This one time, at band camp, Micha Lenk said:
> Hello Stephen,
> 
> clamscan fails to scan with a ZIP file created with a really old
> PKZIP, which identifies itself as:
> 
> PKZIP (R)   FAST!   Create/Update Utility   Version 1.2   05-10-90
> Copr. 1989-1990 PKWARE Inc.  All Rights Reserved.  PKZIP/h for help
> PKZIP Reg. U.S. Pat. and Tm. Off.
> 
> The output of clamscan with a ZIP file generated by this PKZIP is:
> 
> $ clamscan test.zip test.zip: Zip module failure 0, compressed: 376,
> normal: 504, method: 6, ratio: 1 (max: 250) LibClamAV debug: Zip:
> Incorrectly decompressed (0 != 504)
> 
> It is no problem to unzip this file with the 'unzip' package, so this
> should considered as a clamav bug or perhaps a zlib bug.
> 
> I attached the failing zip file for reference...

This looks like a failure in zlib's inflate() routine.  the miniunzip
utility (in zlib-bin) also fails to unpack the zip file.

Run under gdb, it becomes apparent that inflate is returning -3, which
is apparently used to mean Z_DATA_ERROR.  

cc'ing the zlib maintainer on this.  broonie, can you see what the problem
is?
-- 
 -----------------------------------------------------------------
|   ,''`.                                            Stephen Gran |
|  : :' :                                        [EMAIL PROTECTED] |
|  `. `'                        Debian user, admin, and developer |
|    `-                                     http://www.debian.org |
 -----------------------------------------------------------------

Attachment: signature.asc
Description: Digital signature

Reply via email to