Re: [clamav-users] the problem of endless loop

[G.W. Haywood]

Hi there,

On Tue, 20 Dec 2016, Joel Esler wrote:


The 0.97.x tree is EOL: 
http://blog.clamav.net/2016/05/clamav-097-engine-end-of-life.html

I recommend upgrading to a newer version.


I think the OP was suggesting that one of his two bugs (an endless
loop) might still be present in the latest release.

--

73,
Ged.
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] the problem of endless loop

[Joel Esler (jesler)]

The 0.97.x tree is EOL: 
http://blog.clamav.net/2016/05/clamav-097-engine-end-of-life.html

I recommend upgrading to a newer version.


--
Joel Esler | Talos: Manager | jes...@cisco.com






On Dec 19, 2016, at 6:56 PM, Tsutomu Oyamada 
> wrote:

Hi, all.

I have a question about the error which is caused by the shotage of the size 
acquired by mpool_malloc function on clamd version 0.97.8.

the message:
mpool_malloc(): Attempt to allocate 8388608 bytes. Please report to 
http://bugs.clamav.net

This error does not exist in version 0.98 and later, but we think that the 
problem of endless loop is not fixed even on the latest version.
When the .hdb data of CVD file is read, the number of HASH table is not be 
enough, then the cli_htu32_insert function of libclamav/hashdb.c loops and 
cannot detect the error, and it leads to endless loop.
We found that the code is not fixed on version 0.99.2.

We think that the following code of cli_htu32_grow function should be negative 
value when it returns;

391: if(new_capacity == s->capacity || !htable)
392: return CL_EMEM;

Will this fix be released?
If yes, could you tell us on what version will this fix be released?

T.O

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] the problem of endless loop

[Al Varnell]

See How to Report a Bug  
and then file at Bugzilla .

-Al-

On Mon, Dec 19, 2016 at 03:56 PM, Tsutomu Oyamada wrote:
> 
> Hi, all.
> 
> I have a question about the error which is caused by the shotage of the size 
> acquired by mpool_malloc function on clamd version 0.97.8.
> 
> the message:
> mpool_malloc(): Attempt to allocate 8388608 bytes. Please report to 
> http://bugs.clamav.net
> 
> This error does not exist in version 0.98 and later, but we think that the 
> problem of endless loop is not fixed even on the latest version.
> When the .hdb data of CVD file is read, the number of HASH table is not be 
> enough, then the cli_htu32_insert function of libclamav/hashdb.c loops and 
> cannot detect the error, and it leads to endless loop.
> We found that the code is not fixed on version 0.99.2.
> 
> We think that the following code of cli_htu32_grow function should be 
> negative value when it returns;
> 
> 391: if(new_capacity == s->capacity || !htable)
> 392: return CL_EMEM;
> 
> Will this fix be released?
> If yes, could you tell us on what version will this fix be released?
> 
> T.O


smime.p7s
Description: S/MIME cryptographic signature
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] the problem of endless loop

[Tsutomu Oyamada]

Hi, all.

I have a question about the error which is caused by the shotage of the size 
acquired by mpool_malloc function on clamd version 0.97.8.

the message:
mpool_malloc(): Attempt to allocate 8388608 bytes. Please report to 
http://bugs.clamav.net

This error does not exist in version 0.98 and later, but we think that the 
problem of endless loop is not fixed even on the latest version.
When the .hdb data of CVD file is read, the number of HASH table is not be 
enough, then the cli_htu32_insert function of libclamav/hashdb.c loops and 
cannot detect the error, and it leads to endless loop.
We found that the code is not fixed on version 0.99.2.

We think that the following code of cli_htu32_grow function should be negative 
value when it returns;

391: if(new_capacity == s->capacity || !htable)
392: return CL_EMEM;

Will this fix be released?
If yes, could you tell us on what version will this fix be released?

T.O

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml