[clamav-users] [Clamav-devel] ClamAV(R): ClamAV 0.98.4rc1 is now available!

[Mark Allan]

Hi Shawn,

By "the sample" do you mean the 1.15 GB file?  If so, that's the user's personal email mailbox so I can't imagine he'd be willing to share it.

If you mean a 0.98.4-rc1 crash log, I've just asked him again, so hopefully he'll be able to find it.

Mark


On 20 May 2014, at 02:14 pm, Shawn Webb <swebb at sourcefire.com> wrote:

> Hey Mark,
> 
> Is there a way you could get me the sample?
> 
> Thanks,
> 
> Shawn
> 
> 
> On Tue, May 20, 2014 at 6:49 AM, Mark Allan <markjallan at blueyonder.co.uk>wrote:
> 
>> I may have been a bit hasty with this.  It appears there's another issue
>> with clamd.
>> 
>> I'm receiving reports of clamd crashing when attempting to parse email in
>> an incredibly large (1.15 GB) Thunderbird mailbox file.
>> 
>> This particular report is from 0.98.3, but the user is reporting it still
>> happens when testing against 0.98.4-rc1.  I'll attempt to get a crash log
>> from the user.
>> 
>> Exception Type: EXC_BAD_ACCESS (SIGSEGV)
>> Exception Codes: KERN_INVALID_ADDRESS at 0x0000000117ffffff
>> 
>> Thread 2 Crashed:
>> 0 libclamav.6.dylib 0x000000010004fa6c parseEmailBody + 4668
>> 1 libclamav.6.dylib 0x000000010004d701 cli_mbox + 1057
>> 2 libclamav.6.dylib 0x0000000100048b97 cli_scanmail + 119
>> 3 libclamav.6.dylib 0x0000000100044349 magic_scandesc + 8537
>> 4 libclamav.6.dylib 0x0000000100042142 cli_base_scandesc + 242
>> 5 libclamav.6.dylib 0x0000000100046360 scan_common + 416
>> 6 libclamav.6.dylib 0x00000001000465d8 cl_scanfile_callback + 88
>> 7 clamd 0x000000010000c62d scan_callback + 749
>> 8 libclamav.6.dylib 0x00000001006c966c handle_entry + 252
>> 9 libclamav.6.dylib 0x00000001006c9388 cli_ftw + 424
>> 10 clamd 0x0000000100007363 command + 1331
>> 11 clamd 0x000000010000bd38 scanner_thread + 56
>> 12 clamd 0x000000010000918a thrmgr_worker + 938
>> 13 libsystem_c.dylib 0x00007fff8cb7b772 _pthread_start + 327
>> 14 libsystem_c.dylib 0x00007fff8cb681a1 thread_start + 13
>> 
>> I'm aware the offsets won't be too useful, but at least the method names
>> ought to help I think.
>> 
>> Mark
>> 
>> On 16 May 2014, at 03:03 pm, Mark Allan <markjallan at gmail.com> wrote:
>> 
>>> All works fine for me on OS X 10.6 - 10.9.
>>> 
>>> For info, compiled on 10.9.2 with support for 10.6 onwards.
>>> 
>>> CFLAGS="-O2 -g -D_FILE_OFFSET_BITS=64 -mmacosx-version-min=10.6 -arch
>> x86_64" CXXFLAGS="-O2 -g -D_FILE_OFFSET_BITS=64 -mmacosx-version-min=10.6
>> -arch x86_64" ./configure --disable-dependency-tracking  --enable-llvm
>> --enable-clamdtop --with-user=_clamav --with-group=_clamav
>> --enable-all-jit-targets
>>> 
>>> Mark
>>> 
>>> On 16 May 2014, at 02:01 pm, Joel Esler (jesler) <jesler at cisco.com>
>> wrote:
>>> 
>>>> http://blog.clamav.net/2014/05/clamav-0984rc1-is-now-available.html
>>>> 
>>>> ClamAV 0.98.4rc1 is now available for download.  Shown below are the
>> notes concerning this release:
>>>> 
>>>> 
>>>> 0.98.4rc1
>>>> ------
>>>> 
>>>> ClamAV 0.98.4 is a bug fix release. The following issues are now
>> resolved:
>>>> 
>>>> - Various build problems on Solaris, OpenBSD, AIX.
>>>> 
>>>> - Crashes of clamd on Windows and Mac OS X platforms when reloading
>>>> the virus signature database.
>>>> 
>>>> - Infinite loop in clamdscan when clamd is not running.
>>>> 
>>>> - Freshclam failure on Solaris 10.
>>>> 
>>>> - Buffer underruns when handling multi-part MIME email attachments.
>>>> 
>>>> - Configuration of OpenSSL on various platforms.
>>>> 
>>>> ----
>>>> 
>>>> ClamAV 0.98.4rc1 is available for download here:
>> http://sourceforge.net/projects/clamav/files/RC/clamav-0.98.4-rc1/.
>> Please download, test, and provide feedback to the mailing list here:
>>>> 
>>>> http://lists.clamav.net/mailman/listinfo/clamav-users
>> 
>> _______________________________________________
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> http://www.clamav.net/support/ml
>> 
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> http://www.clamav.net/support/ml