initializing trie LibClamAV debug: Initializing BM tables LibClamAV debug: in cli_bm_init() LibClamAV debug: BM: Number of indexes = 63744 LibClamAV debug: Loading /tmp/clamav-c85cee7d754fad3b800ddd65436354e4/daily.hdb LibClamAV debug: Initializing md5 list structure LibClamAV debug: Loading /tmp/clamav-c85cee7d754fad3b800ddd65436354e4/daily.ndb LibClamAV debug: Loading /usr/local/share/clamav/main.cvd LibClamAV debug: in cli_cvdload() LibClamAV debug: MD5(.tar.gz) = 7c497735a7e1a3e15dde75832bef48f3 LibClamAV debug: Decoded signature: 7c497735a7e1a3e15dde75832bef48f3 LibClamAV debug: Digital signature is correct. LibClamAV debug: in cli_untgz() LibClamAV debug: Unpacking /tmp/clamav-459f40871bdec07449f1a5a329e02460/COPYING LibClamAV debug: Unpacking /tmp/clamav-459f40871bdec07449f1a5a329e02460/main.db LibClamAV debug: Unpacking /tmp/clamav-459f40871bdec07449f1a5a329e02460/main.hdb LibClamAV debug: Unpacking /tmp/clamav-459f40871bdec07449f1a5a329e02460/main.ndb LibClamAV debug: Unpacking /tmp/clamav-459f40871bdec07449f1a5a329e02460/main.zmd LibClamAV debug: Unpacking /tmp/clamav-459f40871bdec07449f1a5a329e02460/main.fp LibClamAV debug: Loading databases from /tmp/clamav-459f40871bdec07449f1a5a329e0 2460 LibClamAV debug: Loading /tmp/clamav-459f40871bdec07449f1a5a329e02460/main.db LibClamAV debug: Loading /tmp/clamav-459f40871bdec07449f1a5a329e02460/main.fp LibClamAV debug: Loading /tmp/clamav-459f40871bdec07449f1a5a329e02460/main.hdb LibClamAV debug: Loading /tmp/clamav-459f40871bdec07449f1a5a329e02460/main.ndb LibClamAV debug: Loading /tmp/clamav-459f40871bdec07449f1a5a329e02460/main.zmd Bound to address 127.0.0.1 on tcp port 3310 Setting connection queue length to 15 Archive: Archived file size limit set to 10485760 bytes. Archive: Recursion level limit set to 8. Archive: Files limit set to 1000. Archive: Compression ratio limit set to 250. Archive support enabled. Portable Executable support enabled. Mail files support enabled. OLE2 support enabled. HTML support enabled. Self checking every 600 seconds. LibClamAV debug: Recognized RAR file LibClamAV debug: in scanrar() LibClamAV debug: in cli_unrar LibClamAV debug: Head CRC: 90cf LibClamAV debug: Head Type: 73 LibClamAV debug: Flags: 0000 LibClamAV debug: Head Size: 000d LibClamAV debug: Found file block. LibClamAV debug: Pack Size: 290 LibClamAV debug: UnPack Version: 0x14 LibClamAV debug: Pack Method: 0x33 LibClamAV debug: Filename: clam.exe LibClamAV debug: Expected File CRC: 0xef073cfd LibClamAV debug: Computed File CRC: 0xef073cfd LibClamAV debug: Recognized DOS/W32 executable/library/driver file LibClamAV debug: Calculated MD5 checksum: aa15bcf478d165efd2065190eb473bcb LibClamAV debug: ClamAV-Test-File found in descriptor 10. LibClamAV debug: RAR: Exit code: 1 stream 50131: ClamAV-Test-File FOUND LibClamAV debug: Recognized RAR file LibClamAV debug: in scanrar() LibClamAV debug: in cli_unrar LibClamAV debug: Head CRC: 90cf LibClamAV debug: Head Type: 73 LibClamAV debug: Flags: 0000 LibClamAV debug: Head Size: 000d LibClamAV debug: Found file block. LibClamAV debug: Pack Size: 295 LibClamAV debug: UnPack Version: 0x1d LibClamAV debug: Pack Method: 0x33 LibClamAV debug: Filename: clam.exe LibClamAV debug: Offset: 62 LibClamAV debug: Not solid LibClamAV debug: Read tables LibClamAV debug: in read_tables Offset=364 in_addr=0 read_top=302 LibClamAV debug: init done LibClamAV debug: Finished length: 544 LibClamAV debug: Expected File CRC: 0xef073cfd LibClamAV debug: Computed File CRC: 0xef073cfd LibClamAV debug: Recognized DOS/W32 executable/library/driver file LibClamAV debug: Calculated MD5 checksum: aa15bcf478d165efd2065190eb473bcb LibClamAV debug: ClamAV-Test-File found in descriptor 10. LibClamAV debug: RAR: Exit code: 1 stream 50182: ClamAV-Test-File FOUND LibClamAV debug: Recognized MS CAB file LibClamAV debug: in cli_scanmscab() LibClamAV debug: MSCAB: Extracting data to /tmp/clamav-14767d8ec368ab19595fd99ea 20596be LibClamAV debug: Recognized DOS/W32 executable/library/driver file LibClamAV debug: Calculated MD5 checksum: aa15bcf478d165efd2065190eb473bcb LibClamAV debug: ClamAV-Test-File found in descriptor 9. stream 50181: ClamAV-Test-File FOUND LibClamAV debug: Recognized DOS/W32 executable/library/driver file LibClamAV debug: Calculated MD5 checksum: aa15bcf478d165efd2065190eb473bcb LibClamAV debug: ClamAV-Test-File found in descriptor 8. stream 50114: ClamAV-Test-File FOUND LibClamAV debug: Recognized BZip file LibClamAV debug: Recognized DOS/W32 executable/library/driver file LibClamAV debug: Calculated MD5 checksum: aa15bcf478d165efd2065190eb473bcb LibClamAV debug: ClamAV-Test-File found in descriptor 10. LibClamAV debug: Bzip: Infected with ClamAV-Test-File stream 50147: ClamAV-Test-File FOUND LibClamAV debug: Recognized ZIP file LibClamAV debug: in scanzip() LibClamAV debug: Zip: clam.exe, crc32: 0xef073cfd, encrypted: 0, compressed: 256 , normal: 544, method: 8, ratio: 2 (max: 250) LibClamAV debug: Recognized DOS/W32 executable/library/driver file LibClamAV debug: Calculated MD5 checksum: aa15bcf478d165efd2065190eb473bcb LibClamAV debug: ClamAV-Test-File found in descriptor 10. LibClamAV debug: Zip: Infected with ClamAV-Test-File stream 50180: ClamAV-Test-File FOUND LibClamAV debug: Calculated MD5 checksum: f472b4f5d912f58f1ce64e6f68105758 Segmentation fault This is output from ClamAV devel-20050720/984/Tue Jul 19 05:16:09 2005. The same thing happens with clamav-0.86.1 Any ideas on how to resolve this issue? Brian A. Reiter WolfeReiter, LLC : Thoughtful Computing [http://www.wolfereiter.com] _______________________________________________ http://lurker.clamav.net/list/clamav-devel.html
