zlib-1.2.8-2 breaks clamav [attn Yaakov]

Marco Atzeri marco.atzeri@gmail.com
Wed Nov 19 22:32:00 GMT 2014


On 11/19/2014 10:26 PM, Marco Atzeri wrote:
>
>
> On 11/2/2014 1:31 AM, Mike Bonnet wrote:
>> Hi.  I just found out that the zlib-1.2.8-2 breaks clamav.  A log of the
>> output of the "sigtool" commmand from clamav is attached.  It's using
>> gzread() to read the compressed signature databases, and the format of
>> the data returned has apparently changed between zlib 1.2.8-1 and
>> 1.2.8-2.  This should be fixed ASAP.
>>
>> Thanks,
>> Mike
>>
>
> just tested 64bit and
>
> $ sigtool --debug --info main.cvd
> File: main.cvd
> Build time: 17 Sep 2013 10:57 -0400
> Version: 55
> Signatures: 2424225
> Functionality level: 60
> Builder: neo
> MD5: 6c03be24ae2171478e0de317e3661e36
> Digital signature:
> U44YuTP7vNpU3sZVfI54S78bkaJluqmkJCFX8skaNcNUPoTLnTxXtSuOwWufwn+M+21kGR0CO7hvU3K+44YuOA92rMNNNmKOJOnli+lGv972THU2dkCL+491C6Y4Q+169wIW+Zp/TyH93yt75qGv8vanBM1QdyXk8fnDvsOlC4
>
> LibClamAV debug: Initialized 0.97.8 engine
> LibClamAV debug: in cli_cvdload()
> LibClamAV debug: MD5(.tar.gz) = 6c03be24ae2171478e0de317e3661e36
> LibClamAV debug: cli_versig: Decoded signature:
> 6c03be24ae2171478e0de317e3661e36
> LibClamAV debug: cli_versig: Digital signature is correct.
> LibClamAV debug: in cli_tgzload()
> LibClamAV debug: main.info loaded
> LibClamAV debug: in cli_tgzload()
> LibClamAV debug: Cleaning up phishcheck
> LibClamAV debug: Phishcheck cleaned up
> Verification OK.
>
> it works as expected.

the issue seems only on 32 bit

on 32 bit database

$  sigtool --debug --info main.cvd
File: main.cvd
Build time: 11 Oct 2011 10:34 -0400
Version: 54
Signatures: 1044387
Functionality level: 60
Builder: sven
MD5: ef015484e18b983ddf08425e2dad6a3f
Digital signature: 
WOgEPNPkB4L0W5K9p1Wc+TE9DQOctxVBHGoR4pTqupMF6kJEVukelj0SPR6jTyczszfodstR+HPHG8mHjkvEtLzmmAz8WflU8vlf/XYW8Gjc6QuEetMN7yNy4JditkLVWCb/nf0gD943JTQ6lI+t7IoSqEk04jQncQ7nwNLIcZd
LibClamAV debug: Initialized 0.97.8 engine
LibClamAV debug: in cli_cvdload()
LibClamAV debug: MD5(.tar.gz) = ef015484e18b983ddf08425e2dad6a3f
LibClamAV debug: cli_versig: Decoded signature: 
ef015484e18b983ddf08425e2dad6a3f
LibClamAV debug: cli_versig: Digital signature is correct.
LibClamAV debug: in cli_tgzload()
LibClamAV debug: main.info loaded
LibClamAV debug: in cli_tgzload()
LibClamAV Error: cli_tgzload: Unknown type flag 'd'
LibClamAV debug: Cleaning up phishcheck
LibClamAV debug: Phishcheck cleaned up
ERROR: cvdinfo: Verification: Malformed database

on 64bit database

$  sigtool --debug --info main.cvd
File: main.cvd
Build time: 17 Sep 2013 10:57 -0400
Version: 55
Signatures: 2424225
Functionality level: 60
Builder: neo
MD5: 6c03be24ae2171478e0de317e3661e36
Digital signature: 
U44YuTP7vNpU3sZVfI54S78bkaJluqmkJCFX8skaNcNUPoTLnTxXtSuOwWufwn+M+21kGR0CO7hvU3K+44YuOA92rMNNNmKOJOnli+lGv972THU2dkCL+491C6Y4Q+169wIW+Zp/TyH93yt75qGv8vanBM1QdyXk8fnDvsOlC4
LibClamAV debug: Initialized 0.97.8 engine
LibClamAV debug: in cli_cvdload()
LibClamAV debug: MD5(.tar.gz) = 6c03be24ae2171478e0de317e3661e36
LibClamAV debug: cli_versig: Decoded signature: 
6c03be24ae2171478e0de317e3661e36
LibClamAV debug: cli_versig: Digital signature is correct.
LibClamAV debug: in cli_tgzload()
LibClamAV debug: main.info loaded
LibClamAV debug: in cli_tgzload()
LibClamAV Error: cli_tgzload: Unknown type flag 'b'
LibClamAV debug: Cleaning up phishcheck
LibClamAV debug: Phishcheck cleaned up
ERROR: cvdinfo: Verification: Malformed database


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple



More information about the Cygwin mailing list