[Pkg-clamav-devel] Bug#542954: libclamunrar: No detection with big rar-Files without compression

[nutzteil at web.de]

> Could it have something to do with  --max-filesize & --max-scansize ?

That was ist:
-------------------------------------------------------------------------
$ du *
52864   sp3.m0.rar
23624   sp3.m1.rar
21688   sp3.m2.rar
20152   sp3.m3.norm.rar
20108   sp3.m4.rar
20088   sp3.m5.rar

$ file *
sp3.m0.rar:      RAR archive data, v14, os: Unix
sp3.m1.rar:      RAR archive data, v1d, os: Unix
sp3.m2.rar:      RAR archive data, v1d, os: Unix
sp3.m3.norm.rar: RAR archive data, v1d, os: Unix
sp3.m4.rar:      RAR archive data, v1d, os: Unix
sp3.m5.rar:      RAR archive data, v1d, os: Unix


$ clamscan *
sp3.m0.rar: OK
sp3.m1.rar: Eicar-Test-Signature FOUND
sp3.m2.rar: Eicar-Test-Signature FOUND
sp3.m3.norm.rar: Eicar-Test-Signature FOUND
sp3.m4.rar: Eicar-Test-Signature FOUND
sp3.m5.rar: Eicar-Test-Signature FOUND

----------- SCAN SUMMARY -----------
Known viruses: 3355606
Engine version: 0.98.1
Scanned directories: 0
Scanned files: 6
Infected files: 5
Data scanned: 0.00 MB
Data read: 154.79 MB (ratio 0.00:1)
Time: 7.183 sec (0 m 7 s)


$ clamscan * --max-filesize=100M
sp3.m0.rar: Eicar-Test-Signature FOUND
sp3.m1.rar: Eicar-Test-Signature FOUND
sp3.m2.rar: Eicar-Test-Signature FOUND
sp3.m3.norm.rar: Eicar-Test-Signature FOUND
sp3.m4.rar: Eicar-Test-Signature FOUND
sp3.m5.rar: Eicar-Test-Signature FOUND

----------- SCAN SUMMARY -----------
Known viruses: 3355606
Engine version: 0.98.1
Scanned directories: 0
Scanned files: 6
Infected files: 6
Data scanned: 0.00 MB
Data read: 154.79 MB (ratio 0.00:1)
Time: 7.379 sec (0 m 7 s)
-------------------------------------------------------------------------
Thanks!