marcus.neukert at 1und1
Jun 11, 2008, 3:30 AM
Views: 494
Permalink
|
|
0.93.1 / libclamav: no CL_EMAX*-Error-Codes for Applications?
|
|
Hello,
following has changed in clamav-0.93.1 (see Changelog):
---------------------------------------------------------------------
Mon Apr 28 16:13:33 CEST 2008 (tk)
----------------------------------
* libclamav/scanners.c: don't return CL_EMAX* error codes to
applications (bb#1001)
---------------------------------------------------------------------
If a limit wae reached, the return-code for applications is: CL_CLEAN.
(see scanners.c / cli_magic_scandesc):
---------------------------------------------------------------------
switch(ret) {
case CL_EFORMAT:
case CL_EMAXREC:
case CL_EMAXSIZE:
case CL_EMAXFILES:
cli_dbgmsg("Descriptor[%d]: %s\n", desc, cl_strerror(ret));
return CL_CLEAN;
default:
return ret;
}
---------------------------------------------------------------------
Now, when scanning an archive which does contain more files than
configured in cl_limits.maxfiles, the scan will end when the limit is
reached and the Result of the scanner is CL_CLEAN !!, although the
following files after reaching the limit have not been scanned and can
possibly be infected.
What is the reason for changing this behaviour? IMHO the scanner should
return the CL_EMAX* error-code to inform the application that the
scanned file can possibly be infected.
Best,
Marcus Neukert
--
Marcus Neukert
Softwareentwickler - New Technology
Tel. +49-721-91374-3943 · Fax +49-721-91374-2740
marcus.neukert[at]1und1.de · http://www.web.de/
1&1 Internet AG
Brauerstraße 48
76135 Karlsruhe
Amtsgericht Montabaur HRB 6484
Vorstand: Henning Ahlert, Ralph Dommermuth, Matthias Ehrlich, Thomas
Gottschlich, Matthias Greve, Robert Hoffmann, Markus Huhn, Oliver Mauss,
Achim Weiss
Aufsichtsratsvorsitzender: Michael Scheeren
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net
|
0.93.1 / libclamav: no CL_EMAX*-Error-Codes for Applications?