[Pkg-clamav-devel] Bug#609759: clamav: clamscan crashes with error Illegal instruction (core dumped)

[Andreas Joerg]

Package: clamav
Version: 0.96.5+dfsg-1~volatile1
Severity: important


Clamscan crashes when scanning a windows file (nmap-4.10-setup.exe). 

The copied file has been on our server since 2006, but the problem
only occured recently with one of the last updates of clamav in debian lenny.

The error can be repeated.

Error message: Illegal instruction (core dumped)

I will provide the clamscan log, the clamscan debug log, a screenshot and the file nmap-4.10-setup.exe with a second 
email.

If really necessary and demanded, I will find a way to provide the coredump file core.9723, as it's size is 
uncompressesd 103M.

There has been an similar bug in October 2010 under the bug reporting number 600088. This problem has been solved by 
Toeroek Edwin and i have no way to find out if this new one might be a similar problem.

Debian is running on an old AMD K6-2 CPU here as a server for a small workgroup.


-- Package-specific info:
--- configuration ---
#Automatically Generated by clamav-base postinst
#To reconfigure clamd run #dpkg-reconfigure clamav-base
#Please read /usr/share/doc/clamav-base/README.Debian.gz for details
LocalSocket /var/run/clamav/clamd.ctl
FixStaleSocket true
LocalSocketGroup clamav
LocalSocketMode 666
# TemporaryDirectory is not set to its default /tmp here to make overriding
# the default with environment variables TMPDIR/TMP/TEMP possible
User clamav
AllowSupplementaryGroups true
ScanMail true
ScanArchive true
ArchiveBlockEncrypted false
MaxDirectoryRecursion 15
FollowDirectorySymlinks false
FollowFileSymlinks false
ReadTimeout 180
MaxThreads 12
MaxConnectionQueueLength 15
LogSyslog false
LogFacility LOG_LOCAL6
LogClean false
LogVerbose false
PidFile /var/run/clamav/clamd.pid
DatabaseDirectory /var/lib/clamav
SelfCheck 3600
Foreground false
Debug false
ScanPE true
ScanOLE2 true
ScanHTML true
DetectBrokenExecutables false
ExitOnOOM false
LeaveTemporaryFiles false
AlgorithmicDetection true
ScanELF true
IdleTimeout 30
PhishingSignatures true
PhishingScanURLs true
PhishingAlwaysBlockSSLMismatch false
PhishingAlwaysBlockCloak false
DetectPUA false
ScanPartialMessages false
HeuristicScanPrecedence false
StructuredDataDetection false
CommandReadTimeout 5
SendBufTimeout 200
MaxQueue 100
ExtendedDetectionInfo true
OLE2BlockMacros false
StreamMaxLength 10M
LogFile /var/log/clamav/clamav.log
LogTime true
LogFileUnlock false
LogFileMaxSize 0
Bytecode true
BytecodeSecurity TrustSigned
BytecodeTimeout 60000
OfficialDatabaseOnly false
CrossFilesystems true
# Automatically created by the clamav-freshclam postinst
# Comments will get lost when you reconfigure the clamav-freshclam package

DatabaseOwner clamav
UpdateLogFile /var/log/clamav/freshclam.log
LogVerbose false
LogSyslog false
LogFacility LOG_LOCAL6
LogFileMaxSize 0
LogTime no
Foreground false
Debug false
MaxAttempts 5
DatabaseDirectory /var/lib/clamav/
DNSDatabaseInfo current.cvd.clamav.net
AllowSupplementaryGroups false
PidFile /var/run/clamav/freshclam.pid
ConnectTimeout 30
ReceiveTimeout 30
TestDatabases yes
ScriptedUpdates yes
CompressLocalDatabase no
Bytecode true
DatabaseMirror db.local.clamav.net
DatabaseMirror database.clamav.net
DatabaseMirror db.fr.clamav.net

--- data dir ---
total 65428
-rw-r--r-- 1 clamav clamav   424448 Dec 18 01:01 bytecode.cld
-rw-r--r-- 1 clamav clamav  1062400 Jan  8 01:01 daily.cld
-rw-r--r-- 1 clamav clamav 65422336 Nov 15 01:02 main.cld
-rw------- 1 clamav clamav     2132 Jan  8 01:01 mirrors.dat

-- System Information:
Debian Release: 5.0.7
  APT prefers stable
  APT policy: (990, 'stable')
Architecture: i386 (i586)

Kernel: Linux 2.6.26-2-486
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages clamav depends on:
ii  clamav-freshclam 0.96.5+dfsg-1~volatile1 anti-virus utility for Unix - viru
ii  libc6            2.7-18lenny7            GNU C Library: Shared libraries
ii  libclamav6       0.96.5+dfsg-1~volatile1 anti-virus utility for Unix - libr
ii  zlib1g           1:1.2.3.3.dfsg-12       compression library - runtime

Versions of packages clamav recommends:
ii  clamav-base      0.96.5+dfsg-1~volatile1 anti-virus utility for Unix - base

Versions of packages clamav suggests:
ii  clamav-docs      0.96.5+dfsg-1~volatile1 anti-virus utility for Unix - docu

-- no debconf information