Re: [clamav-users] ClamAV SegFault on Reload - 0.99.3-beta1

[Michael D.]

Hi Steven,

Tried running "clamdscan --reload" throughout the night - no segfaults 
so far.


I have been running "clamav-unofficial-sigs.sh" via. cron every hour - 
and it's the reload invoked by that script that sometimes triggers the 
segfault.


I'll examine my logs to see if I can narrow down on any specific 
DB-Update that might cause the fault.


And thanks for your reply :)

Best regards
  Michael

On 09/25/2017 04:53 PM, Steven Morgan wrote:

Michael,

Sorry for not replying sooner. I reviewed the segfault, gdb output, and
code on Friday. Are you able to reproduce the problem with 'clamdscan
--reload'?

Thanks,
Steve

On Sun, Sep 24, 2017 at 8:10 AM, Michael D.  wrote:


Hi,

I twice tried to reach out to the ClamAV Developers regarding this error,
but been ignored.

Anyone?

Best regards

Michael


Latest segfaults since rebooting 8 days ago:

Sep 21 16:42:49 Boomer kernel: clamd[4208]: segfault at 7f27d5dd7780 ip
7f27c56650b2 sp 7ffd818b8280 error 4 in
libclamav.so.7.1.1[7f27c562b000+1cf000]
Sep 21 21:39:25 Boomer kernel: clamd[8589]: segfault at 14cf977 ip
7f64092b7086 sp 7ffc215e33c0 error 4 in
libclamav.so.7.1.1[7f640927d000+1cf000]
Sep 22 10:39:26 Boomer kernel: clamd[28493]: segfault at 15f56e6 ip
7fbcbed4c086 sp 7ffd451b9ff0 error 4 in
libclamav.so.7.1.1[7fbcbed12000+1cf000]
Sep 22 17:40:35 Boomer kernel: clamd[26125]: segfault at 2c561cd ip
7fb8586691c5 sp 7fffee7a7cd8 error 4 in
libclamav.so.7.1.1[7fb8585aa000+1cf000]
Sep 23 06:38:17 Boomer kernel: clamd[29676]: segfault at f2e99de ip
7f9f243090b2 sp 7ffd90a09bf0 error 4 in
libclamav.so.7.1.1[7f9f242cf000+1cf000]
Sep 23 18:38:53 Boomer kernel: clamd[20460]: segfault at 32de7d5 ip
7f3f518481c5 sp 7ffda4178b98 error 4 in
libclamav.so.7.1.1[7f3f51789000+1cf000]
Sep 23 23:42:25 Boomer kernel: clamd[9637]: segfault at 33ac956 ip
7fc4ddb881c5 sp 7ffe1457f378 error 4 in
libclamav.so.7.1.1[7fc4ddac9000+1cf000]
Sep 24 09:38:53 Boomer kernel: clamd[13548]: segfault at 6 ip
7f28c1c5 sp 7fffb209c748 error 4 in
libclamav.so.7.1.1[7f28bbafd000+1cf000]
Sep 24 11:44:37 Boomer kernel: clamd[17253]: segfault at 6 ip
7f3af21b41c5 sp 7ffe2c059ad8 error 4 in
libclamav.so.7.1.1[7f3af20f5000+1cf000]
Sep 24 13:42:53 Boomer kernel: clamd[22657]: segfault at 1c0d12b ip
7efbfdf2f1c5 sp 7fff0b092628 error 4 in
libclamav.so.7.1.1[7efbfde7+1cf000]



On 09/22/2017 05:50 PM, Michael D. wrote:


Hi,

The Clamd process still SegFault on reload after upgrading to
0.99.3-beta1.

Sep 21 16:42:49 Boomer kernel: clamd[4208]: segfault at 7f27d5dd7780 ip
7f27c56650b2 sp 7ffd818b8280 error 4 in
libclamav.so.7.1.1[7f27c562b000+1cf000]
Sep 21 21:39:25 Boomer kernel: clamd[8589]: segfault at 14cf977 ip
7f64092b7086 sp 7ffc215e33c0 error 4 in
libclamav.so.7.1.1[7f640927d000+1cf000]
Sep 22 10:39:26 Boomer kernel: clamd[28493]: segfault at 15f56e6 ip
7fbcbed4c086 sp 7ffd451b9ff0 error 4 in
libclamav.so.7.1.1[7fbcbed12000+1cf000]

Anything I can do to help narrowing down on the fault?

Best regards
  Michael


On 07/03/2017 12:50 PM, Michael D. wrote:


Hi,

I've been running the Development Version of ClamAV for a while, and the
only problem I've encountered is that sometimes when it's instructed to
reload the databases (clamscan --reload) it SegFaults:

Jun 18 15:25:04 Boomer kernel: clamd[3414]: segfault at 1de2 ip
7f618669d345 sp 7ffe57c51d28 error 4 in
libclamav.so.7.1.1[7f61865e+1b7000]
Jun 19 01:44:17 Boomer kernel: clamd[3423]: segfault at 15f0d1 ip
7f30e1010345 sp 7ffdb449ccb8 error 4 in
libclamav.so.7.1.1[7f30e0f53000+1b7000]
Jun 30 22:41:08 Boomer kernel: clamd[3723]: segfault at 748334 ip
7f16a9c04066 sp 7ffc68399d80 error 4 in
libclamav.so.7.1.1[7f16a9bca000+1cf000]

To get more information I installed gdb, and ran it like this:

root@Boomer [ ~ ]# gdb /usr/sbin/clamd
gdb) run --debug -c /etc/clamav/clamd.conf
Starting program: /usr/sbin/clamd --debug -c /etc/clamav/clamd.conf
warning: Unable to find libthread_db matching inferior's thread library,
thread debugging will not be available.
LibClamAV debug: Initialized devel-clamav-0.99-beta1-683-g5a0b148b4
engine
LibClamAV debug: Initializing phishcheck module



After a while I got this: (Along with a Core Dump)

$Received POLLIN|POLLHUP on fd 7
$fds_poll_recv: timeout after 5 seconds
$Received POLLIN|POLLHUP on fd 11
$got command RELOAD (7, 2), argument:
$Receive thread: closing conn (FD 11), group finished
$Consumed entire command

Thread 1 "clamd" received signal SIGSEGV, Segmentation fault.
mpool_free (mp=0x77fa6000, ptr=0x1) at mpool.c:698
698  f = allocbase_fromfrag(f);
(gdb)
(gdb)
(gdb)
(gdb) bt
#0  mpool_free (mp=0x77fa6000, ptr=0x1) at mpool.c:698
#1  0x77a2c038 in hm_free (root=root@entry=0x75289168) at
matcher-hash.c:315
#2  0x77a3d242 in cl_engine_free (engine=engine@entry=0x6b9b40)
at readdb.c:4989
#3  

Re: [clamav-users] ClamAV SegFault on Reload - 0.99.3-beta1

[Steven Morgan]

Michael,

Sorry for not replying sooner. I reviewed the segfault, gdb output, and
code on Friday. Are you able to reproduce the problem with 'clamdscan
--reload'?

Thanks,
Steve

On Sun, Sep 24, 2017 at 8:10 AM, Michael D.  wrote:

> Hi,
>
> I twice tried to reach out to the ClamAV Developers regarding this error,
> but been ignored.
>
> Anyone?
>
> Best regards
>
>Michael
>
>
> Latest segfaults since rebooting 8 days ago:
>
> Sep 21 16:42:49 Boomer kernel: clamd[4208]: segfault at 7f27d5dd7780 ip
> 7f27c56650b2 sp 7ffd818b8280 error 4 in
> libclamav.so.7.1.1[7f27c562b000+1cf000]
> Sep 21 21:39:25 Boomer kernel: clamd[8589]: segfault at 14cf977 ip
> 7f64092b7086 sp 7ffc215e33c0 error 4 in
> libclamav.so.7.1.1[7f640927d000+1cf000]
> Sep 22 10:39:26 Boomer kernel: clamd[28493]: segfault at 15f56e6 ip
> 7fbcbed4c086 sp 7ffd451b9ff0 error 4 in
> libclamav.so.7.1.1[7fbcbed12000+1cf000]
> Sep 22 17:40:35 Boomer kernel: clamd[26125]: segfault at 2c561cd ip
> 7fb8586691c5 sp 7fffee7a7cd8 error 4 in
> libclamav.so.7.1.1[7fb8585aa000+1cf000]
> Sep 23 06:38:17 Boomer kernel: clamd[29676]: segfault at f2e99de ip
> 7f9f243090b2 sp 7ffd90a09bf0 error 4 in
> libclamav.so.7.1.1[7f9f242cf000+1cf000]
> Sep 23 18:38:53 Boomer kernel: clamd[20460]: segfault at 32de7d5 ip
> 7f3f518481c5 sp 7ffda4178b98 error 4 in
> libclamav.so.7.1.1[7f3f51789000+1cf000]
> Sep 23 23:42:25 Boomer kernel: clamd[9637]: segfault at 33ac956 ip
> 7fc4ddb881c5 sp 7ffe1457f378 error 4 in
> libclamav.so.7.1.1[7fc4ddac9000+1cf000]
> Sep 24 09:38:53 Boomer kernel: clamd[13548]: segfault at 6 ip
> 7f28c1c5 sp 7fffb209c748 error 4 in
> libclamav.so.7.1.1[7f28bbafd000+1cf000]
> Sep 24 11:44:37 Boomer kernel: clamd[17253]: segfault at 6 ip
> 7f3af21b41c5 sp 7ffe2c059ad8 error 4 in
> libclamav.so.7.1.1[7f3af20f5000+1cf000]
> Sep 24 13:42:53 Boomer kernel: clamd[22657]: segfault at 1c0d12b ip
> 7efbfdf2f1c5 sp 7fff0b092628 error 4 in
> libclamav.so.7.1.1[7efbfde7+1cf000]
>
>
>
> On 09/22/2017 05:50 PM, Michael D. wrote:
>
>> Hi,
>>
>> The Clamd process still SegFault on reload after upgrading to
>> 0.99.3-beta1.
>>
>> Sep 21 16:42:49 Boomer kernel: clamd[4208]: segfault at 7f27d5dd7780 ip
>> 7f27c56650b2 sp 7ffd818b8280 error 4 in
>> libclamav.so.7.1.1[7f27c562b000+1cf000]
>> Sep 21 21:39:25 Boomer kernel: clamd[8589]: segfault at 14cf977 ip
>> 7f64092b7086 sp 7ffc215e33c0 error 4 in
>> libclamav.so.7.1.1[7f640927d000+1cf000]
>> Sep 22 10:39:26 Boomer kernel: clamd[28493]: segfault at 15f56e6 ip
>> 7fbcbed4c086 sp 7ffd451b9ff0 error 4 in
>> libclamav.so.7.1.1[7fbcbed12000+1cf000]
>>
>> Anything I can do to help narrowing down on the fault?
>>
>> Best regards
>>  Michael
>>
>>
>> On 07/03/2017 12:50 PM, Michael D. wrote:
>>
>>> Hi,
>>>
>>> I've been running the Development Version of ClamAV for a while, and the
>>> only problem I've encountered is that sometimes when it's instructed to
>>> reload the databases (clamscan --reload) it SegFaults:
>>>
>>> Jun 18 15:25:04 Boomer kernel: clamd[3414]: segfault at 1de2 ip
>>> 7f618669d345 sp 7ffe57c51d28 error 4 in
>>> libclamav.so.7.1.1[7f61865e+1b7000]
>>> Jun 19 01:44:17 Boomer kernel: clamd[3423]: segfault at 15f0d1 ip
>>> 7f30e1010345 sp 7ffdb449ccb8 error 4 in
>>> libclamav.so.7.1.1[7f30e0f53000+1b7000]
>>> Jun 30 22:41:08 Boomer kernel: clamd[3723]: segfault at 748334 ip
>>> 7f16a9c04066 sp 7ffc68399d80 error 4 in
>>> libclamav.so.7.1.1[7f16a9bca000+1cf000]
>>>
>>> To get more information I installed gdb, and ran it like this:
>>>
>>> root@Boomer [ ~ ]# gdb /usr/sbin/clamd
>>> gdb) run --debug -c /etc/clamav/clamd.conf
>>> Starting program: /usr/sbin/clamd --debug -c /etc/clamav/clamd.conf
>>> warning: Unable to find libthread_db matching inferior's thread library,
>>> thread debugging will not be available.
>>> LibClamAV debug: Initialized devel-clamav-0.99-beta1-683-g5a0b148b4
>>> engine
>>> LibClamAV debug: Initializing phishcheck module
>>> 
>>>
>>>
>>> After a while I got this: (Along with a Core Dump)
>>>
>>> $Received POLLIN|POLLHUP on fd 7
>>> $fds_poll_recv: timeout after 5 seconds
>>> $Received POLLIN|POLLHUP on fd 11
>>> $got command RELOAD (7, 2), argument:
>>> $Receive thread: closing conn (FD 11), group finished
>>> $Consumed entire command
>>>
>>> Thread 1 "clamd" received signal SIGSEGV, Segmentation fault.
>>> mpool_free (mp=0x77fa6000, ptr=0x1) at mpool.c:698
>>> 698  f = allocbase_fromfrag(f);
>>> (gdb)
>>> (gdb)
>>> (gdb)
>>> (gdb) bt
>>> #0  mpool_free (mp=0x77fa6000, ptr=0x1) at mpool.c:698
>>> #1  0x77a2c038 in hm_free (root=root@entry=0x75289168) at
>>> matcher-hash.c:315
>>> #2  0x77a3d242 in cl_engine_free (engine=engine@entry=0x6b9b40)
>>> at readdb.c:4989
>>> #3  0x0040e65d in reload_db (ret=,
>>> do_check=0, opts=0x62e010, dboptions=8202, engine=0x6b9b40) at
>>>