HTTP Anti-Virus Proxy :: View topic

I just noticed that 0.93rc1 and mandatory locking does not work together.

ClamAV has silently added requirement for mmap-function on zip files, so they will not work. You get an "Unable to allocate memory" error.

I'll enter a bug report there and we'll see how it goes.

Until then, for full functionality, use 0.92.1.

Precisation #1: ClamAV is open source. The codebase is available to everyone via svn, nothing is hidden and no commit is "silent". Additionally several requests for testing have been posted on out MLs before the 0.93 branching and the rc1 release.

Precisation #2: The unzip module is not the only piece of code affected. Many others are and have been for a long time.

Thus there has been a workaround for PDF and BinHex since Oct/2006, to disable partial locking for those formats. I can do the same for zip+0.93, at the expense of increasing scanning time for that format also.

The point is that ,if the zipfile is mandlocked, when lseek'ing to EOF, read() would still block untill the whole file is received.

Author:	Severus [ 08 Mar 2008 00:09 ]
Post subject:	ClamAV 0.93RC1
Hi, it seems clamav 0.93 will cause some issues with havp while compiling. Are there any experiencies about? Regards Severus

Author:	hege [ 14 Mar 2008 16:21 ]
Post subject:
Support added, have a try: http://havp.hege.li/download/havp-0.88pre.tar.gz Also new option CLAMMAXSCANSIZE

Author:	Severus [ 14 Mar 2008 20:57 ]
Post subject:
Hi hege, thnx, I'll do Regards Severus

Author:	hege [ 27 Mar 2008 01:15 ]
Post subject:
I just noticed that 0.93rc1 and mandatory locking does not work together. ClamAV has silently added requirement for mmap-function on zip files, so they will not work. You get an "Unable to allocate memory" error. I'll enter a bug report there and we'll see how it goes. Until then, for full functionality, use 0.92.1.

Author:	aCaB [ 27 Mar 2008 05:28 ]
Post subject:
Hi, this is aCaB from ClamAV. hege wrote: I just noticed that 0.93rc1 and mandatory locking does not work together. ClamAV has silently added requirement for mmap-function on zip files, so they will not work. You get an "Unable to allocate memory" error. Precisation #1: ClamAV is open source. The codebase is available to everyone via svn, nothing is hidden and no commit is "silent". Additionally several requests for testing have been posted on out MLs before the 0.93 branching and the rc1 release. Precisation #2: The unzip module is not the only piece of code affected. Many others are and have been for a long time. hege wrote: I'll enter a bug report there and we'll see how it goes. Until then, for full functionality, use 0.92.1. For everyone's reference here's the bug report. That said, I like HAVP and I'd like to get this problem solved or worked around. Feel free to mail me - acab.at.clamav.point.net

HTTP Anti-Virus Proxy http://havp.hege.li/forum/

ClamAV 0.93RC1 http://havp.hege.li/forum/viewtopic.php?f=3&t=340	Page 1 of 2

Author:	hege [ 27 Mar 2008 11:20 ]
Post subject:
aCaB wrote: Precisation #1: ClamAV is open source. The codebase is available to everyone via svn, nothing is hidden and no commit is "silent". Additionally several requests for testing have been posted on out MLs before the 0.93 branching and the rc1 release. Silent as in no mention in ChangeLog (except of "improved" unzip), which would have been nice. Not to blame anyone, maybe you just understand our situation. Quote: Precisation #2: The unzip module is not the only piece of code affected. Many others are and have been for a long time. Thus there has been a workaround for PDF and BinHex since Oct/2006, to disable partial locking for those formats. I can do the same for zip+0.93, at the expense of increasing scanning time for that format also.

Author:	aCaB [ 27 Mar 2008 12:55 ]
Post subject:
hege wrote: Thus there has been a workaround for PDF and BinHex since Oct/2006, to disable partial locking for those formats. I can do the same for zip+0.93, at the expense of increasing scanning time for that format also. Well, not really... The zip format is detected via the first 4 bytes in the file. Sure these are available after the first chunck of data is received from the remote peer (or next proxy in chain). Then the code needs to lseek to EOF and search backwards for the "central zip header". We could discuss and probably agree about how braindead the zip file format is... but that's it. The point is that ,if the zipfile is mandlocked, when lseek'ing to EOF, read() would still block untill the whole file is received.

Author:	hege [ 27 Mar 2008 12:59 ]
Post subject:
aCaB wrote: The point is that ,if the zipfile is mandlocked, when lseek'ing to EOF, read() would still block untill the whole file is received. It doesn't block. HAVP blindly gets last 131072 bytes of a big zip file first (using Range: request), writes it to tempfile, then unlocks that last 131072 bytes. ClamAV can then read the header and scan on the fly as the body is received from network and unlocked gradually.

Author:	hege [ 15 Apr 2008 10:27 ]
Post subject:	Re: ClamAV 0.93RC1
HAVP 0.88 released with workaround (DISABLELOCKINGFOR option).

Author:	aCaB [ 11 Mar 2010 03:53 ]
Post subject:	Re: ClamAV 0.93RC1
Sorry for resurrecting a dead thread. It is just to report that ClamAV 0.96-rc1 has been released today. It took some time but we eventually moved away from file based mmap. Most of the code now makes use of pread().

Author:	hege [ 12 Mar 2010 13:16 ]
Post subject:	Re: ClamAV 0.93RC1
Seems to work ok so far and no changes in API that I see.. I'll release new HAVP when official version arrives with ClamAV removed from DISABLELOCKINGFOR defaults.

Author:	karesmakro [ 01 Apr 2010 09:00 ]
Post subject:	Re: ClamAV 0.93RC1
Hello, clamav 0.96 is out now. My question is, it is planned now to publish a new version of havp? At this moment, havp is running as well with new clamav release. regards

Author:	hege [ 01 Apr 2010 12:14 ]
Post subject:	Re: ClamAV 0.93RC1
Please try out http://havp.hege.li/download/havp-0.92pre1.tar.gz And all the new options if possible. - Add SCANMIME and SKIPMIME options - Add TIMEFORMAT option - Add VIRUSLOG option - Add PARENTUSER/PARENTPASSWORD (thanks to James Brotchie) - DISABLELOCKINGFOR default has changed in favor of ClamAV 0.96, it only contains AVG:ALL now

Author:	karesmakro [ 01 Apr 2010 15:02 ]
Post subject:	Re: ClamAV 0.93RC1
Hi! My compliment, really fast reaction Your version is running well on a standard system (Debian Lenny) I have 8 different environments for testing, but only on evening time, to try. A second system I tried (copfilter), I have a problem to start havp, because havp is ignoring logging path from config file havp.config. I had to create a standard entry on /var/log/havp, to get havp working!! Otherwise I get an error, like wrong permissions to my configured log path. This is the only issue, I can find now. New results on evening! regards one update: thank you for supporting now mime types and proxy authentication! This are really important features and I'm pleasured!

Author:	karesmakro [ 01 Apr 2010 22:07 ]
Post subject:	Re: ClamAV 0.93RC1
Update! I detected, what was my issue! I forgot to set the VIRUSLOG path. I set this option and all went o.k. Running stable and without any problems! (on 6 differnt systems now) good and nice work! regards

Page 1 of 2	All times are UTC + 2 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/