Is it expected that the RSS memory increases with approximately the size
of the zip file before extracting it?
No. The RSS memory size will increase at most by the smaller of
- compressed internal file size
- max-filesize (the file is skipped if the value's exceeded)
- max-scansize (the scan is aborted if the value's exceeded)
Can you clarify 'compressed internal file size' a bit further?
Assume:
* a zip file which contains 4 files of 100 MB.
* max-filesize set to 1GB
* max-scansize set to 4GB
* RSS before the scan +/- 115 MB.
What is the expected value of the RSS during the scan?
* somewhere between 100MB and 200MB or
* somewhere between 200MB and 300MB or
* somewhere between 300MB and 400MB or
* somewhere between 400MB and 500MB or
* somewhere between 500MB and 600MB?
Best regards,
Bram
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net
