Hi,
unfortunately, it seems that the changes how to scan mbox code
introduced in ClamAV 0.82 broke the ability to scan some files and can
cause computers to hang (keep at 100% CPU consumption for an "endless"
time). I observed the same problem in ClamAV 0.83. No problem in 0.81
or when the '--no-mail' option is given.
The problem occurs in a lot of .TBB (TheBat mail archives) files. For
example, I scanned a 617 KB small 'MESSAGES.TBB' file with all 3
ClamAV versions mentioned above. The SCAN SUMMARY of all showed the
'I/O buffer size: 131072 bytes', but the scan time was over 100
seconds with 0.8[23] versus 0.825 sec with 0.81:
ClamAV version Lines of Data scanned Scan Time
debug output
0.83 237110 213.76 MB 115.270 sec
0.82 -||- -||- 108.173 sec
0.81 49 0.60 MB 0.825 sec
The more than 237 thousand lines of the --debug output contain a lot
of 'rfc822comments' entries.
rob.
mfg,
Ing. Robert Allerstorfer
ANET - New Media Solutions
Allerstorfer & Beutel OEG
www.anet.at
--
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
