[Pkg-clamav-devel] Bug#787249: Bug#787249: Bug#787249: clamav-daemon: clamdscan scans less than clamscan; worsened in latest release

[Sebastian Andrzej Siewior]

On Sat, May 30, 2015 at 03:06:33PM +0200, Andreas Cadhalpun wrote:
> I found the reason, why clam_cache_emax.tgz is not detected by clamdscan:
> It hits the MaxRecursion limit of 10, while it needs 17 recursions.

16 to be exact. Just verified it on Wheezy. The testsuite passes and since I
don't see a config file supplied for the testsuite I checked the source for
the default value and this is

libclamav/default.h:#define CLI_DEFAULT_MAXRECLEVEL         16

This is also what the manpage for clamd.conf claims to be the default. It also
says "setting it too high may result in severe damage to the system" failing
to describe the "why" here…

I'm fine with raising the default value in the config file to 16 since it is
clamd's default value. We also could drop all "default" values from config 
file so they would adjust on their own if upstream changes them. Not sure if
this possible with the current debconf setup. I guess in that case we could
try to create clamd.conf from the default.h. 

Other opinions?

Sebastian