Thanks for the reply. I have about 97mb of pdf files but I have no way
to knowing which is encrypted. I tried a scan with --debug to see if the
last line was the error but it just crashed. A file titled 'core' is now
in the directory and it is 26mb.

I downloaded klamav and updated it to clamav's database and then I
individually scanned each file and top level directory. The only errors
that showed up were 'exceed length' files and klamav wanted to
quarantine them. I increased clamd.conf - ArchiveMaxFileSize 10M to
ArchiveMaxFileSize 100M and reran the scan:

[EMAIL PROTECTED]:~$ /usr/bin/clamscan -ri --copy=/home/??/virus/ 
--exclude-dir=/home/??/scrapbook/* --log=/home/??/log_files/virus.log
/home/??/core: _0046_0001_000 FOUND
/home/??/core: copied to '/home/??/virus///core.000'
/home/??/virus/core: _0046_0001_000 FOUND
File excluded '/home/??/virus/core'
/home/??/virus/core.000: _0046_0001_000 FOUND
File excluded '/home/??/virus/core.000'
LibClamAV Warning: Encrypted PDF files not yet supported
LibClamAV Warning: Encrypted PDF files not yet supported
LibClamAV Warning: cli_pdf: Object number missing
LibClamAV Warning: cli_pdf: Object number missing
LibClamAV Warning: cli_pdf: Object number missing
LibClamAV Warning: Encrypted PDF files not yet supported
LibClamAV Warning: cli_untar: unknown type flag S
LibClamAV Warning: Bad compression in flate stream
LibClamAV Warning: Bad compression in flate stream

----------- SCAN SUMMARY -----------
Known viruses: 180236
Engine version: 0.91.2
Scanned directories: 1647
Scanned files: 9499
Infected files: 3
Not moved: 2
Data scanned: 1551.84 MB
Time: 860.072 sec (14 m 20 s)
[EMAIL PROTECTED]:~$

Apparently the 'core' file that --debug generated was 'infected.'

I changed ArchiveMaxFileSize 100M back to ArchiveMaxFileSize 10M and I
reran the scan with --include=.pdf and the following showed up:

[EMAIL PROTECTED]:~$ /usr/bin/clamscan -ri --copy=/home/??/virus/ 
--exclude-dir=/home/??/scrapbook/* --log=/home/??/log_files/virus.log 
--include=.pdf
LibClamAV Warning: Encrypted PDF files not yet supported
LibClamAV Warning: Encrypted PDF files not yet supported
LibClamAV Warning: cli_pdf: Object number missing
LibClamAV Warning: cli_pdf: Object number missing
LibClamAV Warning: cli_pdf: Object number missing
LibClamAV Warning: Bad compression in flate stream
LibClamAV Warning: Bad compression in flate stream

----------- SCAN SUMMARY -----------
Known viruses: 180236
Engine version: 0.91.2
Scanned directories: 1647
Scanned files: 148
Infected files: 0
Data scanned: 96.39 MB
Time: 74.696 sec (1 m 14 s)
[EMAIL PROTECTED]:~$

Finally, I ran the original command line that generated the
segmnentation fault:

[EMAIL PROTECTED]:~$ /usr/bin/clamscan -ri --copy=/home/??/virus/ 
--exclude-dir=/home/??/scrapbook/* --log=/home/??/log_files/virus.log
/home/??/virus/core: _0046_0001_000 FOUND
File excluded '/home/??/virus/core'
/home/??/virus/core.000: _0046_0001_000 FOUND
File excluded '/home/??/virus/core.000'
/home/??/core.1: _0046_0001_000 FOUND
/home/??/core.1: copied to '/home/??/virus///core.1'
LibClamAV Warning: Encrypted PDF files not yet supported
LibClamAV Warning: Encrypted PDF files not yet supported
LibClamAV Warning: cli_pdf: Object number missing
LibClamAV Warning: cli_pdf: Object number missing
LibClamAV Warning: cli_pdf: Object number missing
LibClamAV Warning: Encrypted PDF files not yet supported
^[[A^[[ALibClamAV Warning: cli_untar: unknown type flag S
LibClamAV Warning: Bad compression in flate stream
LibClamAV Warning: Bad compression in flate stream

----------- SCAN SUMMARY -----------
Known viruses: 180236
Engine version: 0.91.2
Scanned directories: 1647
Scanned files: 9493
Infected files: 3
Not moved: 2
Data scanned: 1550.09 MB
Time: 1514.920 sec (25 m 14 s)
[EMAIL PROTECTED]:~$

No segmentation fault with the identical scan with identical files
(almost).

Anything else that you need?

-- 
clamav - 91.2 - segmentation fault
https://bugs.launchpad.net/bugs/178150
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to