Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 28 Jun 2011 18:55:25 GMT
From:      Michael Scheidell <scheidell@secnap.net>
To:        freebsd-gnats-submit@FreeBSD.org
Subject:   ports/158402: [BUG-RUMOR] security/clamav 0.97.1 might have a amd64 bug
Message-ID:  <201106281855.p5SItPYd075804@red.freebsd.org>
Resent-Message-ID: <201106281900.p5SJ0IM2073560@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         158402
>Category:       ports
>Synopsis:       [BUG-RUMOR] security/clamav 0.97.1 might have a amd64 bug
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Jun 28 19:00:18 UTC 2011
>Closed-Date:
>Last-Modified:
>Originator:     Michael Scheidell
>Release:        7.3 amd64
>Organization:
SECNAP Network Security
>Environment:
uname -a
FreeBSD tpa.ionspam.net 7.3-RELEASE-p1 FreeBSD 7.3-RELEASE-p1 #1: Thu Oct 28 19:39:01 GMT 2010     admin@ionspam.spammertrap.net:/usr/obj/usr/src/sys/ENTSPAM  amd64

>Description:
Right after upgrading several freebsd 7.3 systems from clamav 0.97 to 0.97.1, we began to have failures (clamd TCP socket TOTALLY hung).

This also happened on clamd running the unix soc as well.

could NOT kill the clamd daemon with sigkill, needed sigsegv to kill it.

first time it happened, the restart did NOT help.

it happened to one more system running amd64/clamv 0.97.1, so we just 
downgraded all of our amd64 boxes from 0.97.1 to 0.97 and no problem since.

also, no problems (so far) on the 32 bit i386 boxes.

Suspect something changed in threading, processes, or something unique to either 64 bit, or the ams64 code.

REALLY SORRY I don't have a patch yet for you, but maybe if we get a couple more reports of problems, we can nail it down.


>How-To-Repeat:
upgrade an amd64 7.3 freebsd system to clamav 0.97.1 and wait for it to hang.
>Fix:
downgrade to clamav 0.97

>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201106281855.p5SItPYd075804>