[Clamav-devel] URGENT: Clamd is wedged on multiple installations

[Gary R. Schmidt]

On 27/01/2018 00:50, Per Jessen wrote:
> Dianne Skoll wrote:
> 
>> Hi,
>>
>> Something went badly wrong with clamd recently; it's stuck with
>> hundreds/thousands of open files per process and interrupting mail
>> flow.
>>
>> When a scanning thread finishes, I see this in the strace output.
>> (I ran clamdscan /etc/hosts as a test):
>>
>> [pid  3707] 02:11:01 sendto(295, "/etc/hosts: OK\n", 15, 0, NULL, 0) =
>> [15
>> [pid  3707] 02:11:01 shutdown(295, SHUT_RDWR) = 0
>> [pid  3707] 02:11:01 close(295)         = 0
>> [pid  3707] 02:11:01 futex(0x1933c3c,
>> [FUTEX_WAIT_BITSET_PRIVATE|FUTEX_CLOCK_REALTIME, 387, {1516950691, 0},
>> [ffffffff) = -1 ETIMEDOUT (Connection timed out)
>> [pid  3707] 02:11:31 futex(0x1933c10, FUTEX_WAKE_PRIVATE, 1) = 0
>> [pid  3707] 02:11:31 madvise(0x7fae6affe000, 8368128, MADV_DONTNEED) =
>> [0
>> [pid  3707] 02:11:31 _exit(0)           = ?
>> [pid  3707] 02:11:31 +++ exited with 0 +++
>>
>> So it scans the file, says it's OK. and then hangs in the futex for 30
>> seconds.
>>
>> HELP!  This is causing major outages for many of our customers.
> 
> We're seeing something similar - this morning with 0.99.2, later with
> 0.99.3.  I am guessing there is something wrong in the database?
> 
Not seeing any problems here, running 0.99.2 on Solaris 11.3, logs say:
--------------------------------------
Jan 26 23:39:45 paranoia freshclam[4271]: [ID 702911 local6.info] 
Received signal: wake up
Jan 26 23:39:45 paranoia freshclam[4271]: [ID 702911 local6.info] ClamAV 
update process started at Fri Jan 26 23:39:45 2018
Jan 26 23:39:45 paranoia freshclam[4271]: [ID 702911 local6.warning] 
Your ClamAV installation is OUTDATED!
Jan 26 23:39:45 paranoia freshclam[4271]: [ID 702911 local6.warning] 
Local version: 0.99.2 Recommended version: 0.99.3
Jan 26 23:39:45 paranoia freshclam[4271]: [ID 702911 local6.info] DON'T 
PANIC! Read http://www.clamav.net/documents/upgrading-clamav
Jan 26 23:39:46 paranoia freshclam[4271]: [ID 702911 local6.info] 
main.cld is up to date (version: 58, sigs: 4566249, f-level: 60, 
builder: sigmgr)
Jan 26 23:39:46 paranoia freshclam[4271]: [ID 702911 local6.info] 
daily.cld is up to date (version: 24257, sigs: 1835982, f-level: 63, 
builder: neo)
Jan 26 23:39:46 paranoia freshclam[4271]: [ID 702911 local6.info] 
bytecode.cld is up to date (version: 319, sigs: 75, f-level: 63, 
builder: neo)
Jan 26 23:39:46 paranoia freshclam[4271]: [ID 702911 local6.info] 
--------------------------------------

The local date and time there is around 20170126T0239 UTC.

I'm debating updating to 0.99.3, I get sick of seeing the compiler 
warnings, it takes me a while to decide that they're not a problem, it's 
(probably) just sloppy coding.

	Cheers,
		Gary	B-)