gmane.comp.security.virus.clamav.devel

Test suit cannot fork process for debugging withclamav.

chatsiri — 2012-05-10T07:20:33

Hello All,

       I try to debugging test suite of  Clamav. Test suite writes for 
fork process in order to debug code. First step, Program started by 
libtools that declare the gdb debug tool. After run programs. It's 
represents error as below. I  debug "fork_setup()" function in the main 
function but show error SIGSEGV. It's show segmentation fault. How i can 
debug a source code in another way?  That's is source code of test suite 
for fork process[https://gist.github.com/2651305].

$ ./libtool --mode=execute gdb -q 
~/Clamav/unit_tests_checkfs/tests/.libs/check_cli_load
Reading symbols from 
/san01/home/chatsiri/workspacecpp/Clamav/unit_tests_checkfs/tests/.libs/check_cli_load...done.
(gdb) b 179
Breakpoint 1 at 0x401147: file check_cli_load.c, line 179.
(gdb) run check_cli_load
Starting program: 
/san01/home/chatsiri/workspacecpp/Clamav/unit_tests_checkfs/tests/.libs/check_cli_load 
check_cli_load
[Thread debugging using libthread_db enabled]

Breakpoint 1, main () at check_cli_load.c:180
warning: So

Re: Why Clamav programs add certificate type x509?

aCaB — 2012-05-01T08:26:51

Hello chatsiri,
I didn't understand much in your email.

At any rate crtmgr is part of a digital signature verification scheme
which is available on master and whose main application is to avoid
false positives on digitally signed files.

HtH,

Why Clamav programs add certificate type x509?

chatsiri — 2012-05-01T05:09:54

Hello All,

     I debug crtmgr for monitoring scan virus step, but found clamav add 
certificate to programs. Why programs add certificate type x509?. My 
view, It's identify signature from database extension .cvd.  I copy 
logging to e-mail. You should see below.

LibClamAV debug: crtmgr_add: added cert 
s:29dbd4b88f785f33419287e1af4650e177a46fc0 
i:cacacacacacacacacacacacacacacacacacacaca 
n:C95C599EF21B8A0114B410DF0440DBE357AF6A45408F840C0BD133D9D911CFEE02581F25F72AA84405AAEC031F787F9E93B99A00AA237DD6AC85A26345C77227CCF44CC67571D239EF4F42F075DF0A90C68E206F980FF8AC235F702936A4C986E7B19A20CB53A585E73DBE7D9AFE244533DC7615ED0FA271644C652E816845A7 
e:10001 0->2147483647 cert code

Thank you,
Chatsiri Rattana
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: [PATCH] Added a autogen.sh for buildstrap the build system

Török Edwin — 2012-04-16T17:17:44

autoconf version is checked by AC_PREREQ, and automake version by AM_INIT_AUTOMAKE,
so checking those in autogen.sh is redundant.
All that remains to be checked is the libtool version.

Or just run the build-system regeneration on an up-to-date Debian testing/unstable, like we do :)

Best regards,
--Edwin
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: [PATCH] Added a autogen.sh for buildstrap the build system

Elia Pinto — 2012-04-16T16:18:46

2012/4/16 Török Edwin <edwin< at >clamav.net>:
Yes, but not check the minimum version of the gnu buildtool used
by a project, giving strange error if not, and, in the clamav case,
don't check and give bad error if
libtool libtdl tool or the static library are missing.

Best Regards

Elia
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

[PATCH] Add an autogen.sh for buildstrapping thebuild system

Elia Pinto — 2012-04-16T16:15:02

This patch add a simple autogen.sh for buildstrapping
the gnu build system. It also check the minimun version
of the gnu buildtool necessary for clamav.

Signed-off-by: Elia Pinto <gitter.spiros< at >gmail.com>
---
 Makefile.am   |    2 +-
 README-prereq |   10 +++
 autogen.sh    |  200 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 211 insertions(+), 1 deletions(-)
 create mode 100644 README-prereq
 create mode 100755 autogen.sh

diff --git a/Makefile.am b/Makefile.am
index 3970e2e..b3c02a5 100644
--- a/Makefile.am
+++ b/Makefile.am
< at >< at > -19,7 +19,7 < at >< at >
 ACLOCAL_AMFLAGS=-I m4
 
 SUBDIRS = libltdl libclamav clamscan clamd clamdscan freshclam sigtool clamconf database docs etc clamav-milter test clamdtop clambc unit_tests
-EXTRA_DIST = FAQ examples BUGS shared libclamav.pc.in libclamunrar_iface/Makefile.am libclamunrar_iface/Makefile.in UPGRADE COPYING.bzip2 COPYING.lzma COPYING.unrar COPYING.LGPL COPYING.llvm COPYING.file COPYING.zlib COPYING.getopt COPYING.regex COPYING.sha256 platform.

Re: [PATCH] Added a autogen.sh for buildstrap the build system

Török Edwin — 2012-04-16T16:13:30

autogen.sh is not needed, 'autoreconf -fvi' does the job.

Best regards,
--Edwin
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: [PATCH] Added a autogen.sh for buildstrap thebuild system

Elia Pinto — 2012-04-16T16:02:54

Please ignore this patch. It is incomplete, i am sorry.

I will reroll it shortly.

Thanks
2012/4/16 Elia Pinto <gitter.spiros< at >gmail.com>:
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

[PATCH] Added a autogen.sh for buildstrap the buildsystem

Elia Pinto — 2012-04-16T15:59:32

This patch add a simple autogen.sh for buildstrap
the gnu build system. It also check the minimun version
of the gnu buildtool necessary for clamav.

Signed-off-by: Elia Pinto <gitter.spiros< at >gmail.com>
---
 Makefile.am |    2 +-
 autogen.sh  |  200 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 201 insertions(+), 1 deletions(-)
 create mode 100755 autogen.sh

diff --git a/Makefile.am b/Makefile.am
index 3970e2e..b3c02a5 100644
--- a/Makefile.am
+++ b/Makefile.am
< at >< at > -19,7 +19,7 < at >< at >
 ACLOCAL_AMFLAGS=-I m4
 
 SUBDIRS = libltdl libclamav clamscan clamd clamdscan freshclam sigtool clamconf database docs etc clamav-milter test clamdtop clambc unit_tests
-EXTRA_DIST = FAQ examples BUGS shared libclamav.pc.in libclamunrar_iface/Makefile.am libclamunrar_iface/Makefile.in UPGRADE COPYING.bzip2 COPYING.lzma COPYING.unrar COPYING.LGPL COPYING.llvm COPYING.file COPYING.zlib COPYING.getopt COPYING.regex COPYING.sha256 platform.h.in clamdscan/clamdscan.map win32
+EXTRA_DIST = FAQ examples BUGS

[PATCH] Add CL_CFLAGS and CL_LDFLAGS macro

Elia Pinto — 2012-04-16T14:56:43

These autoconf macros permit to enable a particular
compiler option in a portable way, testing if
the particular compiler version support it and
ignoring the option if it is not supported.

These are derived from gnulib warnings.m4 macro,
but do the check in a little different way.

Signed-off-by: Elia Pinto <gitter.spiros< at >gmail.com>
---
 configure.in    |   13 ++++++++++++-
 m4/acinclude.m4 |   52 ++++++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 64 insertions(+), 1 deletions(-)

diff --git a/configure.in b/configure.in
index 9ea805c..0cf03da 100644
--- a/configure.in
+++ b/configure.in
< at >< at > -1568,9 +1568,20 < at >< at > WERR_CFLAGS=
 WERR_CFLAGS_MILTER=
 if test "x$enable_distcheckwerror" = "xyes"; then
     if test "$distcheck_enable_flags" = "1"; then
-WERR_COMMON="-Wno-pointer-sign -Werror-implicit-function-declaration -Werror -Wextra -Wall -Wno-error=bad-function-cast -Wbad-function-cast -Wcast-align -Wendif-labels -Wfloat-equal -Wformat=2 -Wformat-security -Wmissing-declarations -Wmissing-pr

Re: [clamav-users] Flashback

Mark Allan — 2012-04-12T07:47:35

Hi Don,

This is the mailing list for ClamAV - the separate software which does the actual malware scanning.

For information about developments in ClamXav, you should check the website at www.clamxav.com and the support forums at www.clamxav.com/support

Mark

On 11 Apr 2012, at 20:20, Don Montalvo wrote:


_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: [clamav-users] Flashback

Don Montalvo — 2012-04-11T19:20:19

Is there an RSS we can subscribe to so we can keep up to speed on ClamXav changes?

I have to admit, ClamXav is going become quite attractive to many people very soon...

Don

On Apr 9, 2012, at 7:36 AM, Joel Esler wrote:


_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

Using Clamav antivirus engine

rajeshwari b — 2012-04-11T07:53:04

Hi all,
I have searched the clamav mail archive, which led me to a website. But the
material needed was removed. So pl help.
Rgds,
Rajeshwari

---------- Forwarded message ----------
From: rajeshwari b <rajeshwarionline< at >gmail.com>
Date: Tue, Apr 10, 2012 at 6:06 PM
Subject: Using Clamav antivirus engine
To: clamav-devel< at >lists.clamav.net

Hi all,
I am a first timer regarding using clamav antivirus engine. I presently
use TDM-GCC compiler -Msys for my project. I also have Msys-git installed.
Pl let me know the packages that needs to be installed to solve
the dependencies of clamav, when using TDM-Msys as compiler. Pl let me know
the procedure for installing the same. Kindly help.
Rgds,
Rajeshwari
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: I would like to contribute as a developer to the Clam-AV project

Tomasz Kojm — 2012-04-10T18:50:38


Great to hear this.

Thanks in advance!

Re: I would like to contribute as a developer to the Clam-AV project

Vikram Hegde — 2012-04-10T18:04:34

Hi Tomasz,

I would be very happy to work on the Flash disassembler. I will get to
work on it immediately.

Thanks for the opportunity,
Vikram
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: I would like to contribute as a developer to the Clam-AV project

Tomasz Kojm — 2012-04-10T17:35:36

Hi Vikram,

thank you for your interest in contributing to ClamAV.

We have a bunch of possible improvements listed here:

http://wiki.clamav.net/bin/view/Main/GoogleSummerOfCode2012

For example the flash (ActionScript 3) disassembly is something that
would be very useful for our signature writers.

Please let me know if you're interested in working on any of those ideas.

Thanks again,

Re: Can I join the Mac dev of clamAV

Tomasz Kojm — 2012-04-10T17:29:38

Yes, that's planned for next versions.

Please let me know if you're interested in contributing to this driver.


We'll support fanotify in ClamAV 0.98.

Using Clamav antivirus engine

rajeshwari b — 2012-04-10T12:36:44

Hi all,
I am a first timer regarding using clamav antivirus engine. I presently
use TDM-GCC compiler -Msys for my project. I also have Msys-git installed.
Pl let me know the packages that needs to be installed to solve
the dependencies of clamav, when using TDM-Msys as compiler. Pl let me know
the procedure for installing the same. Kindly help.
Rgds,
Rajeshwari
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: Clamav-win32 Memory Scan

Jason Gionta — 2012-04-09T17:25:31

Thanks for the follow up.  I had the wrong impression.  I'll have to take
another look.

You also raised another concern of mine.  Is it correct that clamav does
not contain signatures for memory resident only malware?

Thanks again,

Jason



On Mon, Apr 9, 2012 at 1:03 PM, Gianluigi Tiesi <sherpya< at >netfarm.it> wrote:

Re: Clamav-win32 Memory Scan

Gianluigi Tiesi — 2012-04-09T17:03:45

ClamWin (not clamav-win32 the official port) scans on disk processes 
loaded in memory (as you think), and if an executable "looks" (by using 
some heuristics) packed it gets dumped from memory and then scanned, 
tough not very useful because of missing signatures of such kind
It's not really scanning memory, but it can easy spot loaded malware 
without scanning the whole system

Regards

Re: Clamav-win32 Memory Scan

Jason Gionta — 2012-04-09T13:31:12

Bump... Can anyone confirm that clamav-win does not scan memory resident
files but files associated with resident processes from disk?

Thanks,

Jason

On Thu, Mar 8, 2012 at 4:45 PM, Jason Gionta <jjgionta< at >ncsu.edu> wrote: