Package: libclamav2
Version: 0.91.2-3 0.91.2-4
Hello,
I have seen a segfault in libclamav2 when I turn on
"PhishingSignatures" flag on a sparc64/smp (U80). I have run clamd with
debug options in gdb :
LibClamAV debug: blobClose: recovered 8180 bytes from 8192
LibClamAV debug: blobClose: recovered 8183 bytes from 8192
LibClamAV debug: blobClose: recovered 8183 bytes from 8192
LibClamAV debug: blobClose: recovered 8156 bytes from 8192
LibClamAV debug: blobClose: recovered 8156 bytes from 8192
LibClamAV debug: getHrefs: html_normalise_mem returned
LibClamAV debug: Phishcheck: href with no contents?
LibClamAV debug: Phishcheck:Checking url
http://home.edt02.net/emc/emchV4c/?c=18
cliquant
ici6369-0-49344-531291651-0-0-0-0-nadege.teixeira%atpc30.fr->en
LibClamAV debug: Phishing: looking up in whitelist:
http://home.edt02.net/emc/em
chV4c/?c=18860-49343-28165-1-96369-0-49344-531291651-0-0-0-0-nadege.teixeira�pc3
0.fr:encliquantici; host-only:0
LibClamAV debug: Looking up in regex_list:
http://home.edt02.net/emc/emchV4c/?c=
18860-49343-28165-1-96369-0-49344-531291651-0-0-0-0-nadege.teixeira�pc30.fr:encl
iquantici/
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xf7877b90 (LWP 1991)]
0xf7f8527c in regex_list_match () from /usr/lib/libclamav.so.2
(gdb) up
#1 0xf7f835b8 in whitelist_match () from /usr/lib/libclamav.so.2
(gdb) up
#2 0xf7f82adc in phishingScan () from /usr/lib/libclamav.so.2
(gdb) up
#3 0xf7f3f57c in ?? () from /usr/lib/libclamav.so.2
(gdb) up
#4 0xf7f3f57c in ?? () from /usr/lib/libclamav.so.2
(gdb) up
Initial frame selected; you cannot go up.
(gdb) quit
My clamd.conf :
LocalSocket /var/run/clamav/clamd.sock
FixStaleSocket true
User defang
AllowSupplementaryGroups true
ScanMail true
ScanArchive true
ArchiveMaxRecursion 5
ArchiveMaxFiles 1000
ArchiveMaxFileSize 10M
ArchiveMaxCompressionRatio 250
ArchiveLimitMemoryUsage false
ArchiveBlockEncrypted false
MaxDirectoryRecursion 15
FollowDirectorySymlinks false
FollowFileSymlinks false
ReadTimeout 120
MaxThreads 12
MaxConnectionQueueLength 30
StreamMaxLength 10M
LogSyslog true
LogFacility LOG_LOCAL6
LogClean false
LogVerbose true
PidFile /var/run/clamav/clamd.pid
DatabaseDirectory /var/lib/clamav/
TemporaryDirectory /tmp
SelfCheck 1800
Foreground true
Debug true
ScanPE true
ScanOLE2 true
ScanHTML true
DetectBrokenExecutables false
MailFollowURLs false
ArchiveBlockMax false
ExitOnOOM false
LeaveTemporaryFiles false
AlgorithmicDetection true
ScanELF true
NodalCoreAcceleration false
IdleTimeout 30
MailMaxRecursion 64
PhishingSignatures false
LogFile /var/log/clamav/clamav.log
LogTime true
LogFileUnlock false
LogFileMaxSize 0
Regards,
JKB
