Re: [Clamav-devel] Patch: freshclam: keep downloaded cdiffs for local distribution

2007-03-22 Thread Trog
On Thu, 2007-03-22 at 10:11 +0200, Aidas Kasparas wrote: For some reason patch did not went to the list. Copy saved in http://www.gmc.lt/~kaspar/keep-cdiffs.diff please open a bug on bugzilla, and mark it as an enhancement. -trog signature.asc Description: This is a digitally signed

Re: [Clamav-devel] ole2_extract code exploitable

2006-09-07 Thread Trog
there will be no Macro virus detection. -trog signature.asc Description: This is a digitally signed message part ___ http://lurker.clamav.net/list/clamav-devel.html

Re: [Clamav-devel] is libclamav thread-safe?

2006-04-21 Thread Trog
fault, but I've been stresstesting this for more than three weeks now, and just recently moved to a stand-alone test-system. Send a copy of the backtrace for the crash. -trog signature.asc Description: This is a digitally signed message part ___ http

Re: [Clamav-devel] Clamav Still Under Development

2006-04-21 Thread Trog
happening. For example, CVS now has initial support for Sensory Networks' NodalCore Accelerator, a hardware based scanning acceleration engine. -trog signature.asc Description: This is a digitally signed message part ___ http://lurker.clamav.net/list

Re: [Clamav-devel] ClamAV infinite loop

2005-11-28 Thread Trog
that. The memory allocator can return the same address if it is able to extend the existing memory region. cli_realloc() is correct as it is. -trog signature.asc Description: This is a digitally signed message part ___ http://lurker.clamav.net/list

Re: [Clamav-devel] local setbit vs. mpz_setbit

2005-10-31 Thread Trog
discussion. -trog signature.asc Description: This is a digitally signed message part ___ http://lurker.clamav.net/list/clamav-devel.html

Re: [Clamav-devel] clamav debugging

2005-07-20 Thread Trog
of 'clamscan --debug filename' -trog signature.asc Description: This is a digitally signed message part ___ http://lurker.clamav.net/list/clamav-devel.html

Re: [Clamav-devel] ZIP- and CAB-SFX

2005-07-06 Thread Trog
to use. Also, the ziplib code that we use seems to automatically skip past the prefix-code in SFX archives, so the extra seek may not be necessary. Again, TK would probably know for sure. -trog signature.asc Description: This is a digitally signed message part

Re: [Clamav-devel] Segmentation fault issues

2005-06-22 Thread Trog
On Tue, 2005-06-21 at 11:52 -0600, Dave Shariff Yadallee - System Administrator a.k.a. The Root of the Problem wrote: I see this snippet in my logs Tue Jun 21 10:03:11 2005 - stream: OK LibClamAV Error: Segmentation fault :-( Bye.. Why is this appearing?

Re: [Clamav-devel] Segmentation fault issues

2005-06-22 Thread Trog
need to send a copy of the file that produces this error to bugs(at)clamav.net -trog signature.asc Description: This is a digitally signed message part ___ http://lurker.clamav.net/list/clamav-devel.html

Re: [Clamav-devel] memleak in clamd (freebsd 5.4) ?

2005-05-11 Thread Trog
mem. How did you request clamd to exit? -trog signature.asc Description: This is a digitally signed message part ___ http://lurker.clamav.net/list/clamav-devel.html

Re: [Clamav-devel] memleak in clamd (freebsd 5.4) ?

2005-05-11 Thread Trog
I done something wrong ? You need to tell clamd to exit cleanly. Either telnet to its TCP port and give it the QUIT command, or use the enclosed perl script if using UNIX sockets. -trog clamdquit.pl Description: Perl program signature.asc Description: This is a digitally signed message

Re: [Clamav-devel] memleak in clamd (freebsd 5.4) ?

2005-05-11 Thread Trog
On Wed, 2005-05-11 at 12:11 +0200, Martin Blapp wrote: and then clamd/valgrind gets inresponsive. Any other thing I need to do ? Probably need to wait for valgrind to finish accounting for the memory. -trog signature.asc Description: This is a digitally signed message part

Re: [Clamav-devel] memleak in clamd (freebsd 5.4) ?

2005-05-11 Thread Trog
and then connect with telnet sending QUIT it works ... but then valgrind doesn report any problems anymore. So it's not leaking memory then. -trog signature.asc Description: This is a digitally signed message part ___ http://lurker.clamav.net/list

RE: [Clamav-devel] request some help on virus samples

2005-04-28 Thread Trog
virus signature, av virus , etc First of all - In my opinion, this is the wrong place in here to ask. This is a ClamAV developer list. To your problem: Take a look here: Please don't help to spread viruses in this way. If he's a researcher, then I'm the new pope. -trog signature.asc

Re: [Clamav-devel] Re: [Clamav-announce] announcing ClamAV 0.84rc 1

2005-04-20 Thread Trog
On Wed, 2005-04-20 at 15:00 +0100, Nigel Horne wrote: Nigel, could you please review the script? What script is this? This one: http://www.itg.uiuc.edu/itg_software/clmilter_watch/ signature.asc Description: This is a digitally signed message part

Re: [Clamav-devel] clamd potential race condition

2005-04-06 Thread Trog
to overcome this limitation, so when a reload is requested, a new signature tree is generated, and the old one is free'd when all current scanning has finished. -trog signature.asc Description: This is a digitally signed message part ___ http

Re: Re[2]: [Clamav-devel] clamd potential race condition

2005-04-06 Thread Trog
be prevented from accessing root node for a short period of time while the pointers are switched. Thats essentially what the old implementation did, but without using rwlocks (using mutexes). The implementation in CVS is essentially lock free, and no waiting is needed. -trog signature.asc

Re: [Clamav-devel] Bug in stream scanning - ScanStream: accept timeout

2005-03-17 Thread Trog
. ... and so on, with an 'accept timeout' error for each thread. I'm using v0.83 on Redhat 8. The client is my own code, but it works fine. Well obviously it doesn't. I suspect you are either parsing the port number incorrectly, or your system is blocking connections to high port numbers. -trog

Re: [Clamav-devel] Bug in stream scanning - ScanStream: accept timeout

2005-03-17 Thread Trog
don't believe this is the issue here. In that scenario, he would get a different error, not this one: Wed Mar 16 15:42:03 2005 - ERROR: ScanStream: accept timeout. This means clamd is timing out waiting the for client to connect to the STREAM port. -trog signature.asc Description

Re: [Clamav-devel] freshclam signal bug

2005-02-17 Thread Trog
. -trog signature.asc Description: This is a digitally signed message part ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-devel

Re: Re[4]: [Clamav-devel] ClamAV temporary files

2005-02-17 Thread Trog
in QNX, or have I missed something? If definitely looks like a spurious error - does QNX have a problem with spaces in filenames? MikeP, what happens if you try and create a file with a similar name and path? -trog signature.asc Description: This is a digitally signed message part

Re: Re[2]: [Clamav-devel] ClamAV temporary files

2005-02-17 Thread Trog
see what is the reason system limits names to 48 characters at the moment. Was the filesystem formatted under the old, limited system? -trog signature.asc Description: This is a digitally signed message part ___ http://lists.clamav.net/cgi-bin/mailman

Re: [Clamav-devel] freshclam signal bug

2005-02-17 Thread Trog
a mutex. The correct solution to this is to remove the logg() call in the signal handler. OK, will that be done? Patch sent to Tomasz, as it's his code. -trog signature.asc Description: This is a digitally signed message part ___ http

Re: [Clamav-devel] Sending SCAN command multiple times on the same socket fails.

2005-01-27 Thread Trog
] ape: warning: pid 11360: exception ape::SocketException: throwed reason: Resource temporarily unavailable [99/Socket.cpp] I suggest you try 0.81 What makes you think, that this will fix the problem ? I am using 0.8. Because I did some last minute fixes to SESSION mode. -trog

Re: [Clamav-devel] Sending SCAN command multiple times on the same socket fails.

2005-01-27 Thread Trog
/amat/dev/uniqmail-eng..., 77) = 77 -trog signature.asc Description: This is a digitally signed message part ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-devel

Re: [Clamav-devel] Sending SCAN command multiple times on the same socket fails.

2005-01-26 Thread Trog
On Wed, 2005-01-26 at 10:36 +0100, Ramon Amat wrote: open socket SESSION SCAN filepath-1 SCAN filepath-2 SCAN filepath-3 close socket (I do that and not clamd!!!) Did you wait for the result to come back (and read it) between these commands? -trog signature.asc

Re: [Clamav-devel] Wrong zlib version detection

2005-01-18 Thread Trog
, which may indeed have been patched. There may also be a different platform with a different unofficial 1.2.1.1 that hasn't been patched. -trog signature.asc Description: This is a digitally signed message part ___ http://lists.clamav.net/cgi-bin/mailman

Re: [Clamav-devel] Issues with CVS version

2005-01-17 Thread Trog
to find out why you get Open PowerPoint Document failed when there is a file called PowerPoint Document in the OLE2 file. -trog signature.asc Description: This is a digitally signed message part ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav

Re: [Clamav-devel] Issues with CVS version

2005-01-17 Thread Trog
, and as such doesn't necessarily indicate a problem. The _VBA_PROJECT errors just indicate there is no VBA in this part of the OLE2 archive. The ppt_current_user error is just a remnant from histotic development, and really just indicates the EOF was reached. -trog signature.asc Description

Re: [Clamav-devel] Reporting Viruses.

2004-07-29 Thread Trog
appreaciated. -trog signature.asc Description: This is a digitally signed message part

Re: [Clamav-devel] F9 (www.f9.co.uk)

2004-07-13 Thread Trog
their changes. -trog signature.asc Description: This is a digitally signed message part

Re: [Clamav-devel] clamscan -m seg faults on this file.

2004-07-07 Thread Trog
reproduce this problem on two separate machines, so I am hoping you can reproduce it as well, and therefore fix it. That looks like a known libz bug. Use libz version 1.1.4 -trog signature.asc Description: This is a digitally signed message part

Re: [Clamav-devel] clamscan -m seg faults on this file.

2004-07-07 Thread Trog
and exiscan decode the file differently is a separate issue. -trog signature.asc Description: This is a digitally signed message part

Re: [Clamav-devel] warnings on compilation on ia64 and patches

2004-06-29 Thread Trog
On Tue, 2004-06-29 at 16:39, diego wrote: hello, we are using clamav 0.73 on RH AS 3.0 U2 on ia64 (HP rx4640). During compilation I have three warnings; one of these leads to segm fault when calling freshclam; the other two I was not able to exploit at the moment. They regards ole2_extract

Re: [Clamav-devel] ERROR: unknown OLE2 entry type: 32

2004-05-21 Thread Trog
be a damaged file, or contain an undocumented OLE2 entry type. -trog signature.asc Description: This is a digitally signed message part

Re: [Clamav-devel] HTML normalisation

2004-05-21 Thread Trog
for clamav but never finished. Cool, should be quite simple, I've already got code to remove comments and unescape encoded characters. I'll look at it next week, depending on how PowerPoint stuff proceeds. -trog signature.asc Description: This is a digitally signed message part

Re: [Clamav-devel] clamd hung up

2004-04-28 Thread Trog
already unlocked? No. -trog signature.asc Description: This is a digitally signed message part

Re: [Clamav-devel] clamd hung up

2004-04-28 Thread Trog
);*** This unlock? Which lock does it correspond too? Ahh... this unlock does look like a cut-n-paste error. Having said that, this is a fatal error path, and the next line is exit(). I'll fix that one. Thanks -trog signature.asc Description: This is a digitally signed message part

Re: [Clamav-devel] clamd hung up

2004-04-28 Thread Trog
On Wed, 2004-04-28 at 12:14, Joe Maimon wrote: It would make sense to suppose that steps were taken to ensure there was only one thread executing reload_db with do_check == FALSE ? It would make sense, which is why it is currently implemented that way. -trog signature.asc Description

Re: [Clamav-devel] clamd hung up

2004-04-28 Thread Trog
. To protect against spurious wakeups. -trog signature.asc Description: This is a digitally signed message part

Re: [Clamav-devel] Re: Worm.SomeFool.D not detected in a message

2004-03-23 Thread Trog
--mbox or turned ScanMail on in the clamav.conf file, the worm was not detected. I tried this on 0.68, 0.70-rc and on the 20040322 snapshot. You did, of course, remove the HTML code that the web server added to the file before scanning it. -trog signature.asc Description

Re: [Clamav-devel] Error scanning file with 0.70rc

2004-03-16 Thread Trog
. Yes, please send it to me. -trog signature.asc Description: This is a digitally signed message part

Re: [Clamav-devel] OLE2 scanning problem

2004-03-15 Thread Trog
a copy of my busted file? Yes, please send it to me ASAP? What version of clam are your using? Thanks -trog signature.asc Description: This is a digitally signed message part

Re: [Clamav-devel] Worm.SomeFool.D not detected in a message

2004-03-03 Thread Trog
is configured in the clamav.conf configuration file. Configure your clam installation appropriately and it'll work. -trog signature.asc Description: This is a digitally signed message part

Re: [Clamav-devel] Worm.SomeFool.D not detected in a message

2004-03-03 Thread Trog
of clamav to the latest CVS snapshot. -trog signature.asc Description: This is a digitally signed message part