Mailing List Archive: ClamAV: users

clamd segment faults -- zip archives

Index | Next | Previous | View Threaded

danderson_1965 at yahoo

Aug 24, 2004, 8:32 AM

Post #1 of 10 (5116 views)
Permalink

clamd segment faults -- zip archives

I have been having segment faults with clamd. I think
I am finding it happens on zip archives. I have sent a
few test virus zip files to the system each of them
causing a segment fault. Can someone help me out?

_______________________________
Do you Yahoo!?
Win 1 of 4,000 free domain names from Yahoo! Enter now.
http://promotions.yahoo.com/goldrush

-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Clamav-users mailing list
Clamav-users [at] lists
https://lists.sourceforge.net/lists/listinfo/clamav-users

math at mlists

Aug 24, 2004, 9:54 AM

Post #2 of 10 (4939 views)
Permalink

Re: clamd segment faults -- zip archives [In reply to]

Dale Anderson wrote:

> I have been having segment faults with clamd. I think
> I am finding it happens on zip archives. I have sent a
> few test virus zip files to the system each of them
> causing a segment fault. Can someone help me out?
>

A little more info would probably help.

Matt

-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Clamav-users mailing list
Clamav-users [at] lists
https://lists.sourceforge.net/lists/listinfo/clamav-users

danderson_1965 at yahoo

Aug 24, 2004, 10:10 AM

Post #3 of 10 (4959 views)
Permalink

Re: clamd segment faults -- zip archives [In reply to]

--- Dale Anderson <danderson_1965 [at] yahoo> wrote:

> I have been having segment faults with clamd. I
> think
> I am finding it happens on zip archives. I have sent
> a
> few test virus zip files to the system each of them
> causing a segment fault. Can someone help me out?
>
Ok I got my system not to segment fault. I remarked
out the line in clamav.conf #ScanArcive. After testing
it is still scanning .zip attachments and finds the
test virus sig in eicar.zip file. So it looks good to
me. I hope this will help someone else. Thanks
everyone for the help!

_______________________________
Do you Yahoo!?
Win 1 of 4,000 free domain names from Yahoo! Enter now.
http://promotions.yahoo.com/goldrush

-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Clamav-users mailing list
Clamav-users [at] lists
https://lists.sourceforge.net/lists/listinfo/clamav-users

njh at bandsman

Aug 24, 2004, 2:22 PM

Post #4 of 10 (4921 views)
Permalink

Re: clamd segment faults -- zip archives [In reply to]

On Tuesday 24 Aug 2004 4:32 pm, Dale Anderson wrote:
> I have been having segment faults with clamd. I think
> I am finding it happens on zip archives. I have sent a
> few test virus zip files to the system each of them
> causing a segment fault. Can someone help me out?

This is a known problem with zlib, not clamd. Please (a) ensure
you have an older version (1.1.4 I think, but someone else will
correct me no doubt) and (b) hassle the author of zlib to fix his/her
code.

-Nigel

-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Clamav-users mailing list
Clamav-users [at] lists
https://lists.sourceforge.net/lists/listinfo/clamav-users

trog at uncon

Aug 25, 2004, 2:00 AM

Post #5 of 10 (4911 views)
Permalink

Re: clamd segment faults -- zip archives [In reply to]

On Tue, 2004-08-24 at 17:54, Matt wrote:
> Dale Anderson wrote:
>
> > I have been having segment faults with clamd. I think
> > I am finding it happens on zip archives. I have sent a
> > few test virus zip files to the system each of them
> > causing a segment fault. Can someone help me out?
> >
>
> A little more info would probably help.
>

Which version of libz are you using? Anything other than 1.1.4 is liable
to crash or have security problems.

-tony

Attachments:

signature.asc (0.18 KB)

chris at westnet

Aug 25, 2004, 4:34 AM

Post #6 of 10 (4934 views)
Permalink

Re: clamd segment faults -- zip archives [In reply to]

On Wed, 25 Aug 2004, Trog wrote:

> Which version of libz are you using? Anything other than 1.1.4 is liable
> to crash or have security problems.

Just to be clear -- you are saying the latest verion 1.2.1 has problems ?

Is this documented any place ?

==========================================================
Chris Candreva -- chris [at] westnet -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/

-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Clamav-users mailing list
Clamav-users [at] lists
https://lists.sourceforge.net/lists/listinfo/clamav-users

trog at uncon

Aug 25, 2004, 4:55 AM

Post #7 of 10 (4938 views)
Permalink

Re: clamd segment faults -- zip archives [In reply to]

On Wed, 2004-08-25 at 12:34, Christopher X. Candreva wrote:
> On Wed, 25 Aug 2004, Trog wrote:
>
> > Which version of libz are you using? Anything other than 1.1.4 is liable
> > to crash or have security problems.
>
> Just to be clear -- you are saying the latest verion 1.2.1 has problems ?

Yes, that is what I am saying.

>
> Is this documented any place ?
>

It's documented in the archives of this mailing list.

-trog

Attachments:

signature.asc (0.18 KB)

njh at bandsman

Aug 25, 2004, 7:16 AM

Post #8 of 10 (4942 views)
Permalink

Re: clamd segment faults -- zip archives [In reply to]

On Wednesday 25 Aug 2004 12:34, Christopher X. Candreva wrote:
> On Wed, 25 Aug 2004, Trog wrote:
>
> > Which version of libz are you using? Anything other than 1.1.4 is liable
> > to crash or have security problems.
>
> Just to be clear -- you are saying the latest verion 1.2.1 has problems ?

Yes

> Is this documented any place ?

On this list, very often. I don't know that the authors of zlib have documented it,
you will have to ask them.

> Chris Candreva -- chris [at] westnet -- (914) 967-7816

--
Nigel Horne. Arranger, Composer, Typesetter.
NJH Music, Barnsley, UK. ICQ#20252325
njh [at] despammed http://www.bandsman.co.uk

-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Clamav-users mailing list
Clamav-users [at] lists
https://lists.sourceforge.net/lists/listinfo/clamav-users

dskinner at bluefrog

Aug 25, 2004, 8:35 AM

Post #9 of 10 (4940 views)
Permalink

Re: clamd segment faults -- zip archives [In reply to]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Nigel Horne wrote:

| This is a known problem with zlib, not clamd. Please (a) ensure
| you have an older version (1.1.4 I think, but someone else will
| correct me no doubt) and (b) hassle the author of zlib to fix his/her
| code.

I took a quick look around and it appears the zlib-dev list is private
(including the archives) and I don't see a bugzilla for them anywhere.
Is this problem known by them or just ClamAV ppl? Anyone know what/if
anything is being done about it and how soon?

FYI to suse users on the list - suse 9.1 (possibly 9.0 as well) ships
with 1.2.1.

On a similar topic, I recall discussion that Exiscan may not need the
ScanArchive option, but I seem to recall some confusion in that
conversation. Can anyone confirm that is the case? Probably a good FAQ
item (either here or on the Exiscan side, or both)

Also, I noticed that Exim (at least with Exiscan) links to libz.so.1
just like clamd. I suppose I should see if anyone on the Exiscan list
has had issues with 1.2.1.

Thanks!

- --
Dennis Skinner
Systems Administrator
BlueFrog Internet
http://www.bluefrog.com

"The tendinous part of the mind, so to speak, is more developed in
winter; the fleshy, in summer. I should say winter had given the bone
and sinew to literature, summer the tissues and the blood. - John
Burroughs (1837 - 1921), The Snow-Walkers"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBLLGjy9iYXMzyPbYRApzaAJ9Lmf0OxWSTq3M8PXBa4oN/IhJSSQCfWfTE
P7cYHI2IeZxAcqCkVPDNKE0=
=Wpun
-----END PGP SIGNATURE-----

-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Clamav-users mailing list
Clamav-users [at] lists
https://lists.sourceforge.net/lists/listinfo/clamav-users

tkojm at clamav

Aug 25, 2004, 6:16 PM

Post #10 of 10 (4935 views)
Permalink

Re: clamd segment faults -- zip archives [In reply to]

On Wed, 25 Aug 2004 11:35:00 -0400
Dennis Skinner <dskinner [at] bluefrog> wrote:

> I took a quick look around and it appears the zlib-dev list is private
> (including the archives) and I don't see a bugzilla for them anywhere.
> Is this problem known by them or just ClamAV ppl? Anyone know what/if
> anything is being done about it and how soon?

The problem was reported to the zlib maintainers a few months ago.

> Also, I noticed that Exim (at least with Exiscan) links to libz.so.1
> just like clamd. I suppose I should see if anyone on the Exiscan list
> has had issues with 1.2.1.

It most likely only uses zlib for its own purposes (but I'm guessing).

--
oo ..... Tomasz Kojm <tkojm [at] clamav>
(\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg
\..........._ 0DCA5A08407D5288279DB43454822DC8985A444B
//\ /\ Thu Aug 26 03:13:10 CEST 2004

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads