[Pkg-clamav-devel] Bug#602840: clamav-daemon: StreamMaxLength documentation wrong

[Steven Falken]

Hmmm,
strange; here some output:
-----------------------------------------------------------------
cat /etc/clamav/clamd.conf
#Automatically Generated by clamav-base postinst
#To reconfigure clamd run #dpkg-reconfigure clamav-base
#Please read /usr/share/doc/clamav-base/README.Debian.gz for details
TCPSocket 3310
# TemporaryDirectory is not set to its default /tmp here to make overriding
# the default with environment variables TMPDIR/TMP/TEMP possible
User clamav
AllowSupplementaryGroups true
ScanMail false
ScanArchive true
ArchiveBlockEncrypted false
MaxDirectoryRecursion 15
FollowDirectorySymlinks false
FollowFileSymlinks true
ReadTimeout 180
MaxThreads 12
MaxConnectionQueueLength 15
LogSyslog false
LogFacility LOG_LOCAL6
LogClean false
LogVerbose false
PidFile /var/run/clamav/clamd.pid
DatabaseDirectory /var/lib/clamav
SelfCheck 3600
Foreground false
Debug false
ScanPE true
ScanOLE2 true
ScanHTML true
DetectBrokenExecutables false
ExitOnOOM false
LeaveTemporaryFiles false
AlgorithmicDetection true
ScanELF true
IdleTimeout 30
PhishingSignatures true
PhishingScanURLs true
PhishingAlwaysBlockSSLMismatch false
PhishingAlwaysBlockCloak false
DetectPUA false
ScanPartialMessages false
HeuristicScanPrecedence false
StructuredDataDetection false
CommandReadTimeout 5
SendBufTimeout 200
MaxQueue 100
ExtendedDetectionInfo true
StreamMaxLength 0
LogFile /var/log/clamav/clamav.log
LogTime true
LogFileUnlock false
LogFileMaxSize 0
Bytecode true
BytecodeSecurity TrustSigned
BytecodeTimeout 60000
OfficialDatabaseOnly false
CrossFilesystems true
debian:~# wget 'http://www.eicar.org/download/eicar.com'
--2010-11-09 17:23:56--  http://www.eicar.org/download/eicar.com
Resolving www.eicar.org... 188.40.238.250
Connecting to www.eicar.org|188.40.238.250|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 68 [application/x-msdos-program]
Saving to: “eicar.com”

100%[=============================================================================================================================================================================================================================================>]
68          --.-K/s   in 0s

2010-11-09 17:23:57 (11.9 MB/s) - “eicar.com” saved [68/68]

debian:~# clamdscan eicar.com
/root/eicar.com: Eicar-Test-Signature FOUND

----------- SCAN SUMMARY -----------
Infected files: 1
Time: 0.000 sec (0 m 0 s)
debian:~# clamdscan eicar.com --stream
/root/eicar.com: OK

----------- SCAN SUMMARY -----------
Infected files: 0
Time: 0.000 sec (0 m 0 s)
------------------------------------------------------------------------------------

2010/11/9 Teodor MICU <mteodor at gmail.com>:
> Hi,
>
> 2010/11/8 btwotch <btwotch at derdon.org>:
>> Package: clamav-daemon
>> Severity: minor
>>
>> You write:
>> +Template: clamav-base/StreamMaxLength
>> +Type: string
>> +Default: 0
>> +_Description: Maximum stream length (unit Mb) allowed:
>> + You can set a limit on the stream length that can be scanned.
>> + .
>> + Entering '0' will disable this limit.
>>
>>
>> BUT: If you set it to 0 then clamdscan (--stream) won't find any
>> viruses; just try that with eicar
>
> No, it works here as intended for a long time. I would tag this bug
> with "moreinfo unreproducible" but I'm not the maintainer.
>
> Thanks
>
> ------
> $ grep StreamMaxLength /etc/clamav/clamd.conf
> StreamMaxLength 0
>
> $ clamdscan eicar_com.zip
> /tmp/eicar_com.zip: Eicar-Test-Signature FOUND
>
> ----------- SCAN SUMMARY -----------
> Infected files: 1
> Time: 0.001 sec (0 m 0 s)
>