Mailing List Archive: ClamAV: users

clamd "Can't write to file" error with pdf_merge attachment

Index | Next | Previous | View Threaded

ESwanson at benaroyaresearch

Jun 12, 2009, 10:43 AM

Post #1 of 3 (779 views)
Permalink

clamd "Can't write to file" error with pdf_merge attachment

I am running ClamAV 0.95.2 with MimeDefang 2.64 on Solaris 10. One inbound message is not getting processed by clamd, and the following error show up in clamd.log:

Fri Jun 12 07:24:48 2009 -> /var/spool/MIMEDefang/mdefang- n5CEOkJw002731/Work/msg-1391-109.pdf: Can't write to file ERROR

and syslog.mail has the following:

Jun 12 07:24:48 lister mimedefang.pl[1391]: [ID 702911 mail.error] n5CEOkJw002731: Clamd returned error: Can't write to file

Jun 12 07:24:48 lister mimedefang.pl[1391]: [ID 702911 mail.warning] Problem running virus scanner: code=999, category=swerr, action=tempfail

I suspect this message's attachment is the cause of the problem-here is how it is introduced:

------_=_NextPart_001_01C9E92F.46592BDF
Content-Type: application/octet-stream;
name="R5542565_IL0001_1703800_PDF[1].pdf_merge.pdf"
Content-Transfer-Encoding: base64
Content-Description: R5542565_IL0001_1703800_PDF[1].pdf_merge.pdf
Content-Disposition: attachment;
filename="R5542565_IL0001_1703800_PDF[1].pdf_merge.pdf"

I am looking for any ideas about how to avoid this problem, even if that means not scanning .pdf_merge.pdf attachments.

Eric Swanson

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

edwintorok at gmail

Jun 12, 2009, 12:50 PM

Post #2 of 3 (700 views)
Permalink

Re: clamd "Can't write to file" error with pdf_merge attachment [In reply to]

On 2009-06-12 20:43, Eric Swanson wrote:
> I am running ClamAV 0.95.2 with MimeDefang 2.64 on Solaris 10. One inbound message is not getting processed by clamd, and the following error show up in clamd.log:
>
> Fri Jun 12 07:24:48 2009 -> /var/spool/MIMEDefang/mdefang- n5CEOkJw002731/Work/msg-1391-109.pdf: Can't write to file ERROR
>
> and syslog.mail has the following:
>
>
> Jun 12 07:24:48 lister mimedefang.pl[1391]: [ID 702911 mail.error] n5CEOkJw002731: Clamd returned error: Can't write to file
>
> Jun 12 07:24:48 lister mimedefang.pl[1391]: [ID 702911 mail.warning] Problem running virus scanner: code=999, category=swerr, action=tempfail
>
> I suspect this message's attachment is the cause of the problem-here is how it is introduced:
>
> ------_=_NextPart_001_01C9E92F.46592BDF
> Content-Type: application/octet-stream;
> name="R5542565_IL0001_1703800_PDF[1].pdf_merge.pdf"
> Content-Transfer-Encoding: base64
> Content-Description: R5542565_IL0001_1703800_PDF[1].pdf_merge.pdf
> Content-Disposition: attachment;
> filename="R5542565_IL0001_1703800_PDF[1].pdf_merge.pdf"
>

Please open a bugreport at bugs.clamav.net, and attach that file.

Thanks,
--Edwin
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

ESwanson at benaroyaresearch

Jun 15, 2009, 8:48 AM

Post #3 of 3 (686 views)
Permalink

Re: clamd "Can't write to file" error with pdf_merge attachment [In reply to]

-----Original Message-----
From: clamav-users-bounces [at] lists [mailto:clamav-users-bounces [at] lists] On Behalf Of Török Edwin
Sent: Friday, June 12, 2009 12:51 PM
To: ClamAV users ML
Subject: Re: [Clamav-users] clamd "Can't write to file" error with pdf_merge attachment

On 2009-06-12 20:43, Eric Swanson wrote:
> I am running ClamAV 0.95.2 with MimeDefang 2.64 on Solaris 10. One inbound message is not getting processed by clamd, and the following error show up in clamd.log:
>
> Fri Jun 12 07:24:48 2009 -> /var/spool/MIMEDefang/mdefang- n5CEOkJw002731/Work/msg-1391-109.pdf: Can't write to file ERROR
>
> and syslog.mail has the following:
>
>
> Jun 12 07:24:48 lister mimedefang.pl[1391]: [ID 702911 mail.error] n5CEOkJw002731: Clamd returned error: Can't write to file
>
> Jun 12 07:24:48 lister mimedefang.pl[1391]: [ID 702911 mail.warning] Problem running virus scanner: code=999, category=swerr, action=tempfail
>
> I suspect this message's attachment is the cause of the problem-here is how it is introduced:
>
> ------_=_NextPart_001_01C9E92F.46592BDF
> Content-Type: application/octet-stream;
> name="R5542565_IL0001_1703800_PDF[1].pdf_merge.pdf"
> Content-Transfer-Encoding: base64
> Content-Description: R5542565_IL0001_1703800_PDF[1].pdf_merge.pdf
> Content-Disposition: attachment;
> filename="R5542565_IL0001_1703800_PDF[1].pdf_merge.pdf"
>

Please open a bugreport at bugs.clamav.net, and attach that file.

Thanks,
--Edwin
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Submitted bug report 1637.

-Eric Swanson

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads