[Pkg-clamav-devel] Bug#515798: Bug#515798: Bug#515798: clamav: clamdscan fails to connect to clamd

[Mikołaj Menke]

Dnia 18.02.2009 23:59 użytkownik Stephen Gran napisał :
> Assuming this is not a local install, can you install clamav-dbg,
> attach gdb to clamd, and send the backtrace you get when it becomes
> unavailable?  If you're not sure how to do these things, feel free to
> ask.

I have done it following this:
http://wiki.debian.org/HowToGetABacktrace

##############################################################
menek:~# gdb clamd
GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
<http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu"...
(gdb) set pagination 0
(gdb) run
Starting program: /usr/sbin/clamd
Failed to read a valid object file image from memory.
[Thread debugging using libthread_db enabled]
[New Thread 0xb7cc48c0 (LWP 488)]
##############################################################

Here comes a lot of clamd messages during start.

##############################################################
LibClamAV debug: Eicar-Test-Signature found in descriptor 10
/usr/local/share/eicar/eicar.com: Eicar-Test-Signature FOUND
Found Eicar-Test-Signature in %f
LibClamAV debug: Eicar-Test-Signature found in descriptor 10
/usr/local/share/eicar/eicar.com: Eicar-Test-Signature FOUND
Found Eicar-Test-Signature in %f
LibClamAV debug: Eicar-Test-Signature found in descriptor 10
/usr/local/share/eicar/eicar.com: Eicar-Test-Signature FOUND
Found Eicar-Test-Signature in %f
LibClamAV debug: Eicar-Test-Signature found in descriptor 10
/usr/local/share/eicar/eicar.com: Eicar-Test-Signature FOUND
Found Eicar-Test-Signature in %f
##############################################################

CTRL+C here.

##############################################################
Program received signal SIGINT, Interrupt.
[Switching to Thread 0xb7cc48c0 (LWP 488)]
0xb7f6b410 in ?? ()
(gdb) bt
#0  0xb7f6b410 in ?? ()
#1  0xbff38498 in ?? ()
#2  0x00000007 in ?? ()
#3  0xbff37ea0 in ?? ()
#4  0xb7e2d2c8 in accept () from /lib/i686/cmov/libpthread.so.0
#5  0x0804f76c in acceptloop_th (socketds=0xbff38554, nsockets=1,
engine=0x8058f48, dboptions=10, copt=0x80575d0) at server-th.c:593
#6  0x0804d76e in main (argc=7, argv=0x0) at clamd.c:479
##############################################################

This was done during testing:

##############################################################
miki at menek(12:03:19)~$clamdscan /usr/local/share/eicar/eicar.com
/usr/local/share/eicar/eicar.com: Eicar-Test-Signature FOUND

----------- SCAN SUMMARY -----------
Infected files: 1
Time: 0.009 sec (0 m 0 s)
miki at menek(12:05:58)~$clamdscan /usr/local/share/eicar/eicar.com
/usr/local/share/eicar/eicar.com: Eicar-Test-Signature FOUND

----------- SCAN SUMMARY -----------
Infected files: 1
Time: 0.009 sec (0 m 0 s)
miki at menek(12:06:05)~$clamdscan /usr/local/share/eicar/eicar.com
/usr/local/share/eicar/eicar.com: Eicar-Test-Signature FOUND

----------- SCAN SUMMARY -----------
Infected files: 1
Time: 0.009 sec (0 m 0 s)
miki at menek(12:06:06)~$clamdscan /usr/local/share/eicar/eicar.com
/usr/local/share/eicar/eicar.com: Eicar-Test-Signature FOUND

----------- SCAN SUMMARY -----------
Infected files: 1
Time: 0.009 sec (0 m 0 s)
miki at menek(12:06:08)~$clamdscan /usr/local/share/eicar/eicar.com
miki at menek(12:06:08)~$clamdscan /usr/local/share/eicar/eicar.com
miki at menek(12:06:10)~$clamdscan /usr/local/share/eicar/eicar.com
miki at menek(12:06:10)~$clamdscan /usr/local/share/eicar/eicar.com
miki at menek(12:06:11)~$clamdscan /usr/local/share/eicar/eicar.com
##############################################################

As you can see for the first four tests it was OK, but then the problem
occurs.
That is all I could do for now. If you need more information just let me
know and give more instructions please.

-- 
http://miki.menek.one.pl miki at menek.one.pl
Gadu-gadu: 2128279 Mobile: +48607345846