[Pkg-clamav-devel] Bug#525483: clamav in lenny segfaults after freshclam update

[Brett Dikeman]

Package: clamav-daemon
Version: 0.94.dfsg.2-1lenny2
Severity: grave

Marked as grave severity because this bug causes the host in question
to stop delivering most email, and it is extremely reproducible (more
than once per day, in some cases.)

Freshclam periodically checks for updated definitions and places them
in /var/lib/clamav.  The clamav daemon detects the new/changed files,
and reloads itself.  After a recent update with no configuration
changes, our mail host has been experiencing regular (several times a
week) failures where the clamd process segfaults.  This is always
preceded by an update from freshclam.

The host in question is fully up-to-date with lenny/stable, and
running kernel 2.6.26-2-686.

Sample log entries:

Apr 24 06:38:31 terminator clamd[2559]: SelfCheck: Database
modification detected. Forcing reload.
Apr 24 06:38:31 terminator clamd[2559]: Reading databases from /var/lib/clamav
Apr 24 06:38:32 terminator kernel: [175278.446368] clamd[24546]:
segfault at 6e754a2a ip 4b9717e2 sp b6b51280 error 4 in
libc-2.7.so[4b901000+155000]

syslog.2.gz:Apr 21 12:31:18 terminator kernel: [ 7719.269164]
clamd[11059]: segfault at 4 ip 48a25044 sp b7b272a0 error 4 in
libclamav.so.5.0.4[48a1a000+a3000]
syslog.2.gz:Apr 21 13:15:06 terminator last message repeated 2 times

syslog.2.gz:Apr 21 23:58:52 terminator clamd[19217]: SelfCheck:
Database modification detected. Forcing reload.
syslog.2.gz:Apr 21 23:58:52 terminator clamd[19217]: Reading databases
from /var/lib/clamav
syslog.2.gz:Apr 21 23:58:53 terminator kernel: [51129.427615]
clamd[19633]: segfault at 4 ip 48a25044 sp b735c2a0 error 4 in
libclamav.so.5.0.4[48a1a000+a3000]

syslog.3.gz:Apr 21 04:53:08 terminator clamd[13762]: SelfCheck:
Database modification detected. Forcing reload.
syslog.3.gz:Apr 21 04:53:08 terminator clamd[13762]: Reading databases
from /var/lib/clamav
syslog.3.gz:Apr 21 04:53:08 terminator kernel: [323277.490836]
clamd[15458]: segfault at 4 ip 48a25044 sp b5eff2a0 error 4 in
libclamav.so.5.0.4[48a1a000+a3000]

syslog.4.gz:Apr 20 05:18:05 terminator clamd[2555]: SelfCheck:
Database modification detected. Forcing reload.
syslog.4.gz:Apr 20 05:18:05 terminator clamd[2555]: Reading databases
from /var/lib/clamav
syslog.4.gz:Apr 20 05:18:06 terminator kernel: [233251.870236]
clamd[32635]: segfault at 7c ip b7f41044 sp b59ff2a0 error 4 in
libclamav.so.5.0.4[b7f36000+a3000]