[Bug 1692073] Re: check_clamav test fails

[Bug Watch Updater]

Launchpad has imported 9 comments from the remote bug at
https://bugzilla.clamav.net/show_bug.cgi?id=11898.

If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.


On 2017-08-16T12:33:23+00:00 Marc Deslauriers wrote:

Created attachment 7289
patch for newer zlib

When building ClamAV with zlib 1.2.9+, the following test fails during
build:

check_bytecode.c:127:F:arithmetic:test_inflate_jit:0: cli_bytecode_run
failed, expected: 0, have: 28

check_bytecode.c:108:E:arithmetic:test_inflate_int:0: (after this point)
Received signal 11 (Segmentation fault)

Downstream bug:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1692073

This is caused by the following commit to zlib 1.2.9:
https://github.com/madler/zlib/commit/b516b4bdd7c0c9f0858adfebf732089014f7b282

Attached is the patch I used to fix this issue in Ubuntu. Thanks.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1692073/comments/10


On 2017-08-17T22:05:52+00:00 Stevmorg wrote:

Marc,

Thanks for reporting this and for sending a patch. Targeting for the
0.99.3 release pending tests.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1692073/comments/14


On 2017-08-18T17:49:19+00:00 Stevmorg wrote:

*** Bug 11891 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1692073/comments/15


On 2017-08-22T21:25:59+00:00 Stevmorg wrote:

*** Bug 11742 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1692073/comments/16


On 2017-08-24T21:46:38+00:00 Stevmorg wrote:

Patch applied in commit 48fef7b8ec06dbfbf899986cdcbe05071a633eb4,
shipping with 0.99.3.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1692073/comments/17


On 2017-10-19T13:56:12+00:00 Stevmorg wrote:

*** Bug 11893 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1692073/comments/18


On 2017-10-31T19:48:36+00:00 Stevmorg wrote:

*** Bug 11947 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1692073/comments/19


On 2017-12-15T18:24:33+00:00 Stevmorg wrote:

*** Bug 11865 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1692073/comments/20


On 2017-12-15T21:11:37+00:00 Stevmorg wrote:

*** Bug 11736 has been marked as a duplicate of this bug. ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1692073/comments/21


** Changed in: clamav
   Status: Unknown => Fix Released

** Changed in: clamav
   Importance: Unknown => Medium

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1692073

Title:
  check_clamav test fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/clamav/+bug/1692073/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1692073] Re: check_clamav test fails

[Andreas Hasenack]

** Merge proposal unlinked:
   
https://code.launchpad.net/~ahasenack/ubuntu/+source/clamav/+git/clamav/+merge/334148

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1692073

Title:
  check_clamav test fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/clamav/+bug/1692073/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1692073] Re: check_clamav test fails

[Andreas Hasenack]

** Merge proposal unlinked:
   
https://code.launchpad.net/~ahasenack/ubuntu/+source/clamav/+git/clamav/+merge/334148

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1692073

Title:
  check_clamav test fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/clamav/+bug/1692073/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1692073] Re: check_clamav test fails

[Launchpad Bug Tracker]

** Merge proposal linked:
   
https://code.launchpad.net/~ahasenack/ubuntu/+source/clamav/+git/clamav/+merge/334148

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1692073

Title:
  check_clamav test fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/clamav/+bug/1692073/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1692073] Re: check_clamav test fails

[jean-christophe manciot]

If, and only if, I add the following 2 lines to debian/rules, the build passes:
override_dh_shlibdeps:
dh_shlibdeps --dpkg-shlibdeps-params=--ignore-missing-info

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1692073

Title:
  check_clamav test fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/clamav/+bug/1692073/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1692073] Re: check_clamav test fails

[jean-christophe manciot]

Building 0.99.2+dfsg-6ubuntu2 in **Zesty**:

dpkg-shlibdeps: error: no dependency information found for 
/usr/lib/libxml2.so.2 (used by 
debian/libclamav7/usr/lib/x86_64-linux-gnu/libclamav.so.7.1.1)
Hint: check if the library actually comes from a package.
dh_shlibdeps: dpkg-shlibdeps -Tdebian/libclamav7.substvars 
debian/libclamav7/usr/lib/x86_64-linux-gnu/libclamav.so.7.1.1 returned exit 
code 2
dh_shlibdeps: Aborting due to earlier error
debian/rules:71: recipe for target 'binary' failed
make: *** [binary] Error 25
dpkg-buildpackage: error: fakeroot debian/rules binary gave error exit status 2

Although:
# apt-cache policy libxml2-dev
libxml2-dev:
  Installed: 2.9.4+dfsg1-2.2

It turns out that the requested file does not exist in Zesty:
# apt-file search /usr/lib/libxml2.so.2
#

However, the same requested lib file is offered in another location by libxml2:
1) in Zesty:
---
# apt-file search libxml2.so.2
...
libxml2: /usr/lib/x86_64-linux-gnu/libxml2.so.2
...

2) in Artful:

# dpkg --contents libxml2_2.9.4+dfsg1-3build2_amd64.deb | grep libxml2.so.2
-rw-r--r-- root/root   1801528 2017-08-02 22:08 
./usr/lib/x86_64-linux-gnu/libxml2.so.2.9.4
lrwxrwxrwx root/root 0 2017-08-02 22:08 
./usr/lib/x86_64-linux-gnu/libxml2.so.2 -> libxml2.so.2.9.4

In both Ubuntu releases, the file libxml2.so.2 is located in:
/usr/lib/x86_64-linux-gnu

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1692073

Title:
  check_clamav test fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/clamav/+bug/1692073/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1692073] Re: check_clamav test fails

[Launchpad Bug Tracker]

This bug was fixed in the package clamav - 0.99.2+dfsg-6ubuntu2

---
clamav (0.99.2+dfsg-6ubuntu2) artful; urgency=medium

  * SECURITY UPDATE: DoS via crafted e-mail message
- debian/patches/CVE-2017-6418.patch: fix invalid read in
  libclamav/message.c.
- CVE-2017-6418
  * SECURITY UPDATE: DoS via WWPack compression
- debian/patches/CVE-2017-6420.patch: add bounds checks to
  libclamav/wwunpack.c.
- debian/patches/CVE-2017-6420-2.patch: fix unit tests in
  libclamav/wwunpack.c, unit_tests/check_jsnorm.c.
- CVE-2017-6420
  * debian/patches/fix_newer_zlib.patch: fix compatibility with zlib
1.2.9 and newer (LP: #1692073).

 -- Marc Deslauriers   Tue, 15 Aug 2017
16:04:46 -0400

** Changed in: clamav (Ubuntu)
   Status: Confirmed => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-6418

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-6420

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1692073

Title:
  check_clamav test fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/clamav/+bug/1692073/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1692073] Re: check_clamav test fails

[Marc Deslauriers]

** Bug watch added: bugzilla.clamav.net/ #11898
   https://bugzilla.clamav.net/show_bug.cgi?id=11898

** Also affects: clamav via
   https://bugzilla.clamav.net/show_bug.cgi?id=11898
   Importance: Unknown
   Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1692073

Title:
  check_clamav test fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/clamav/+bug/1692073/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1692073] Re: check_clamav test fails

[Marc Deslauriers]

The failed test is caused by zlib 1.2.11 in zesty. Downgrading to 1.2.8
allows it to build successfully.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1692073

Title:
  check_clamav test fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1692073/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1692073] Re: check_clamav test fails

[Andreas Hasenack]

No, the test fails in artful even with llvm 3.8 or 3.9. It's something
else in the toolchain I believe.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1692073

Title:
  check_clamav test fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1692073/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1692073] Re: check_clamav test fails

[Andreas Hasenack]

No, the test fails in artful even with llvm 3.8 or 3.9. It's something
else in the toolchain I believe.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1692073

Title:
  check_clamav test fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1692073/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1692073] Re: check_clamav test fails

[Bug Watch Updater]

** Changed in: clamav (Gentoo Linux)
   Importance: Unknown => Medium

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1692073

Title:
  check_clamav test fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1692073/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1692073] Re: check_clamav test fails

[jean-christophe manciot]

I tried to build it with:

apt-cache policy llvm
llvm:
  Installed: 1:4.0-34ubuntu2

I also had no issue when building from the exact same clamav sources
(0.99.2+dfsg-6) while on Ubuntu yakkety which uses llvm-3.9.

It seems that the issue originates from incompatibility(ies) between
clamav and llvm-4.0.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1692073

Title:
  check_clamav test fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1692073/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1692073] Re: check_clamav test fails

[Andreas Hasenack]

I also rebuilt the debian package with llvm-3.9, and the test also
passes.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1692073

Title:
  check_clamav test fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1692073/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1692073] Re: check_clamav test fails

[Andreas Hasenack]

I also rebuilt the debian package with llvm-3.9, and the test also
passes.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1692073

Title:
  check_clamav test fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1692073/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs