-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ladar Levison wrote:
| I've been having a problem with libclamav segfaulting. And since its linked 
into my mail
| server code (on lavabit.com), its been taking down the server. I've taken the 
temporary
| step of disabling OLE2 scanning, but would like to track down the bug. It 
appears to be
| a recursion issue. My suggested patch would be to add rec_level+1 to lines 
555, 557 and
| 559 of ole2_extract.c, but am curious to hear someone else's opinion.
|

can you put a breakpoint to:
        sprintf(newname, "%s/%s", dir, name);
(line 625)
and look at dir and name variables?

perhaps it's very strange it crashes on sprintf, normally unsafe
but since strlen(name) and strlen(dir) are ok, snprintf
should have enough room to put dir and name in newname

I don't think it's a recursion problem handler_writefile is called
once

Regards

- --
Gianluigi Tiesi <[EMAIL PROTECTED]>
EDP Project Leader
Netfarm S.r.l. - http://www.netfarm.it/
Free Software: http://oss.netfarm.it/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHynLf3UE5cRfnO04RAoFZAJ4urRygEp25LOuq0WfEp2N9kQpIJgCgjYnm
WJZIF8cBfPi2Z8sL90Mr11U=
=bFou
-----END PGP SIGNATURE-----
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

Reply via email to