[Pkg-clamav-devel] Bug#684697: clamav: Scan error "bad format or broken data"

Mon Aug 13 07:30:37 UTC 2012

Package: clamav
Version: 0.97.5+dfsg-3~squeeze1
Severity: normal

clamscan error message display is "CL_EFORMAT: Bad format or broken data ERROR".

I scanned file. (display error message)  

/usr/bin/arj
/usr/bin/clang
/usr/lib/mozc/mozc_server

Thanks.

Reference:

https://bugzilla.clamav.net/show_bug.cgi?id=5252
https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1015405

-- Package-specific info:
--- configuration ---
Checking configuration files in /etc/clamav

Config file: clamd.conf
-----------------------
LogFile = "/var/log/clamav/clamav.log"
LogFileUnlock disabled
LogFileMaxSize = "4294967295"
LogTime = "yes"
LogClean disabled
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose = "yes"
ExtendedDetectionInfo = "yes"
PidFile = "/var/run/clamav/clamd.pid"
TemporaryDirectory disabled
DatabaseDirectory = "/var/lib/clamav"
OfficialDatabaseOnly disabled
LocalSocket = "/var/run/clamav/clamd.ctl"
LocalSocketGroup = "clamav"
LocalSocketMode = "666"
FixStaleSocket = "yes"
TCPSocket disabled
TCPAddr disabled
MaxConnectionQueueLength = "15"
StreamMaxLength = "4294967295"
StreamMinPort = "1024"
StreamMaxPort = "2048"
MaxThreads = "12"
ReadTimeout = "180"
CommandReadTimeout = "5"
SendBufTimeout = "200"
MaxQueue = "100"
IdleTimeout = "30"
ExcludePath disabled
MaxDirectoryRecursion = "15"
FollowDirectorySymlinks disabled
FollowFileSymlinks disabled
CrossFilesystems = "yes"
SelfCheck = "650"
VirusEvent disabled
ExitOnOOM disabled
Foreground disabled
Debug disabled
LeaveTemporaryFiles disabled
User = "clamav"
AllowSupplementaryGroups = "yes"
Bytecode = "yes"
BytecodeSecurity = "TrustSigned"
BytecodeTimeout = "60000"
BytecodeUnsigned disabled
BytecodeMode = "Auto"
DetectPUA = "yes"
ExcludePUA disabled
IncludePUA = "NetTool", "PWTool", "Spy", "Scanner", "RAT", "Packed", "P2P", "IRC", "Server", "Script", "Tool"
AlgorithmicDetection = "yes"
ScanPE = "yes"
ScanELF = "yes"
DetectBrokenExecutables = "yes"
ScanMail = "yes"
ScanPartialMessages disabled
PhishingSignatures = "yes"
PhishingScanURLs = "yes"
PhishingAlwaysBlockCloak = "yes"
PhishingAlwaysBlockSSLMismatch = "yes"
HeuristicScanPrecedence = "yes"
StructuredDataDetection disabled
StructuredMinCreditCardCount = "3"
StructuredMinSSNCount = "3"
StructuredSSNFormatNormal = "yes"
StructuredSSNFormatStripped disabled
ScanHTML = "yes"
ScanOLE2 = "yes"
OLE2BlockMacros = "yes"
ScanPDF = "yes"
ScanArchive = "yes"
ArchiveBlockEncrypted = "yes"
MaxScanSize = "104857600"
MaxFileSize = "26214400"
MaxRecursion = "16"
MaxFiles = "10000"
ClamAuth disabled
ClamukoScanOnAccess disabled
ClamukoScannerCount = "3"
ClamukoScanOnOpen disabled
ClamukoScanOnClose disabled
ClamukoScanOnExec disabled
ClamukoIncludePath disabled
ClamukoExcludePath disabled
ClamukoExcludeUID disabled
ClamukoMaxFileSize = "5242880"
DevACOnly disabled
DevACDepth disabled
DevLiblog disabled

Config file: freshclam.conf
---------------------------
LogFileMaxSize = "4294967295"
LogTime = "yes"
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose = "yes"
PidFile = "/var/run/clamav/freshclam.pid"
DatabaseDirectory = "/var/lib/clamav"
Foreground disabled
Debug disabled
AllowSupplementaryGroups disabled
UpdateLogFile = "/var/log/clamav/freshclam.log"
DatabaseOwner = "clamav"
Checks = "86"
DNSDatabaseInfo = "current.cvd.clamav.net"
DatabaseMirror = "db.jp.clamav.net"
MaxAttempts = "10"
ScriptedUpdates = "yes"
TestDatabases = "yes"
CompressLocalDatabase disabled
ExtraDatabase disabled
DatabaseCustomURL disabled
HTTPProxyServer disabled
HTTPProxyPort disabled
HTTPProxyUsername disabled
HTTPProxyPassword disabled
HTTPUserAgent disabled
NotifyClamd = "/etc/clamav/clamd.conf"
OnUpdateExecute disabled
OnErrorExecute disabled
OnOutdatedExecute disabled
LocalIPAddress disabled
ConnectTimeout = "120"
ReceiveTimeout = "120"
SubmitDetectionStats disabled
DetectionStatsCountry disabled
DetectionStatsHostID disabled
SafeBrowsing disabled
Bytecode = "yes"

Config file: clamav-milter.conf
-------------------------------
LogFile = "/var/log/clamav/clamav-milter.log"
LogFileUnlock disabled
LogFileMaxSize = "4294967295"
LogTime = "yes"
LogSyslog disabled
LogFacility = "LOG_LOCAL6"
LogVerbose = "yes"
PidFile = "/var/run/clamav/clamav-milter.pid"
TemporaryDirectory = "/var/spool/clamav-milter"
FixStaleSocket = "yes"
MaxThreads = "10"
ReadTimeout = "120"
Foreground disabled
User = "clamav"
AllowSupplementaryGroups = "yes"
MaxFileSize = "104857600"
ClamdSocket = "unix:/var/run/clamav/clamd.ctl"
MilterSocket = "/var/spool/postfix/cvrsockd/lvpmqnz.ctl"
MilterSocketGroup = "clamav"
MilterSocketMode = "666"
LocalNet disabled
OnClean = "Accept"
OnInfected = "Reject"
OnFail = "Defer"
RejectMsg disabled
AddHeader = "Replace"
ReportHostname = "UnknownHostName"
VirusAction disabled
Chroot disabled
Whitelist disabled
SkipAuthenticated disabled
LogInfected = "Full"
LogClean = "Full"

Software settings
-----------------
Version: 0.97.5
Optional features supported: MEMPOOL IPv6 FRESHCLAM_DNS_FIX AUTOIT_EA06 BZIP2 JIT

Database information
--------------------
Database directory: /var/lib/clamav
main.cvd: version 54, sigs: 1044387, built on Tue Oct 11 23:34:20 2011
bytecode.cld: version 188, sigs: 38, built on Fri Jul 13 00:48:52 2012
daily.cld: version 15244, sigs: 255720, built on Mon Aug 13 10:51:25 2012
Total number of signatures: 1300145

Platform information
--------------------
uname: Linux 2.6.32-5-686-bigmem #1 SMP Sun May 6 04:39:05 UTC 2012 i686
OS: linux-gnu, ARCH: i386, CPU: i486
Full OS version: Debian GNU/Linux 6.0.5 (squeeze)
zlib version: 1.2.3.4 (1.2.3.4), compile flags: 55
Triple: i386-pc-linux-gnu
CPU: penryn, Little-endian
platform id: 0x0a1141410404040501040405

Build information
-----------------
GNU C: 4.4.5 (4.4.5)
GNU C++: 4.4.5 (4.4.5)
CPPFLAGS: 
CFLAGS: -g -O2 -Wall
CXXFLAGS: -g -O2 -Wall
LDFLAGS: 
Configure: 'CFLAGS=-g -O2 -Wall' 'CPPFLAGS=' 'CXXFLAGS=-g -O2 -Wall' 'LDFLAGS=' '--build=i486-linux-gnu' '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--disable-clamav' '--with-dbdir=/var/lib/clamav/' '--sysconfdir=/etc/clamav' '--enable-milter' '--disable-clamuko' '--with-gnu-ld' '--enable-dns-fix' '--disable-unrar' '--libdir=/usr/lib' '--with-system-tommath' '--without-included-ltdl' 'build_alias=i486-linux-gnu'
sizeof(void*) = 4
Engine flevel: 65, dconf: 65

--- data dir ---
total 46248
-rw-r--r-- 1 clamav clamav   291840 Jul 13 18:23 bytecode.cld
-rw-r--r-- 1 clamav clamav 16304640 Aug 13 12:28 daily.cld
-rw-r--r-- 1 clamav clamav 30750647 Jul  7 08:48 main.cvd
-rw------- 1 clamav clamav      416 Aug 13 15:57 mirrors.dat

-- System Information:
Debian Release: 6.0.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686-bigmem (SMP w/2 CPU cores)
Locale: LANG=ja_JP.UTF-8, LC_CTYPE=ja_JP.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages clamav depends on:
ii  clamav-freshclam  0.97.5+dfsg-3~squeeze1 anti-virus utility for Unix - viru
ii  libc6             2.11.3-3               Embedded GNU C Library: Shared lib
ii  libclamav6        0.97.5+dfsg-3~squeeze1 anti-virus utility for Unix - libr
ii  zlib1g            1:1.2.3.4.dfsg-3       compression library - runtime

Versions of packages clamav recommends:
ii  clamav-base       0.97.5+dfsg-3~squeeze1 anti-virus utility for Unix - base

Versions of packages clamav suggests:
ii  clamav-docs       0.97.5+dfsg-3~squeeze1 anti-virus utility for Unix - docu

-- no debconf information