Re: Scan next file on segmentation fault in clamscan

"Valerie Snyder \(valsnyde\) via clamav-users" <[email protected]> Tue, 6 Jan 2026 17:08:30 +0000
Newsgroups gmane.comp.security.virus.clamav.user
Message-ID <CH3PR11MB8750C808084D6C92F44788CADE87A@CH3PR11MB8750.namprd11.prod.outlook.com>
--===============4138008728898087539==
Content-Language: en-US
Content-Type: multipart/alternative;
	boundary="_000_CH3PR11MB8750C808084D6C92F44788CADE87ACH3PR11MB8750namp_"

--_000_CH3PR11MB8750C808084D6C92F44788CADE87ACH3PR11MB8750namp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi Zvi. If you can, please report the file which causes a crash to us by fo=
llowing the instructions in our security reporting policy: https://github.c=
om/Cisco-Talos/clamav/security/policy

Sadly there is no process sandboxing in clamscan at this time which could c=
atch a crash and then skip to the next file or skip it next time the file i=
s scanned. It is a difficult thing to implement, particularly in a cross pl=
atform way. We actually have a prototype for it, but have been unable to co=
mplete it due to competing priorities and limited developer time.

Respectfully,
Val

Valerie Snyder (she/they)
ClamAV Development
Talos
Cisco Systems, Inc.
________________________________
From: clamav-users <[email protected]> on behalf of Zvi=
 Kave via clamav-users <[email protected]>
Sent: Thursday, January 1, 2026 8:59 AM
To: [email protected] <[email protected]>
Cc: Zvi Kave <[email protected]>
Subject: [clamav-users] Scan next file on segmentation fault in clamscan


Hi,

I have crash with segmentation fault in very rare container mail file when =
using clamscan.

Did someone prepare in manager.c code a way to skip to next file in this ca=
se?

Regards,

Zvi

--_000_CH3PR11MB8750C808084D6C92F44788CADE87ACH3PR11MB8750namp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo=
ttom:0;} </style>
</head>
<body dir=3D"ltr">
<div style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, =
Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=
s=3D"elementToProof">
Hi Zvi. If you can, please report the file which causes a crash to us by fo=
llowing the instructions in our security reporting policy:
<a href=3D"https://github.com/Cisco-Talos/clamav/security/policy">https://g=
ithub.com/Cisco-Talos/clamav/security/policy</a></div>
<div style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, =
Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=
s=3D"elementToProof">
<br>
</div>
<div style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, =
Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=
s=3D"elementToProof">
Sadly there is no process sandboxing in clamscan at this time which could c=
atch a crash and then skip to the next file or skip it next time the file i=
s scanned. It is a difficult thing to implement, particularly in a cross pl=
atform way. We actually have a prototype
 for it, but have been unable to complete it due to competing priorities an=
d limited developer time.&nbsp;</div>
<div class=3D"elementToProof" id=3D"Signature">
<div style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, =
Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=
s=3D"elementToProof">
<br>
</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Respectfully,</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Val</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
<br>
<span style=3D"font-family: Helvetica; font-size: 12px;">Valerie Snyder (sh=
e/they)</span><br>
<span style=3D"font-family: Helvetica; font-size: 12px;">ClamAV Development=
</span><br>
<span style=3D"font-family: Helvetica; font-size: 12px;">Talos</span><br>
<span style=3D"font-family: Helvetica; font-size: 12px;">Cisco Systems, Inc=
.</span><br>
</div>
</div>
<div id=3D"appendonsend"></div>
<hr style=3D"display:inline-block;width:98%" tabindex=3D"-1">
<div id=3D"divRplyFwdMsg" dir=3D"ltr"><font face=3D"Calibri, sans-serif" st=
yle=3D"font-size:11pt" color=3D"#000000"><b>From:</b> clamav-users &lt;clam=
[email protected]&gt; on behalf of Zvi Kave via clamav-user=
s &lt;[email protected]&gt;<br>
<b>Sent:</b> Thursday, January 1, 2026 8:59 AM<br>
<b>To:</b> [email protected] &lt;[email protected]&=
gt;<br>
<b>Cc:</b> Zvi Kave &lt;[email protected]&gt;<br>
<b>Subject:</b> [clamav-users] Scan next file on segmentation fault in clam=
scan</font>
<div>&nbsp;</div>
</div>
<style id=3D"x_bidiui-paragraph-margins" type=3D"text/css">
<!--
div p
	{margin-bottom:0cm;
	margin-top:0pt}
-->
</style>
<div style=3D"direction:ltr">
<p>Hi,</p>
<p>I have crash with segmentation fault in very rare container mail file wh=
en using clamscan.&nbsp;</p>
<p>Did someone prepare in manager.c code a way to skip to next file in this=
 case?</p>
<p>Regards,</p>
<p>Zvi</p>
</div>
</body>
</html>

--_000_CH3PR11MB8750C808084D6C92F44788CADE87ACH3PR11MB8750namp_--

--===============4138008728898087539==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

--===============4138008728898087539==--