Package: libclamav1
Version: 0.80-7
Severity: normal

I am using clamd and using STREAM.

If I send a zip file ...
... which contains a zip file ...
... which contains a zip file ...
... which contains a zip file ...
... which contains a zip file ...
... which contains a zip file ...
... which contains a zip file ...
... which contains a zip file ...
... which contains a zip file ...
... which contains a zip file ...
... which contains a zip file ...
... which contains a zip file ...
        ... which finally contains eicar.com pattern,

On upstream,
clamd detects the eicar.com pattern, thus not honouring the recursion
limit.

On Debian, if I have understood the code correctly, but I have not
tested it, one gets stream: OK.

IMHO, neither is acceptable. The expected behaviour is some kind of
error notification (e.g. in the form of a virus special name).


Upstream has this fixed on CVS, but not on the stable release.

Yours sincerely,


Antonio Fiol

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.8
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)

Versions of packages libclamav1 depends on:
ii  libbz2-1.0                  1.0.2-3      high-quality block-sorting file co
ii  libc6                       2.3.2.ds1-20 GNU C Library: Shared libraries an
ii  libcurl3                    7.12.3-2     Multi-protocol file transfer libra
ii  libgmp3                     4.1.4-5      Multiprecision arithmetic library
ii  libidn11                    0.5.2-3      GNU libidn library, implementation
ii  libssl0.9.7                 0.9.7e-3     SSL shared libraries
ii  zlib1g                      1:1.2.2-4    compression library - runtime

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to