[Pkg-clamav-devel] Bug#599908: clamav return errors on corrupted PDF

Marco Gaiarin gaio at sv.lnf.it
Tue Oct 12 09:56:06 UTC 2010


Package: clamav
Version: 0.96.3+dfsg-2~volatile1


After upgrading to 0.96.3+dfsg-1~volatile1 (and same thing for this
0.96.3+dfsg-2~volatile1) from volatile repository on a debian lenny,
clamav start to exit with and error status (not 0 or 1) and print some
warning:

 LibClamAV Error: cli_writen: write error: Bad address
 LibClamAV Error: cli_pdf: failed to write output file
 /srv/users/OVCI/cose vecchie/Recupero pc Ale Giardina dopo furto/normale/842-98_SP500_GE.pdf: Can't write to file ERROR
 /srv/users/OVCI/cose vecchie/Recupero pc Ale Giardina dopo furto/normale/842-98_SP500_GE.pdf:Zone.Identifier: OK

Looking at the file seems to that is simply a corrupted PDF:

 gaio at lily:~$ evince 842-98_SP500_GE.pdf
 Error: PDF file is damaged - attempting to reconstruct xref table...
 Error: Top-level pages object is wrong type (null)
 Error: Couldn't read page catalog
 Error: PDF file is damaged - attempting to reconstruct xref table...
 Error: Top-level pages object is wrong type (null)
 Error: Couldn't read page catalog

This is an example of one server, but have some half-dozen servers, some i386,
some amd64, all with this trouble.

Probably something changed in libclamav in the PDF area, but i think it
is wrong to return error for a corrupted file.


I'm looking around in my server to find a .pdf that i'm sure does not
contain sensitive data, but for now i've not found it.

If the offending pdf are needed, please say me and i'll send in
private.


Thanks.

-- 
dott. Marco Gaiarin				    GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''                http://www.sv.lnf.it/
  Polo FVG  -  Via della Bontà, 7 - 33078  -  San Vito al Tagliamento (PN)
  marco.gaiarin(at)sv.lnf.it	  tel +39-0434-842711  fax +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
	   http://www.lanostrafamiglia.it/chi_siamo/5xmille.php
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)





More information about the Pkg-clamav-devel mailing list