[Clamav-devel] enabling DMG and XAR support

Brandon Perry bperry.volatile at gmail.com
Tue Mar 25 18:55:20 EDT 2014


Sorry, gcc version:

[root at localhost clamav-0.98.1]# gcc --version
gcc (GCC) 4.0.0 20050519 (Red Hat 4.0.0-8)
Copyright (C) 2005 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

[root at localhost clamav-0.98.1]#



On 03/25/2014 05:54 PM, Brandon Perry wrote:
> 'CCFLAGS="-O0" ./configure && make'
>
> [root at localhost clamav-0.98.1]# clamscan/clamscan --version
> ClamAV 0.98.1
> [root at localhost clamav-0.98.1]# uname -a
> Linux localhost.localdomain 2.6.11-1.1369_FC4 #1 Thu Jun 2 22:55:56 EDT
> 2005 i686 athlon i386 GNU/Linux
> [root at localhost clamav-0.98.1]#
>
>
> If you don't set CCFLAGS configure fails because of an optimization bug
> in the compiler, which is what I am assuming you are talking about by
> doesn't compile.
>
> Being nice gets you more friends on the internet, and everyone knows
> internet friends are the best kind of friends. :)
>
>
> On 03/25/2014 05:29 PM, Brandon Perry wrote:
>> Thanks, I don't have a PPC here, but I am going to install fedora core 4
>> x86 and x86_64 inside of virtual machines and will see if I run into any
>> issues.
>>
>> Legacy systems are unfortunate. However, I think you would be hard
>> pressed to find any open source project today supporting that, so I
>> don't think it is that ridiculous to not expend the effort to actively
>> support it. I wouldn't be surprised if the code required to make it
>> compile on your system *and* modern systems caused performance decreases
>> (or even not compile on modern gcc!).
>>
>> There might be a small chance that you would need to maintain a separate
>> patchset to maintain this compatibility since having it compile on both
>> your legacy and modern systems would be detrimental to other ClamAV users.
>>
>> On 03/25/2014 05:18 PM, Dale Walsh wrote:
>>> You're right, it shouldn't matter, PowerPC
>>>
>>> The next question coming will be OS related so I'll answer ahead of
>>> time, OS is Mac OS X 10.4.x.
>>>
>>> The reason is simple, I must support the OS the customer uses so there
>>> is no upgrading the OS, no changing OS and no changing the hardware.
>>>
>>> Since it stopped building correctly/completely under GCC 4.x we were
>>> left with no choice but to abandon it.
>>>
>>> -- Dale
>>>
>>>
>>>
>>> On Mar 24, 2014, at 18:57 PM, Brandon Perry wrote:
>>>
>>>> Dale,
>>>>
>>>> Not that it *should* matter, but what is your architecture?
>>>>
>>>> On 03/24/2014 05:33 PM, Shawn Webb wrote:
>>>>> On what up-to-date OSs can I find gcc 4.0 in active use? I'll
>>>>> briefly try
>>>>> to recreate the problem in my spare time for you.
>>>>>
>>>>>
>>>>> On Mon, Mar 24, 2014 at 6:22 PM, Dale Walsh
>>>>> <dale at daleenterprise.com> wrote:
>>>>>
>>>>>> When it builds completely under GCC 4.0, I would be more than happy to
>>>>>> offer detailed debugging information and dumps that would be
>>>>>> beneficial to
>>>>>> the project but as it stands, a bug report at bugzilla.clamav.net
>>>>>> isn't
>>>>>> anything I would consider wasting my time on but you are more than
>>>>>> welcome
>>>>>> to file the report yourself.
>>>>>>
>>>>>> It makes no sense for me to file a report as I may use the source
>>>>>> files
>>>>>> but nothing else, I repackage it so I can build it and rather than
>>>>>> listen
>>>>>> to stupidity about my method of building being the root of the
>>>>>> problem,
>>>>>> informing you like other have should be sufficient to warrant an
>>>>>> in-depth
>>>>>> investigation into the matter.
>>>>>>
>>>>>> -- Dale
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> On Mar 24, 2014, at 17:32 PM, Steven Morgan wrote:
>>>>>>
>>>>>>  Yes, a dmg issue and an xar issue were mentioned. If the issue(s)
>>>>>> remain,
>>>>>>> please open a bug at bugzilla.clamav.net or send some files or
>>>>>>> --debug
>>>>>>> output.
>>>>>>>
>>>>>>>
>>>>>>> On Sun, Mar 23, 2014 at 5:17 PM, Joel Esler (jesler)
>>>>>>> <jesler at cisco.com
>>>>>>>> wrote:
>>>>>>>  Then I am sure the developers would be glad to help figure out the
>>>>>>>> problem
>>>>>>>> and fix it.
>>>>>>>>
>>>>>>>> -- 
>>>>>>>> Joel Esler
>>>>>>>> Sent from my iPhone
>>>>>>>>
>>>>>>>>  On Mar 22, 2014, at 13:32, "Dale Walsh" <dale at daleenterprise.com>
>>>>>>>>> wrote:
>>>>>>>>>
>>>>>>>>> 0.98.1 DMG does not work.
>>>>>>>>>
>>>>>>>>> -- Dale
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>  On Mar 21, 2014, at 09:16 AM, Joel Esler (jesler) wrote:
>>>>>>>>>> DMG support was just added in the last version of ClamAV.  How
>>>>>>>>>> long ago
>>>>>>>>>>
>>>>>>>>> did you do this testing?
>>>>>>>>>>  On Mar 20, 2014, at 8:22 PM, Dale Walsh <dale at daleenterprise.com>
>>>>>>>>>> wrote:
>>>>>>>>>>> You did miss it but it's a two headed nail.
>>>>>>>>>>>
>>>>>>>>>>> PDF, DMG, XAR and RAR have had issues not recognizing the test
>>>>>>>>>>> viruses
>>>>>>>>>>>
>>>>>>>>>> to name just a couple that spring to mind that we've had
>>>>>>>>>> trouble with
>>>>>>>> and
>>>>>>>> this all started happening when the clang and crap entered the
>>>>>>>> picture.
>>>>>>>>
>>>>>>>>>>> I've worked with the developers in the past, once the build
>>>>>>>>>>>
>>>>>>>>>> environment dependancies changed and I was told I had to
>>>>>>>>>> upgrade my OS
>>>>>>>> and
>>>>>>>> build tools is when it was no longer possible to resolve these
>>>>>>>> issues as
>>>>>>>> the update solely for the purpose of building ClamAV is not an
>>>>>>>> option
>>>>>>>> and I
>>>>>>>> shouldn't be forced to use someone else's built tool preferences
>>>>>>>> just
>>>>>>>> because they have the luxury of updating on a whim or purely for
>>>>>>>> bragging
>>>>>>>> rights.
>>>>>>>>
>>>>>>>>>>> It does not matter if my OS is dated, security patches are
>>>>>>>>>>> applied to
>>>>>>>>>>>
>>>>>>>>>> the build tools as they become available and this seems to
>>>>>>>>>> satisfy all
>>>>>>>> other software that build from source except ClamAV.
>>>>>>>>
>>>>>>>>>>> Having everything build with GCC 4.0 would allow me/us to
>>>>>>>>>>> re-deploy
>>>>>>>>>>>
>>>>>>>>>> ClamAV and contribute to the code base again (I have in the
>>>>>>>>>> past) but
>>>>>>>> the
>>>>>>>> chances of this are slim to non from what I recall because my OS and
>>>>>>>> build
>>>>>>>> tools are dated and listening to rants about ancient and
>>>>>>>> deprecated is
>>>>>>>> nothing more than someone spewing stupidity.
>>>>>>>>
>>>>>>>>>>> The fact that I ensure all bugs and updates to the build tools
>>>>>>>>>>> are
>>>>>>>>>>>
>>>>>>>>>> fixed/added allows me to keep everything in harmony and there
>>>>>>>>>> is no
>>>>>>>> reason
>>>>>>>> to update anything to build a single software package when all other
>>>>>>>> software sources seem to be content with the existing build
>>>>>>>> environment.
>>>>>>>>
>>>>>>>>>>> If you wish to go off-list to continue the discussion I have no
>>>>>>>>>>>
>>>>>>>>>> objections.
>>>>>>>>>>> -- Dale
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>>  On Mar 20, 2014, at 16:35 PM, Joel Esler (jesler) wrote:
>>>>>>>>>>>> Dale,
>>>>>>>>>>>>
>>>>>>>>>>>> Thanks for your email.  I'm not sure exactly what you are
>>>>>>>>>>>> referring
>>>>>>>>>>>>
>>>>>>>>>>> to.  Maybe I am missing a connection here or something, but the
>>>>>>>> discussion
>>>>>>>> was around scanning DMG and XAR, which I think, if there's a
>>>>>>>> issue with,
>>>>>>>> we'd be more than happy to work with anyone to try and square away.
>>>>>>>>
>>>>>>>>>>>> You seem to be discussing a build issue, and you say that it's a
>>>>>>>>>>>>
>>>>>>>>>>> waste of time.  When did you get the impression that working
>>>>>>>>>>> with the
>>>>>>>> developers was a waste of time?  If we're not communicating well
>>>>>>>> enough,
>>>>>>>> we
>>>>>>>> can fix that.  But I think the team is doing a good job of that
>>>>>>>> judging
>>>>>>>> by
>>>>>>>> the amount of complaints I have received since we took over the
>>>>>>>> project
>>>>>>>> from the old ClamAV team.
>>>>>>>>
>>>>>>>>>>>> Please let me know if we need to take this offline and
>>>>>>>>>>>> discuss or
>>>>>>>>>>>>
>>>>>>>>>>> anything I can do to help.
>>>>>>>>>>>> -- 
>>>>>>>>>>>> Joel Esler
>>>>>>>>>>>> Open Source Manager
>>>>>>>>>>>> Threat Intelligence Team Lead
>>>>>>>>>>>> Vulnerability Research Team
>>>>>>>>>>>>
>>>>>>>>>>>> On Mar 20, 2014, at 3:55 PM, Dale Walsh <dale at daleenterprise.com
>>>>>>>>>>>>
>>>>>>>>>>> <mailto:dale at daleenterprise.com>> wrote:
>>>>>>>>>>>> Mark, this has been an issue for many versions along with a
>>>>>>>>>>>> slew of
>>>>>>>>>>>>
>>>>>>>>>>> others things not working as expected.
>>>>>>>>>>>> As much as I liked ClamAV, we've abandoned it as a mail solution
>>>>>>>>>>>>
>>>>>>>>>>> shortly after things stopped working correctly and they
>>>>>>>>>>> changed the
>>>>>>>> required build tools so you can no longer build it with GCC
>>>>>>>> 3.3/4.0/4.1/4.2
>>>>>>>> and have a fully functional app.
>>>>>>>>
>>>>>>>>>>>> Yes there are flags to get it to build but certain modules and
>>>>>>>>>>>>
>>>>>>>>>>> features don't build and making an incomplete and partially
>>>>>>>>>>> functional
>>>>>>>> binary isn't appealing.
>>>>>>>>
>>>>>>>>>>>> Advice on updating build tools is a waste of time as there is no
>>>>>>>>>>>>
>>>>>>>>>>> reason to update the build tools just to build ClamAV as it's the
>>>>>>>> only one
>>>>>>>> that has this ridiculous built-tool requirement and only an idiot
>>>>>>>> would
>>>>>>>> tell me to update.
>>>>>>>>
>>>>>>>>>>>> My thoughts on this is simple, if it doesn't build with the
>>>>>>>>>>>> basic GNU
>>>>>>>>>>>>
>>>>>>>>>>> GCC compiler tools then it's seriously flawed and needs these
>>>>>>>>>>> other
>>>>>>>> tools
>>>>>>>> to overcome the short-comings of poorly written/implemented code.
>>>>>>>>
>>>>>>>>>>>> When I say build, I mean build with full functionality so
>>>>>>>>>>>> don't go
>>>>>>>>>>>>
>>>>>>>>>>> off the deep-end stating it builds, partial functionality may be
>>>>>>>> acceptable
>>>>>>>> to you bhut it isn't to me.
>>>>>>>>
>>>>>>>>>>>> At this time, for personal use, I use the source code but
>>>>>>>>>>>> repackage
>>>>>>>>>>>>
>>>>>>>>>>> the build environment to work with what I have and I'm
>>>>>>>>>>> comfortable
>>>>>>>> with
>>>>>>>> submitting corrections and patches, too much focus and complaints
>>>>>>>> on my
>>>>>>>> build tools so why waste my time.
>>>>>>>>
>>>>>>>>>>>> -- Dale
>>>>>>>>>>>>
>>>>>>>>>>>> On Mar 19, 2014, at 11:34 AM, Rafael Ferreira wrote:
>>>>>>>>>>>>
>>>>>>>>>>>> Interesting... let me run some tests and get back to you.
>>>>>>>>>>>>
>>>>>>>>>>>> On Mar 19, 2014, at 8:33 AM, Mark Allan <markjallan at gmail.com
>>>>>>>>>>>> <mailto:
>>>>>>>>>>>>
>>>>>>>>>>> markjallan at gmail.com>> wrote:
>>>>>>>>>>>> Just out of interest, did you test to see if it *actually*
>>>>>>>>>>>> worked?
>>>>>>>>>>>>
>>>>>>>>>>>> My configure output shows that dmg and xar are supported, but it
>>>>>>>>>>>>
>>>>>>>>>>> doesn't actually detect the Eicar test file within a disk image.
>>>>>>>>>>>> configure: Summary of engine detection features
>>>>>>>>>>>>           autoit_ea06 : yes
>>>>>>>>>>>>           bzip2       : ok
>>>>>>>>>>>>           zlib        : /usr
>>>>>>>>>>>>           unrar       : yes
>>>>>>>>>>>>           dmg and xar : yes, from /usr
>>>>>>>>>>>>
>>>>>>>>>>>> When I create a new disk image, copy the Eicar test file in,
>>>>>>>>>>>> and scan
>>>>>>>>>>>>
>>>>>>>>>>> the dmg, it shows up as being clean.
>>>>>>>>>>>> clamscan test.dmg
>>>>>>>>>>>> test.dmg: OK
>>>>>>>>>>>>
>>>>>>>>>>>> ----------- SCAN SUMMARY -----------
>>>>>>>>>>>> Known viruses: 3259558
>>>>>>>>>>>> Engine version: 0.98.1
>>>>>>>>>>>> Scanned directories: 0
>>>>>>>>>>>> Scanned files: 1
>>>>>>>>>>>> Infected files: 0
>>>>>>>>>>>> Data scanned: 10.07 MB
>>>>>>>>>>>> Data read: 10.02 MB (ratio 1.01:1)
>>>>>>>>>>>> Time: 4.845 sec (0 m 4 s)
>>>>>>>>>>>>
>>>>>>>>>>>> Does this work as expected for anyone else?
>>>>>>>>>>>>
>>>>>>>>>>>> Mark
>>>>>>>>>>>>
>>>>>>>>>>>> On 10 Feb 2014, at 23:38, Rafael Ferreira <raf at uvasoftware.com
>>>>>>>>>>>>
>>>>>>>>>>> <mailto:raf at uvasoftware.com>> wrote:
>>>>>>>>>>>> That worked, thanks!
>>>>>>>>>>>>
>>>>>>>>>>>> On February 10, 2014 at 4:29:41 PM, Steven Morgan (
>>>>>>>>>>>>
>>>>>>>>>>> smorgan at sourcefire.com<mailto:smorgan at sourcefire.com>) wrote:
>>>>>>>>>>>> Rafael,
>>>>>>>>>>>>
>>>>>>>>>>>> Probably all you need to do install libxml&libxml2-dev, which
>>>>>>>>>>>> is used
>>>>>>>>>>>>
>>>>>>>>>>> by
>>>>>>>>> dmg and xar, then do your configure/make.
>>>>>>>>>>>> Steve
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>> On Mon, Feb 10, 2014 at 6:05 PM, Rafael Ferreira <
>>>>>>>>>>>> raf at uvasoftware.com
>>>>>>>>>>>>
>>>>>>>>>>> <mailto:raf at uvasoftware.com>>wrote:
>>>>>>>>>>>> Folks,
>>>>>>>>>>>>
>>>>>>>>>>>> I'm compiling clamav 0.98.1 on Linux (Ubuntu 12.04 LTS) and
>>>>>>>>>>>> I'm not
>>>>>>>>>>>> getting the new super awesome DMG and XAR file support:
>>>>>>>>>>>>
>>>>>>>>>>>> configure: Summary of detected features follows
>>>>>>>>>>>> OS : linux-gnu
>>>>>>>>>>>> pthreads : yes (-lpthread)
>>>>>>>>>>>> configure: Summary of miscellaneous features
>>>>>>>>>>>> check : no (auto)
>>>>>>>>>>>> fanotify : yes
>>>>>>>>>>>> fdpassing : 1
>>>>>>>>>>>> IPv6 : yes
>>>>>>>>>>>> configure: Summary of optional tools
>>>>>>>>>>>> clamdtop : (auto)
>>>>>>>>>>>> milter : yes (disabled)
>>>>>>>>>>>> configure: Summary of engine performance features)
>>>>>>>>>>>> release mode: yes
>>>>>>>>>>>> jit : yes (auto)
>>>>>>>>>>>> mempool : yes
>>>>>>>>>>>> configure: Summary of engine detection features
>>>>>>>>>>>> autoit_ea06 : yes
>>>>>>>>>>>> bzip2 : ok
>>>>>>>>>>>> zlib : /usr
>>>>>>>>>>>> unrar : yes
>>>>>>>>>>>> dmg and xar : no
>>>>>>>>>>>>
>>>>>>>>>>>> Am I missing a configure flag or third party library?
>>>>>>>>>>>>
>>>>>>>>>>>> Thanks in advance,
>>>>>>>>>>>>
>>>>>>>>>>>> - Rafael
>>>>>>>>>>>>
>>>>>>>>>>>> ----
>>>>>>>>>>>> scanii.com<http://scanii.com> - the web friendly malware
>>>>>>>>>>>> scanner!
>>>>>>>>>>>> _______________________________________________
>>>>>>>>>>>> http://lurker.clamav.net/list/clamav-devel.html
>>>>>>>>>>>> Please submit your patches to our Bugzilla:
>>>>>>>>>>>> http://bugs.clamav.net
>>>>>>>>>>>> _______________________________________________
>>>>>>>>>>>> http://lurker.clamav.net/list/clamav-devel.html
>>>>>>>>>>>> Please submit your patches to our Bugzilla:
>>>>>>>>>>>> http://bugs.clamav.net
>>>>>>>>>>>> _______________________________________________
>>>>>>>>>>>> http://lurker.clamav.net/list/clamav-devel.html
>>>>>>>>>>>> Please submit your patches to our Bugzilla:
>>>>>>>>>>>> http://bugs.clamav.net
>>>>>>>>>>>>
>>>>>>>>>>>> _______________________________________________
>>>>>>>>>>>> http://lurker.clamav.net/list/clamav-devel.html
>>>>>>>>>>>> Please submit your patches to our Bugzilla:
>>>>>>>>>>>> http://bugs.clamav.net
>>>>>>>>>>>>
>>>>>>>>>>>> _______________________________________________
>>>>>>>>>>>> http://lurker.clamav.net/list/clamav-devel.html
>>>>>>>>>>>> Please submit your patches to our Bugzilla:
>>>>>>>>>>>> http://bugs.clamav.net
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>>
>>>>>>>>>>>> _______________________________________________
>>>>>>>>>>>> http://lurker.clamav.net/list/clamav-devel.html
>>>>>>>>>>>> Please submit your patches to our Bugzilla:
>>>>>>>>>>>> http://bugs.clamav.net
>>>>>>>>>>>>
>>>>>>>>>>>> _______________________________________________
>>>>>>>>>>>> http://lurker.clamav.net/list/clamav-devel.html
>>>>>>>>>>>> Please submit your patches to our Bugzilla:
>>>>>>>>>>>> http://bugs.clamav.net
>>>>>>>>>>>>
>>>>>>>>>>> _______________________________________________
>>>>>>>>>>> http://lurker.clamav.net/list/clamav-devel.html
>>>>>>>>>>> Please submit your patches to our Bugzilla:
>>>>>>>>>>> http://bugs.clamav.net
>>>>>>>>>>>
>>>>>>>>>> _______________________________________________
>>>>>>>>>> http://lurker.clamav.net/list/clamav-devel.html
>>>>>>>>>> Please submit your patches to our Bugzilla: http://bugs.clamav.net
>>>>>>>>>>
>>>>>>>>> _______________________________________________
>>>>>>>>> http://lurker.clamav.net/list/clamav-devel.html
>>>>>>>>> Please submit your patches to our Bugzilla: http://bugs.clamav.net
>>>>>>>>>
>>>>>>>> _______________________________________________
>>>>>>>> http://lurker.clamav.net/list/clamav-devel.html
>>>>>>>> Please submit your patches to our Bugzilla: http://bugs.clamav.net
>>>>>>>>
>>>>>>>>  _______________________________________________
>>>>>>> http://lurker.clamav.net/list/clamav-devel.html
>>>>>>> Please submit your patches to our Bugzilla: http://bugs.clamav.net
>>>>>>>
>>>>>>>
>>>>>> _______________________________________________
>>>>>> http://lurker.clamav.net/list/clamav-devel.html
>>>>>> Please submit your patches to our Bugzilla: http://bugs.clamav.net
>>>>>>
>>>>> _______________________________________________
>>>>> http://lurker.clamav.net/list/clamav-devel.html
>>>>> Please submit your patches to our Bugzilla: http://bugs.clamav.net
>>>> _______________________________________________
>>>> http://lurker.clamav.net/list/clamav-devel.html
>>>> Please submit your patches to our Bugzilla: http://bugs.clamav.net
>>>>
>>>>
>>> _______________________________________________
>>> http://lurker.clamav.net/list/clamav-devel.html
>>> Please submit your patches to our Bugzilla: http://bugs.clamav.net




More information about the clamav-devel mailing list