Re: [Clamav-users] clamd segment faults -- zip archives

2004-08-25 Thread Trog
On Tue, 2004-08-24 at 17:54, Matt wrote:
 Dale Anderson wrote:
 
  I have been having segment faults with clamd. I think
  I am finding it happens on zip archives. I have sent a
  few test virus zip files to the system each of them
  causing a segment fault. Can someone help me out?
  
 
  A little more info would probably help.
 

Which version of libz are you using? Anything other than 1.1.4 is liable
to crash or have security problems.

-tony



signature.asc
Description: This is a digitally signed message part


Re: [Clamav-users] clamd segment faults -- zip archives

2004-08-25 Thread Christopher X. Candreva
On Wed, 25 Aug 2004, Trog wrote:

 Which version of libz are you using? Anything other than 1.1.4 is liable
 to crash or have security problems.

Just to be clear -- you are saying the latest verion 1.2.1 has problems ?

Is this documented any place ?

==
Chris Candreva  -- [EMAIL PROTECTED] -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/


---
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink  Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] clamd segment faults -- zip archives

2004-08-25 Thread Trog
On Wed, 2004-08-25 at 12:34, Christopher X. Candreva wrote:
 On Wed, 25 Aug 2004, Trog wrote:
 
  Which version of libz are you using? Anything other than 1.1.4 is liable
  to crash or have security problems.
 
 Just to be clear -- you are saying the latest verion 1.2.1 has problems ?

Yes, that is what I am saying.

 
 Is this documented any place ?
 

It's documented in the archives of this mailing list.

-trog



signature.asc
Description: This is a digitally signed message part


Re: [Clamav-users] clamd segment faults -- zip archives

2004-08-25 Thread Dennis Skinner
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Nigel Horne wrote:
| This is a known problem with zlib, not clamd. Please (a) ensure
| you have an older version (1.1.4 I think, but someone else will
| correct me no doubt) and (b) hassle the author of zlib to fix his/her
| code.
I took a quick look around and it appears the zlib-dev list is private
(including the archives) and I don't see a bugzilla for them anywhere.
Is this problem known by them or just ClamAV ppl?  Anyone know what/if
anything is being done about it and how soon?
FYI to suse users on the list - suse 9.1 (possibly 9.0 as well) ships
with 1.2.1.
On a similar topic, I recall discussion that Exiscan may not need the
ScanArchive option, but I seem to recall some confusion in that
conversation.  Can anyone confirm that is the case?  Probably a good FAQ
item (either here or on the Exiscan side, or both)
Also, I noticed that Exim (at least with Exiscan) links to libz.so.1
just like clamd.  I suppose I should see if anyone on the Exiscan list
has had issues with 1.2.1.
Thanks!
- --
Dennis Skinner
Systems Administrator
BlueFrog Internet
http://www.bluefrog.com
The tendinous part of the mind, so to speak, is more developed in
winter; the fleshy, in summer. I should say winter had given the bone
and sinew to literature, summer the tissues and the blood.  - John
Burroughs (1837 - 1921), The Snow-Walkers
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBLLGjy9iYXMzyPbYRApzaAJ9Lmf0OxWSTq3M8PXBa4oN/IhJSSQCfWfTE
P7cYHI2IeZxAcqCkVPDNKE0=
=Wpun
-END PGP SIGNATURE-
---
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink  Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] clamd segment faults -- zip archives

2004-08-25 Thread Tomasz Kojm
On Wed, 25 Aug 2004 11:35:00 -0400
Dennis Skinner [EMAIL PROTECTED] wrote:

 I took a quick look around and it appears the zlib-dev list is private
 (including the archives) and I don't see a bugzilla for them anywhere.
 Is this problem known by them or just ClamAV ppl?  Anyone know what/if
 anything is being done about it and how soon?

The problem was reported to the zlib maintainers a few months ago.

 Also, I noticed that Exim (at least with Exiscan) links to libz.so.1
 just like clamd.  I suppose I should see if anyone on the Exiscan list
 has had issues with 1.2.1.

It most likely only uses zlib for its own purposes (but I'm guessing).

-- 
   oo. Tomasz Kojm [EMAIL PROTECTED]
  (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
 \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
   //\   /\  Thu Aug 26 03:13:10 CEST 2004


pgpyiYjbzpkp9.pgp
Description: PGP signature


Re: [Clamav-users] clamd segment faults -- zip archives

2004-08-24 Thread Matt
Dale Anderson wrote:

 I have been having segment faults with clamd. I think
 I am finding it happens on zip archives. I have sent a
 few test virus zip files to the system each of them
 causing a segment fault. Can someone help me out?
 

 A little more info would probably help.

Matt



---
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink  Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] clamd segment faults -- zip archives

2004-08-24 Thread Dale Anderson

--- Dale Anderson [EMAIL PROTECTED] wrote:

 I have been having segment faults with clamd. I
 think
 I am finding it happens on zip archives. I have sent
 a
 few test virus zip files to the system each of them
 causing a segment fault. Can someone help me out?
 
Ok I got my system not to segment fault. I remarked
out the line in clamav.conf #ScanArcive. After testing
it is still scanning .zip attachments and finds the
test virus sig in eicar.zip file. So it looks good to
me. I hope this will help someone else. Thanks
everyone for the help! 



___
Do you Yahoo!?
Win 1 of 4,000 free domain names from Yahoo! Enter now.
http://promotions.yahoo.com/goldrush


---
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink  Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


Re: [Clamav-users] clamd segment faults -- zip archives

2004-08-24 Thread Nigel Horne
On Tuesday 24 Aug 2004 4:32 pm, Dale Anderson wrote:
 I have been having segment faults with clamd. I think
 I am finding it happens on zip archives. I have sent a
 few test virus zip files to the system each of them
 causing a segment fault. Can someone help me out?

This is a known problem with zlib, not clamd. Please (a) ensure
you have an older version (1.1.4 I think, but someone else will
correct me no doubt) and (b) hassle the author of zlib to fix his/her
code.

-Nigel



---
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink  Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users