From clamav-users-bounces@lists.clamav.net  Tue Apr 11 13:37:31 2006
Return-Path: <clamav-users-bounces@lists.clamav.net>
X-Original-To: list@krisma.oltrelinux.com
Delivered-To: list@krisma.oltrelinux.com
Received: from aj.catt.com (aj.catt.com [64.18.103.6])
	by mail.oltrelinux.com (Postfix) with ESMTP id 48E4311AEB1
	for <list@krisma.oltrelinux.com>; Tue, 11 Apr 2006 13:37:30 +0200 (CEST)
Received: from aj.catt.com (localhost [127.0.0.1])
	by aj.catt.com (Postfix) with ESMTP id 00A1D156096;
	Tue, 11 Apr 2006 07:37:05 -0400 (EDT)
Received: from web31714.mail.mud.yahoo.com (web31714.mail.mud.yahoo.com
	[68.142.201.194]) by aj.catt.com (Postfix) with SMTP id ED4DE15607F
	for <clamav-users@lists.clamav.net>;
	Tue, 11 Apr 2006 07:37:01 -0400 (EDT)
Received: (qmail 82316 invoked by uid 60001); 11 Apr 2006 11:36:59 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com;
	h=Message-ID:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding;
	b=olIjFYWQrW9A+op9W6R/i9VmX+2DivPEdyYgrB6e+H/yOyzedJiUW+z+lXxA3m7TcNe5NtejM2kv85TfObco5KNXoiWFPRL+4F4Zf1Gq1jd4aF9tL0fHphYJCQCPFMzsSZDPXdP4tc7aoyf/wQ8IHWAcb5cPTl0onDID3O0kzWQ=
	; 
Message-ID: <20060411113659.82314.qmail@web31714.mail.mud.yahoo.com>
Received: from [213.96.91.201] by web31714.mail.mud.yahoo.com via HTTP;
	Tue, 11 Apr 2006 04:36:59 PDT
Date: Tue, 11 Apr 2006 04:36:59 -0700 (PDT)
From: Vieri Di Paola <vieridipaola@yahoo.com>
To: clamav-users@lists.clamav.net
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Subject: [Clamav-users] segmentation fault
X-BeenThere: clamav-users@lists.clamav.net
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: ClamAV users ML <clamav-users@lists.clamav.net>
List-Id: ClamAV users ML <clamav-users.lists.clamav.net>
List-Unsubscribe: <http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users>,
	<mailto:clamav-users-request@lists.clamav.net?subject=unsubscribe>
List-Post: <mailto:clamav-users@lists.clamav.net>
List-Help: <mailto:clamav-users-request@lists.clamav.net?subject=help>
List-Subscribe: <http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users>,
	<mailto:clamav-users-request@lists.clamav.net?subject=subscribe>
Sender: clamav-users-bounces@lists.clamav.net
Errors-To: clamav-users-bounces@lists.clamav.net
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at krisma.oltrelinux.com
X-Spam-Status: No, hits=2.7 tagged_above=-999.0 required=6.0 tests=BAYES_50,
	FORGED_YAHOO_RCVD
X-Spam-Level: **

Hello,

I am using qmail-scanner 1.25 with clamd 0.88.1 on
Gentoo x86_64.

My main config files follow:

Edit /etc/clamd.conf:
User qscand

Edit /etc/freshclam.conf:
DatabaseOwner qscand

# chown -R qscand:qscand /var/lib/clamav
# chown -R qscand:qscand /var/run/clamav
# chown -R qscand:qscand /var/log/clamav 

For the first bundle of processed emails, everythng
works fine but then I get clamd segfaults.

/var/log:

>From clamav.log:
Tue Apr 11 09:26:51 2006 ->
/var/spool/qmailscan/tmp/INF-BL07114474041172614965/
msg.pif: Worm.SomeFool.P FOUND
Tue Apr 11 09:26:52 2006 ->
/var/spool/qmailscan/tmp/INF-BL07114474041272614996/
message.scr: Worm.SomeFool.P FOUND
Tue Apr 11 09:26:52 2006 ->
/var/spool/qmailscan/tmp/INF-BL07114474041272614996/
textfile2: Exploit.HTML.IFrame FOUND
Tue Apr 11 09:29:44 2006 ->
/var/spool/qmailscan/tmp/INF-BL07114474058472618615/
message.scr: Worm.SomeFool.P FOUND
Tue Apr 11 09:29:44 2006 ->
/var/spool/qmailscan/tmp/INF-BL07114474058472618615/
textfile2: Exploit.HTML.IFrame FOUND
Tue Apr 11 09:29:54 2006 -> Segmentation fault :-(
Bye..

>From qmail log:
@40000000443b64bd275436e4
X-Qmail-Scanner-1.25st:[INF-BL07114474309172615709] cl
amdscan: corrupt or unknown clamd scanner error or
memory/resource/perms problem
 - exit status 512/2

The same happens if I change to root:
Edit /etc/clamd.conf:
User root

I changed softlimit in /var/qmail/control/conf-common:
SOFTLIMIT_OPTS="-m 128000000" # this server has 4GB
RAM

but I still have the same problem (i.e. clamd works
fine for a while then segfaults).

This has started happening after installing/emerging
clamav-0.88.1 (0.88 was doing fine).

I still have a second server with 0.88 and is working
fine. (same config as the main server; just different
clamav version)

Any suggestions? How can I debug the exact reason it
is seg-faulting?

Regards


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

