Re: CalmAV In-Memory Scan

Brandon Perry <[email protected]>
Newsgroups gmane.comp.security.virus.clamav.devel
Message-ID <[email protected]>
> On Apr 5, 2017, at 2:27 PM, Michael Engstler <[email protected]> wrote:
> 
> Hi,
> I noticed that when using the INSTREAM command and sending it a memory
> buffer of a file, clamd takes the memory buffer and saves it to
> the TemporaryDirectory (as defined in the config file).
> 
> This is an unnecessary overhead as it requires disk IO in order to scan the
> file which is already loaded in-memory.
> Is there any way to command clamd to scan the buffer completely in-memory
> without writing anything to the disk?

My understanding is that ClamAV requires a rewindable file stream in order to perform scans.

> 
> Thanks,
> Michael.
> _______________________________________________
> http://lurker.clamav.net/list/clamav-devel.html
> Please submit your patches to our Bugzilla: http://bugs.clamav.net
> 
> http://www.clamav.net/contact.html#ml

_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net

http://www.clamav.net/contact.html#ml
signature.asc (application/pgp-signature, 801 B)
-----BEGIN PGP SIGNATURE-----
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=ul85
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.