Clamscan crash on Mac OS X - yara rules

James Brown jlbrown at bordo.com.au
Wed May 16 22:08:12 EDT 2018


Although clamd is no longer crashing at startup (see thread "Startup crash on MacOS X - version 0.100.0” from about a week ago), I have lots of crash logs for clamscan. It looks like yara rules are the problem again:

Application Specific Information:
Assertion failed: (sp == 0), function yr_execute_code, file yara_exec.c, line 177.
 

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   libsystem_kernel.dylib        	0x00007fff9895d82a __kill + 10
1   libsystem_c.dylib             	0x00007fff92ed6a9c abort + 177
2   libsystem_c.dylib             	0x00007fff92f095de __assert_rtn + 146
3   libclamav.7.dylib             	0x000000010eaa61ee yr_execute_code + 4638 (yara_exec.c:177)
4   libclamav.7.dylib             	0x000000010e9c7560 cli_exp_eval + 928 (matcher.c:817)
5   libclamav.7.dylib             	0x000000010e9c8bbc cli_fmap_scandesc + 3900 (matcher.c:1220)
6   libclamav.7.dylib             	0x000000010e9de079 cli_scanraw + 153 (scanners.c:2424)
7   libclamav.7.dylib             	0x000000010e9ddb4d magic_scandesc + 10333 (scanners.c:3469)
8   libclamav.7.dylib             	0x000000010e9e000d cli_base_scandesc + 365 (scanners.c:3616)
9   libclamav.7.dylib             	0x000000010e9e05df scan_common + 671 (scanners.c:4016)
10  libclamav.7.dylib             	0x000000010e9e06b2 cl_scandesc_callback + 34 (scanners.c:4030)
11  clamscan                      	0x000000010e9a1a95 scanfile + 741 (manager.c:392)
12  clamscan                      	0x000000010e9a12a1 scanmanager + 5729 (manager.c:1166)
13  clamscan                      	0x000000010e99f968 main + 680 (clamscan.c:161)
14  clamscan                      	0x000000010e99aff4 start + 52

Let me know if there’s an email address I can send the full crash logs to if that would help.

Thanks,

James.


More information about the clamav-users mailing list