[clamav-users] Problem with ClamAV 0.98.4 - HAVP won't load CVD files

[Scott Kitterman]

On Thursday, June 26, 2014 00:37:38 Paul Kosinski wrote:
> I'm using HAVP (0.92) on Linux (openSuSE 13.1) as a virus scanning
> filter for HTTP traffic. It worked perfectly with ClamAV 0.98.3 (and
> many previous versions), but now it won't start at all with 0.98.4.
> 
> HAVP uses libclamav.so to do the actual scanning (more efficient
> than even the socket interface), so it starts by loading the various
> CVD files.
> 
> With 0.98.4, HAVP fails thus:
> 
>   25/06/2014 20:30:54 === Starting HAVP Version: 0.92
>   25/06/2014 20:30:54 Running as user: havp, group: havp
>   25/06/2014 20:30:54 --- Initializing ClamAV Library Scanner
>   25/06/2014 20:30:54 ClamAV: Using database directory:
> /opt/clamav/share/clamav 25/06/2014 20:30:54 ClamAV: Could not load
> database: Can't allocate memory 25/06/2014 20:30:54 Error initializing
> ClamAV Library Scanner!
> 
> While with 0.98.3, HAVP succeeds:
> 
>   25/06/2014 20:32:48 === Starting HAVP Version: 0.92
>   25/06/2014 20:32:48 Running as user: havp, group: havp
>   25/06/2014 20:32:48 --- Initializing ClamAV Library Scanner
>   25/06/2014 20:32:48 ClamAV: Using database directory:
> /opt/clamav/share/clamav 25/06/2014 20:32:55 ClamAV: Loaded 3470096
> signatures (engine 0.98.3) 25/06/2014 20:32:56 ClamAV Library Scanner
> passed EICAR virus test (Eicar-Test-Signature) 25/06/2014 20:32:56 --- All
> scanners initialized
> 
> A previous posting to this list implied that such (presumably bogus)
> memory errors might be related to the switch to OpenSSL.  In both
> cases, I'm using OpenSSL 1.0.1h-1.60.1 (openSuSE's latest version),
> and the clamd.conf file and HAVP binary are the same.

We've confirmed the same issue on Ubuntu, so it's not distro specific.

Scott K