Package: libclamav1
Version: 0.80-7
Severity: normal

I am using clamd in STREAM mode in every case.

I have found a way of fooling the scanner to give a false
negative:

If the user sends a BIG file (bigger than the limit) with a virus near
the end (outside the limit), it will get cut, and the virus will not be
found.

IMO, the scanner should detect this as an exceptional situation, and
react by saying:
stream: ERROR:Size-limit-exceeded FOUND

Or any other informative string.

The bug is not specific to Debian.

Yours sincerely,


Antonio Fiol


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.8
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages libclamav1 depends on:
ii  libbz2-1.0                  1.0.2-3      high-quality block-sorting file co
ii  libc6                       2.3.2.ds1-20 GNU C Library: Shared libraries an
ii  libcurl3                    7.12.3-2     Multi-protocol file transfer libra
ii  libgmp3                     4.1.4-5      Multiprecision arithmetic library
ii  libidn11                    0.5.2-3      GNU libidn library, implementation
ii  libssl0.9.7                 0.9.7e-3     SSL shared libraries
ii  zlib1g                      1:1.2.2-4    compression library - runtime

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to