[clamav-win32] libclamav crashes in cli_ctime

Gerald Naveen ageraldnaveen at yahoo.com
Tue Mar 4 13:36:39 CET 2008


I'm using the stable 0.92.1 kit on Windows.

cli_ctime tries to convert the given time into readable string. There is no
check in this function for invalid timestamp (time_t). As a result, a PE binary
with a wrong/invalid timestamp crashes in cli_ctime, as ctime returns NULL and
there is no code to handle it.

If ctime returns null, it should be handled ; maybe "invalid time" can be
copied to the buffer.

Any idea if there is any fix coming up on this?

Thanks




      ____________________________________________________________________________________
Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs


More information about the clamav-win32 mailing list