Re: Scan next file on segmentation fault in clamscan
"Valerie Snyder \(valsnyde\) via clamav-users" <[email protected]> Tue, 6 Jan 2026 17:08:30 +0000
| Newsgroups | gmane.comp.security.virus.clamav.user |
|---|---|
| Message-ID | <CH3PR11MB8750C808084D6C92F44788CADE87A@CH3PR11MB8750.namprd11.prod.outlook.com> |
--===============4138008728898087539== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_CH3PR11MB8750C808084D6C92F44788CADE87ACH3PR11MB8750namp_" --_000_CH3PR11MB8750C808084D6C92F44788CADE87ACH3PR11MB8750namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Zvi. If you can, please report the file which causes a crash to us by fo= llowing the instructions in our security reporting policy: https://github.c= om/Cisco-Talos/clamav/security/policy Sadly there is no process sandboxing in clamscan at this time which could c= atch a crash and then skip to the next file or skip it next time the file i= s scanned. It is a difficult thing to implement, particularly in a cross pl= atform way. We actually have a prototype for it, but have been unable to co= mplete it due to competing priorities and limited developer time. Respectfully, Val Valerie Snyder (she/they) ClamAV Development Talos Cisco Systems, Inc. ________________________________ From: clamav-users <[email protected]> on behalf of Zvi= Kave via clamav-users <[email protected]> Sent: Thursday, January 1, 2026 8:59 AM To: [email protected] <[email protected]> Cc: Zvi Kave <[email protected]> Subject: [clamav-users] Scan next file on segmentation fault in clamscan Hi, I have crash with segmentation fault in very rare container mail file when = using clamscan. Did someone prepare in manager.c code a way to skip to next file in this ca= se? Regards, Zvi --_000_CH3PR11MB8750C808084D6C92F44788CADE87ACH3PR11MB8750namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo= ttom:0;} </style> </head> <body dir=3D"ltr"> <div style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, = Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas= s=3D"elementToProof"> Hi Zvi. If you can, please report the file which causes a crash to us by fo= llowing the instructions in our security reporting policy: <a href=3D"https://github.com/Cisco-Talos/clamav/security/policy">https://g= ithub.com/Cisco-Talos/clamav/security/policy</a></div> <div style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, = Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas= s=3D"elementToProof"> <br> </div> <div style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, = Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas= s=3D"elementToProof"> Sadly there is no process sandboxing in clamscan at this time which could c= atch a crash and then skip to the next file or skip it next time the file i= s scanned. It is a difficult thing to implement, particularly in a cross pl= atform way. We actually have a prototype for it, but have been unable to complete it due to competing priorities an= d limited developer time. </div> <div class=3D"elementToProof" id=3D"Signature"> <div style=3D"font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, = Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas= s=3D"elementToProof"> <br> </div> <div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size= : 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof"> Respectfully,</div> <div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size= : 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof"> Val</div> <div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size= : 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof"> <br> <span style=3D"font-family: Helvetica; font-size: 12px;">Valerie Snyder (sh= e/they)</span><br> <span style=3D"font-family: Helvetica; font-size: 12px;">ClamAV Development= </span><br> <span style=3D"font-family: Helvetica; font-size: 12px;">Talos</span><br> <span style=3D"font-family: Helvetica; font-size: 12px;">Cisco Systems, Inc= .</span><br> </div> </div> <div id=3D"appendonsend"></div> <hr style=3D"display:inline-block;width:98%" tabindex=3D"-1"> <div id=3D"divRplyFwdMsg" dir=3D"ltr"><font face=3D"Calibri, sans-serif" st= yle=3D"font-size:11pt" color=3D"#000000"><b>From:</b> clamav-users <clam= [email protected]> on behalf of Zvi Kave via clamav-user= s <[email protected]><br> <b>Sent:</b> Thursday, January 1, 2026 8:59 AM<br> <b>To:</b> [email protected] <[email protected]&= gt;<br> <b>Cc:</b> Zvi Kave <[email protected]><br> <b>Subject:</b> [clamav-users] Scan next file on segmentation fault in clam= scan</font> <div> </div> </div> <style id=3D"x_bidiui-paragraph-margins" type=3D"text/css"> <!-- div p {margin-bottom:0cm; margin-top:0pt} --> </style> <div style=3D"direction:ltr"> <p>Hi,</p> <p>I have crash with segmentation fault in very rare container mail file wh= en using clamscan. </p> <p>Did someone prepare in manager.c code a way to skip to next file in this= case?</p> <p>Regards,</p> <p>Zvi</p> </div> </body> </html> --_000_CH3PR11MB8750C808084D6C92F44788CADE87ACH3PR11MB8750namp_-- --===============4138008728898087539== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-lists-and-chat --===============4138008728898087539==--