[Pkg-clamav-devel] Bug#599908: Bug#599908: clamav return errors on corrupted PDF

Marco Gaiarin gaio at sv.lnf.it
Wed Oct 13 16:42:31 UTC 2010


Mandi! Michael Tautschnig
  In chel di` si favelave...

> Thanks for reporting this issue; from your report I guess that this is perfectly
> reproducible and you can probably just use clamscan to reproduce the problem.
> Could you do a clamscan --debug YOUR_FILE and send the output? I think this
> should not disclose and private information.

Really, really, strange.

I've buld up a script that weekly scan most of my disk space with
clamav, and move on quarantine infected files.

The script lastly execute:

 nice -20 clamscan --quiet --infected --stdout --no-summary --recursive \
	--max-filesize=50M --max-scansize=250M --exclude=/.inbox
	--exclude-dir=/srv/users/.cestino --exclude-dir=/srv/media/.cestino
	--log=/tmp/sysscan.log.HOOPjNpC --max-dir-recursion=1000 /home
	/srv/users /srv/media

and check return code, if different from 0 or 1 bump an error.


But if i try to scan manually the file:

 mouse:~# clamscan --stdout --no-summary --recursive --max-filesize=50M --max-scansize=250M "/srv/users/OVCI/cose vecchie/Recupero pc Ale Giardina dopo furto/normale/842-98_SP500_GE.pdf"; echo $?
 /srv/users/OVCI/cose vecchie/Recupero pc Ale Giardina dopo furto/normale/842-98_SP500_GE.pdf: OK
 0

work well. Boh.


Anyway i attach the ''debug run'', hoping will be useful.

-- 
dott. Marco Gaiarin				    GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''                http://www.sv.lnf.it/
  Polo FVG  -  Via della Bontà, 7 - 33078  -  San Vito al Tagliamento (PN)
  marco.gaiarin(at)sv.lnf.it	  tel +39-0434-842711  fax +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
	   http://www.lanostrafamiglia.it/chi_siamo/5xmille.php
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: clamdebug.log.gz
Type: application/octet-stream
Size: 5638 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20101013/e63f29b3/attachment.obj>


More information about the Pkg-clamav-devel mailing list