[clamav-users] Extremely slow PDF file scanning

[Nikolay Belaevski]

Hello,

I’m investigating why it takes about five minutes for ClamAV 0.104.0 to scan PDF file. Can someone help me, please? Looks like some sort of format/parsing defect to me because the issue is not reproducible if I modify the file using pdftk, e.g. append page in front.

Additional information below.

Execution time:


root at da6a7952db76:/tmp# time echo "nSCAN /tmp/1.pdf" | nc localhost 3310

/tmp/1.pdf: OK



real   4m53.823s

user   0m0.001s

sys    0m0.006s

File: https://storage.googleapis.com/upload-samples/Museum_26MB.pdf
Config file: https://storage.googleapis.com/upload-samples/clamd.conf
Debug log: https://storage.googleapis.com/upload-samples/debug.log
Extract file size data: https://storage.googleapis.com/upload-samples/files.log

Thanks,
  Nikolay


________________________________

CONFIDENTIALITY NOTICE: This e-mail and any files attached may contain confidential information of Five9 and/or its affiliated entities. Access by the intended recipient only is authorized. Any liability arising from any party acting, or refraining from acting, on any information contained in this e-mail is hereby excluded. If you are not the intended recipient, please notify the sender immediately, destroy the original transmission and its attachments and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Copyright in this e-mail and any attachments belongs to Five9 and/or its affiliated entities.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20210924/e73f139d/attachment.htm>