ClamAV version : clamscan / ClamAV version devel-20040726
OS : FreeBSD palm.cise.ufl.edu 4.10-PRERELEASE
When scanning a file which appears to have a virus, but not currently
detected by clamav-0.75, clamav crashes. Here's a trace:
#0 0x28077fc0 in cli_bm_scanbuff (buffer=0x849e000 "", length=57344,
virname=0xbfbfefe4, root=0x80564c0)
at matcher-bm.c:111
111 idx = 211 * ((unsigned char) buffer[i]) + 37 * ((unsigned char)
buffer[i + 1]) + (unsigned char) buffer[i + 2];
(gdb) where
#0 0x28077fc0 in cli_bm_scanbuff (buffer=0x849e000 "", length=57344,
virname=0xbfbfefe4, root=0x80564c0)
at matcher-bm.c:111
#1 0x280781e1 in cl_scanbuff (buffer=0x849e000 "", length=57344, virname=0xbfbfefe4,
root=0x80564c0) at matcher.c:52
#2 0x280982ae in cli_scanpe (desc=12, virname=0xbfbfefe4, scanned=0x8055edc,
root=0x80564c0, limits=0x8056160,
options=107, arec=0xbfbfefac, mrec=0xbfbfefa8) at pe.c:612
#3 0x280814ab in cli_magic_scandesc (desc=12, virname=0xbfbfefe4, scanned=0x8055edc,
root=0x80564c0, limits=0x8056160,
options=107, arec=0xbfbfefac, mrec=0xbfbfefa8) at scanners.c:1129
#4 0x2807f1f5 in cli_scanzip (desc=10, virname=0xbfbfefe4, scanned=0x8055edc,
root=0x80564c0, limits=0x8056160,
options=107, arec=0xbfbfefac, mrec=0xbfbfefa8) at scanners.c:362
#5 0x280810cb in cli_magic_scandesc (desc=10, virname=0xbfbfefe4, scanned=0x8055edc,
root=0x80564c0, limits=0x8056160,
options=107, arec=0xbfbfefac, mrec=0xbfbfefa8) at scanners.c:1038
#6 0x28081585 in cli_scanfile (filename=0x8468900
"/var/tmp//clamav-0f940abdd708fbf2/attachment.zipprSETi",
virname=0xbfbfefe4, scanned=0x8055edc, root=0x80564c0, limits=0x8056160,
options=107, arec=0xbfbfefac,
mrec=0xbfbfefa8) at scanners.c:1157
#7 0x28080143 in cli_scandir (dirname=0x84688c0 "/var/tmp//clamav-0f940abdd708fbf2",
virname=0xbfbfefe4,
scanned=0x8055edc, root=0x80564c0, limits=0x8056160, options=107, arec=0xbfbfefac,
mrec=0xbfbfefa8)
at scanners.c:724
#8 0x28080dbd in cli_scanmail (desc=8, virname=0xbfbfefe4, scanned=0x8055edc,
root=0x80564c0, limits=0x8056160,
options=107, arec=0xbfbfefac, mrec=0xbfbfefa8) at scanners.c:972
#9 0x280811f7 in cli_magic_scandesc (desc=8, virname=0xbfbfefe4, scanned=0x8055edc,
root=0x80564c0, limits=0x8056160,
options=107, arec=0xbfbfefac, mrec=0xbfbfefa8) at scanners.c:1065
#10 0x28081516 in cl_scandesc (desc=8, virname=0xbfbfefe4, scanned=0x8055edc,
root=0x80564c0, limits=0x8056160,
options=107) at scanners.c:1145
#11 0x0804f99b in checkfile (filename=0x847a2f0 "msg.h", root=0x80564c0,
limits=0x8056160, options=107) at manager.c:838
#12 0x0804e749 in scanfile (filename=0x847a2f0 "msg.h", root=0x80564c0, user=0x0,
opt=0x805a040, limits=0x8056160)
at manager.c:523
#13 0x0804ddc0 in scanmanager (opt=0x805a040) at manager.c:308
#14 0x0804c030 in clamscan (opt=0x805a040) at clamscan.c:147
#15 0x0804c850 in main (argc=3, argv=0xbfbff5f4) at options.c:151
#16 0x08049912 in _start ()
It also appears to crash in the same place when scanning the raw zip file.
I can supply both the file(s) and the coredump if anyone needs them.
----------------------------------------------------------------------
| Jim Hranicky, Senior SysAdmin UF/CISE Department |
| E314D CSE Building Phone (352) 392-1499 |
| [EMAIL PROTECTED] http://www.cise.ufl.edu/~jfh |
----------------------------------------------------------------------
-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
