clamd on cygwin problems

clamd on cygwin problems

Hi All,

I am trying to use clamd form latest CVS distribution on cygwin (needed for
POP3 Proxy in clamwin) and found the following problem with ScanRAR option
enabled. Basically, when I try to scan password-protected RAR archive
(attached) I get the error message as expected:
------------
LibClamAV debug: Recognized RAR file
LibClamAV debug: Starting scanrar()
LibClamAV debug: unrarlib.c:2652:InitCRC Initialize CRC table
LibClamAV debug: ExtrFile(): dup(5) = 6
LibClamAV debug: Couldn't read next filename from archive (I/O error): 0
------------

But then after a short period of time (1-2 minutes) clamd segfaults:
--------
Segmentation fault (core dumped)
--------

It only seems to happen with the erroneous rar files and only on cygwin -
works well on RH9. Does anyone else exoerience the same issue? I have got
little experience in unix debugging but can be of help with some pinters
form more experienced developers.

Thanks,
Alch

clamdscan

Hi.

As I take it clamdscan supports the exacts same options as clamscan, right?

It would be nice to update clamdscan to show this in the --help.

--

-- 
Regards // Oden Eriksson

-------------------------------------------------------
This SF.Net email is sponsored by the new InstallShield X.
From Windows to Linux, servers to mobile, InstallShield X is the one
installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504

Re: clamd on cygwin problems

On Wed, 2 Jun 2004 13:40:56 +1000
"Alch" <alch <at> users.sourceforge.net> wrote:

> Hi All,
>  
> I am trying to use clamd form latest CVS distribution on cygwin
> (needed for POP3 Proxy in clamwin) and found the following problem
> with ScanRAR option enabled. Basically, when I try to scan
> password-protected RAR archive(attached) I get the error message as
> expected:------------
> LibClamAV debug: Recognized RAR file
> LibClamAV debug: Starting scanrar()
> LibClamAV debug: unrarlib.c:2652:InitCRC Initialize CRC table
> LibClamAV debug: ExtrFile(): dup(5) = 6
> LibClamAV debug: Couldn't read next filename from archive (I/O error):
> 0------------
>  
> But then after a short period of time (1-2 minutes) clamd segfaults:
> --------
> Segmentation fault (core dumped)
> --------
>  
> It only seems to happen with the erroneous rar files and only on
> cygwin - works well on RH9. Does anyone else exoerience the same
> issue? I have got little experience in unix debugging but can be of
> help with some pinters form more experienced developers.

Does clamscan find the test signature in the test1.rar file ?

--

-- 
   oo    .....         Tomasz Kojm <tkojm <at> clamav.net>
  (\/)\.........         http://www.ClamAV.net/gpg/tkojm.gpg
     \..........._         0DCA5A08407D5288279DB43454822DC8985A444B
       //\   /\              Wed Jun  2 21:19:34 CEST 2004

Re: clamdscan

On Wed, 2 Jun 2004 20:08:54 +0200
Oden Eriksson <oeriksson <at> mandrakesoft.com> wrote:

> Hi.
> 
> As I take it clamdscan supports the exacts same options as clamscan,
> right?

No, it doesn't. It only accepts the same options as clamscan but
strictly depends on clamav.conf.

--

-- 
   oo    .....         Tomasz Kojm <tkojm <at> clamav.net>
  (\/)\.........         http://www.ClamAV.net/gpg/tkojm.gpg
     \..........._         0DCA5A08407D5288279DB43454822DC8985A444B
       //\   /\              Wed Jun  2 21:22:15 CEST 2004

Re: clamdscan

onsdagen den 2 juni 2004 21.24 skrev Tomasz Kojm:
> On Wed, 2 Jun 2004 20:08:54 +0200
>
> Oden Eriksson <oeriksson <at> mandrakesoft.com> wrote:
> > Hi.
> >
> > As I take it clamdscan supports the exacts same options as clamscan,
> > right?
>
> No, it doesn't. It only accepts the same options as clamscan but
> strictly depends on clamav.conf.

Ok I see, thanks.

--

-- 
Regards // Oden Eriksson

-------------------------------------------------------
This SF.Net email is sponsored by the new InstallShield X.
From Windows to Linux, servers to mobile, InstallShield X is the one
installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504

RE: clamd on cygwin problems

> On Wed, 2 Jun 2004 13:40:56 +1000
> "Alch" <alch <at> users.sourceforge.net> wrote:
> 
> > Hi All,
> >  
> > I am trying to use clamd form latest CVS distribution on cygwin 
> > (needed for POP3 Proxy in clamwin) and found the following problem 
> > with ScanRAR option enabled. Basically, when I try to scan 
> > password-protected RAR archive(attached) I get the error message as
> > expected:------------
> > LibClamAV debug: Recognized RAR file
> > LibClamAV debug: Starting scanrar()
> > LibClamAV debug: unrarlib.c:2652:InitCRC Initialize CRC table 
> > LibClamAV debug: ExtrFile(): dup(5) = 6 LibClamAV debug: 
> Couldn't read 
> > next filename from archive (I/O error):
> > 0------------
> >  
> > But then after a short period of time (1-2 minutes) clamd segfaults:
> > --------
> > Segmentation fault (core dumped)
> > --------
> >  
> > It only seems to happen with the erroneous rar files and only on 
> > cygwin - works well on RH9. Does anyone else exoerience the same 
> > issue? I have got little experience in unix debugging but can be of 
> > help with some pinters form more experienced developers.
> 
> Does clamscan find the test signature in the test1.rar file ?
> 
There is no signature inside just the ordinary file. The file is
password-protected and clamd seems to segfault only on
password-protected rar files and only on cygwin.

Rgerads,
Alch

-------------------------------------------------------
This SF.Net email is sponsored by the new InstallShield X.
From Windows to Linux, servers to mobile, InstallShield X is the one
installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504

Re: clamav-config

On Fri, 2004-05-28 at 02:35, Tomasz Kojm wrote:
> On Fri, 28 May 2004 00:08:24 -0700
> Scott Beck <sbeck <at> gossamer-threads.com> wrote:
> 
> > Hi,
> > 
> > Has anyone given any thought to adding support for pkg-config or
> > possibly adding a clamav-config so language bindings can get the
> > compile flags clamav was compiled with? Without such a thing it is
> > very hit and miss for bindings. I am refering to the perl bindings
> > which I wrote. I have gotten many emails about problems with linkage
> > because I have no real way to know what libclamav was linked against.
> 
> No problem - please send us (bugs*clamav.net) a patch which satisfies
> you.

Done. Thanks.

Cheers,

Scott

--

-- 
-------------------- Gossamer Threads Inc. ----------------------
Scott Beck                      Email: scott <at> gossamer-threads.com
Lead Software Developer         Phone: (604) 687-5804
http://www.gossamer-threads.com Fax:   (604) 687-5806

-------------------------------------------------------
This SF.Net email is sponsored by the new InstallShield X.
From Windows to Linux, servers to mobile, InstallShield X is the one
installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504

Re: clamd on cygwin problems

On Thu, 3 Jun 2004 09:23:23 +1000
"Alch" <alch <at> users.sourceforge.net> wrote:

> > On Wed, 2 Jun 2004 13:40:56 +1000
> > "Alch" <alch <at> users.sourceforge.net> wrote:
> > 
> > > Hi All,
> > >  
> > > I am trying to use clamd form latest CVS distribution on cygwin 
> > > (needed for POP3 Proxy in clamwin) and found the following problem
> > > 
> > > with ScanRAR option enabled. Basically, when I try to scan 
> > > password-protected RAR archive(attached) I get the error message
> > > as expected:------------
> > > LibClamAV debug: Recognized RAR file
> > > LibClamAV debug: Starting scanrar()
> > > LibClamAV debug: unrarlib.c:2652:InitCRC Initialize CRC table 
> > > LibClamAV debug: ExtrFile(): dup(5) = 6 LibClamAV debug: 
> > Couldn't read 
> > > next filename from archive (I/O error):
> > > 0------------
> > >  
> > > But then after a short period of time (1-2 minutes) clamd
> > > segfaults:--------
> > > Segmentation fault (core dumped)
> > > --------
> > >  
> > > It only seems to happen with the erroneous rar files and only on 
> > > cygwin - works well on RH9. Does anyone else exoerience the same 
> > > issue? I have got little experience in unix debugging but can be
> > > of help with some pinters form more experienced developers.
> > 
> > Does clamscan find the test signature in the test1.rar file ?
> > 
> There is no signature inside just the ordinary file. The file is
> password-protected and clamd seems to segfault only on
> password-protected rar files and only on cygwin.

I was talking about the clamav-x.yz/test/test1.rar file. Is it detected
properly by clamscan ?

--

-- 
   oo    .....         Tomasz Kojm <tkojm <at> clamav.net>
  (\/)\.........         http://www.ClamAV.net/gpg/tkojm.gpg
     \..........._         0DCA5A08407D5288279DB43454822DC8985A444B
       //\   /\              Thu Jun  3 01:32:46 CEST 2004

RE: clamd on cygwin problems

> 
> On Thu, 3 Jun 2004 09:23:23 +1000
> "Alch" <alch <at> users.sourceforge.net> wrote:
> 
> > > On Wed, 2 Jun 2004 13:40:56 +1000
> > > "Alch" <alch <at> users.sourceforge.net> wrote:
> > > 
> > > > Hi All,
> > > >  
> > > > I am trying to use clamd form latest CVS distribution on cygwin
> > > > (needed for POP3 Proxy in clamwin) and found the 
> following problem
> > > > 
> > > > with ScanRAR option enabled. Basically, when I try to scan
> > > > password-protected RAR archive(attached) I get the error message
> > > > as expected:------------
> > > > LibClamAV debug: Recognized RAR file
> > > > LibClamAV debug: Starting scanrar()
> > > > LibClamAV debug: unrarlib.c:2652:InitCRC Initialize CRC table 
> > > > LibClamAV debug: ExtrFile(): dup(5) = 6 LibClamAV debug: 
> > > Couldn't read
> > > > next filename from archive (I/O error):
> > > > 0------------
> > > >  
> > > > But then after a short period of time (1-2 minutes) clamd
> > > > segfaults:--------
> > > > Segmentation fault (core dumped)
> > > > --------
> > > >  
> > > > It only seems to happen with the erroneous rar files and only on
> > > > cygwin - works well on RH9. Does anyone else exoerience 
> the same 
> > > > issue? I have got little experience in unix debugging but can be
> > > > of help with some pinters form more experienced developers.
> > > 
> > > Does clamscan find the test signature in the test1.rar file ?
> > > 
> > There is no signature inside just the ordinary file. The file is 
> > password-protected and clamd seems to segfault only on 
> > password-protected rar files and only on cygwin.
> 
> I was talking about the clamav-x.yz/test/test1.rar file. Is 
> it detected properly by clamscan ?
> 
Yes test3.rar reports ClamAV-Test-Signature okay by both clamscan and
clamdscan.
rarfail.rar produces the expected error and the following debbug output:
---
LibClamAV debug: unknown compression method: 29  (min=13 max=20)
LibClamAV debug: RAR -> Can't decompress file test1
LibClamAV debug: RAR -> Exit code: 100
---

And clamd remains stable afterwards.

It appears that when unrarlib.c meets the following error 
LibClamAV debug: unrarlib.c:2652:InitCRC Initialize CRC table
On cygwin (password protected rar3 archive) it segfaults later...

-------------------------------------------------------
This SF.Net email is sponsored by the new InstallShield X.
From Windows to Linux, servers to mobile, InstallShield X is the one
installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504