[clamav-users] Bytecode 86 failed to run

Tilman Schmidt tschmidt at cardtech.de
Mon Jul 9 11:46:15 EDT 2018


According to the manpage, the default value of --bytecode-timeout is
sixty seconds. Shouldn't that be ample for scanning a 6 MB file on a
current processor?

But I'll keep in mind to retry with a higher value should the problem
reappear.

Thanks,
Tilman

Am 09.07.2018 um 16:22 schrieb Micah Snyder (micasnyd):
> It's a pretty common error if you lower the --bytecode-timeout value.
>  By contrast, you can also raise --bytecode-timeout higher than the
> default until the errors go away if you want to scan those files, and
> don't wish to delete the one triggering the timeout. 
> 
> It isn't entirely surprising that a more complex file for which we have
> a bytecode signature could also cause the default timeout to be exceeded.  
> 
> Cheers,
> Micah
>  
> Micah Snyder
> ClamAV Development
> Talos
> Cisco Systems, Inc.
> 
> 
>> On Jul 9, 2018, at 4:51 AM, Tilman Schmidt <tschmidt at cardtech.de
>> <mailto:tschmidt at cardtech.de>> wrote:
>>
>> Would have gladly done so, had anyone hinted at that possibility.
>> Now it's too late, the file is gone.
>>
>> Am 09.07.2018 um 10:37 schrieb Al Varnell:
>>> Agree that apparently nobody knows, but a lot of us care.
>>>
>>> I only wish you had submitted that file to the ClamAV signature team as
>>> I suspect they would have figured it out by now.
>>>
>>> -Al-
>>> ClamXAV User
>>>
>>> On Mon, Jul 09, 2018 at 01:27 AM, Tilman Schmidt wrote:
>>>> I've been trying in vain to get an answer on that one since 2018-06-20.
>>>> For me it's bytecode 73, otherwise the same.
>>>> Looks like no-one knows or cares.
>>>>
>>>> I ended up bisecting the scan and removing the file whose scan triggered
>>>> the message.
>>>> Luckily it wasn't needed for the operation of the affected system.
>>>> An alternative might be to exclude it from the scan.
>>>>
>>>> Am 09.07.2018 um 06:14 schrieb peekaa at email.cz
>>>> <mailto:peekaa at email.cz> <mailto:peekaa at email.cz>:
>>>>> On my debian 9, clamav 0.100.0+dfsg-0+deb8u1) I got following error:
>>>>>
>>>>> clamscan /media/6b300944-6e7c-493e-b9c9-faeebb70a415/nastenka
>>>>> /srv/dev-disk-by-label-white/zaloha
>>>>> '--exclude=\.(mp4|MP4|mkv|MKV|avi|AVI|wmv|WMV|ts|TS|flv|FLV|mov|MOV|JPG|jpg|mp3|MP3|tc)$'
>>>>> -ri -l /var/log/clamav/clamscanDisk.log
>>>>> LibClamAV Warning: [Bytecode JIT]: recovered from error
>>>>> LibClamAV Warning: [Bytecode JIT]: JITed code intercepted runtime
>>>>> error!
>>>>> LibClamAV Warning: [Bytecode JIT]: Bytecode run timed out, timeout
>>>>> flag set
>>>>> LibClamAV Warning: Bytecode 86 failed to run: Time limit reached
>>>>> LibClamAV Warning: [Bytecode JIT]: Bytecode run timed out, timeout
>>>>> flag set
>>>>> LibClamAV Warning: [Bytecode JIT]: recovered from error
>>>>> LibClamAV Warning: [Bytecode JIT]: JITed code intercepted runtime
>>>>> error!
>>>>> LibClamAV Warning: Bytecode 86 failed to run: Time limit reached
>>>>> LibClamAV Warning: [Bytecode JIT]: Bytecode run timed out, timeout
>>>>> flag set
>>>>> LibClamAV Warning: [Bytecode JIT]: recovered from error
>>>>> LibClamAV Warning: [Bytecode JIT]: JITed code intercepted runtime
>>>>> error!
>>>>> LibClamAV Warning: Bytecode 86 failed to run: Time limit reached
>>>>> LibClamAV Warning: [Bytecode JIT]: Bytecode run timed out, timeout
>>>>> flag set
>>>>> LibClamAV Warning: [Bytecode JIT]: recovered from error
>>>>> LibClamAV Warning: [Bytecode JIT]: JITed code intercepted runtime
>>>>> error!
>>>>> LibClamAV Warning: Bytecode 86 failed to run: Time limit reached
>>>>> LibClamAV Warning: [Bytecode JIT]: Bytecode run timed out, timeout
>>>>> flag set
>>>>> LibClamAV Warning: [Bytecode JIT]: recovered from error
>>>>> LibClamAV Warning: [Bytecode JIT]: JITed code intercepted runtime
>>>>> error!
>>>>> LibClamAV Warning: Bytecode 86 failed to run: Time limit reached
>>>>> LibClamAV Warning: [Bytecode JIT]: Bytecode run timed out, timeout
>>>>> flag set
>>>>> LibClamAV Warning: [Bytecode JIT]: recovered from error
>>>>> LibClamAV Warning: [Bytecode JIT]: JITed code intercepted runtime
>>>>> error!
>>>>> LibClamAV Warning: Bytecode 86 failed to run: Time limit reached
>>>>>
>>>>> in clamd.conf is:
>>>>> Bytecode true
>>>>> BytecodeSecurity TrustSigned
>>>>> BytecodeTimeout 120000
>>>>>
>>>>> There is no clamd, I do not need it. I just need once a week check
>>>>> discs.
>>>>>
>>>>> Thank you for help.



More information about the clamav-users mailing list