[Pkg-clamav-devel] Bug#747425: clamscan: scancws: Error decompressing SWF file

[Andreas Cadhalpun]

Control: submitter -1 Karl Schmidt <karl at xtronics.com>

Hi Karl,

On 04.05.2014 21:31, Karl Schmidt wrote:
> I'm getting
>
> # # clamscan -r . > clamav.log 2>&1
> # cat clamav.log
> ./note_t2-v2conversion.pdf: OK
> ./V2K_S2E_S2T_Profibus_Module_User_Manual_2621.pdf: OK
> LibClamAV info: scancws: Error decompressing SWF file
> ./V2k_bro_s2t_s2e_opt.pdf: OK
> ./V2k_windows_moduals.pdf: OK
> <snip >
>
> I was assuming that it is the PDF one line above that is the problem -
> but that seems to not be the case (all the files end up with a line
> listing them as "ok".) It seems it would be important for the error line
> to point to the file..
>
> It was a process of elimination to determine which file caused the problem.
>
> # flasm -x V2000flyer.pdf
> Input file doesn't appear to be an SWF file..

I thought this error would come from scanning a SWF file.
But as it's a pdf file, it might embed a SWF file. Do you know if it 
does that? (flasm only works with SWF files directly.)

Maybe clamav detects some part of some PDF files wrongly as SWF?
Or maybe the embedded SWF files is actually broken?
I don't know how to check that.

Are all files that give this warning PDF files or is there some SWF file 
among them?

> I've attached the file.

Thanks. I could reproduce the warning with this file.
So I have created a new bug (#747425) to track this problem.

Best regards,
Andreas