[Pkg-clamav-devel] Bug#824196: Bug#824196: clamav-daemon: clamd crashes daily

[Sebastian Andrzej Siewior]

On 2016-05-23 09:02:34 [-0600], Will Aoki wrote:
> ERROR: accept() failed:
> LibClamAV Error: cli_tgzload: Can't duplicate descriptor 468
> LibClamAV Error: Can't load /var/lib/clamav/bytecode.cld: Can't duplicate file descriptor
> LibClamAV Error: cli_loaddbdir(): error loading database /var/lib/clamav/bytecode.cld
> ERROR: reload db failed: Can't duplicate file descriptor
> Terminating because of a fatal error.
> ERROR: Can't unlink the pid file /var//run/clamd.pid

This makes sense. The "accept()" error (which isn't complete for some
reason) is just something that gets logged. The reason why clamd
terminates is the failure during reloading of the database which is due
to the failure of dup(). And this in turn is probably (as you said in
your previous email) because the process runs out of file descriptors.

I get:
|$ ls -1 /proc/$(pidof clamd)/fd/ |wc -l
|9

After "clamdscan /usr/share/clamav-testfiles/*" (from the
clamav-testfiles package) it remains at nine. I bet that you have one
test file which keeps the number of descriptors growing. Could you
please figure out which one it is?

> and returns 1.

Sebastian