Per Jessen wrote:
> I guess there was no other way than to make clamav dependent on gcc, but
> it sure is bad timing.  
> Only a week before Christmas, most systems are frozen, people have
> already left for vacation etc.  Updating clamav is within reason for
> us, but upgrading gcc too ...
>   

You don't need to upgrade to 4.1.2/4.2.x.
gcc-3.4 can be nicely installed side-by-side with a 4.0.x/4.1.0 series
gcc, all you need to do is:

# apt-get install gcc-3.4
$ export CC=gcc-3.4
$ ./configure

> Was/is there absolutely no way of fixing this gcc problem in the clamav
> source?
>   

There are bounds checks in the code, that the compiler removes, thus
leaving clamav vulnerable and crashing.
Sorry, but that is a broken compiler version.

--Edwin


_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to