Clamd max file size Solaris 10


 
Thread Tools Search this Thread
Operating Systems Solaris Clamd max file size Solaris 10
# 1  
Old 01-30-2018
Clamd max file size Solaris 10

Hi,

I've compiled a 64-bit version of ClamAV 0.98.7 on my Solaris 10 SPARC server. I have a selection of files all containing the eicar signature but clamd is only picking up the signature in the files <2GB.

I have the following set in clamd.conf, to remove file size checking:
Code:
MaxScanSize 0
MaxFileSize 0

I'm scanning a 2.2GB file (containing the eicar string) with the following command:

Code:
clamdscan --stream --verbose /var/crash/bigfile

this returns:
Code:
----------- SCAN SUMMARY -----------
Infected files: 0
Time: 375.965 sec (6 m 15 s)

A 1.4GB file (containing the eicar string) returns:
Code:
/var/crash/mediumfile: Eicar-Test-Signature FOUND
----------- SCAN SUMMARY -----------
Infected files: 1
Time: 274.180 sec (4 m 34 s)

Other info that may be relevant:
SunOS myhost 5.10 Generic_147440-09 sun4v sparc SUNW,SPARC-Enterprise-T5120

Any help/suggestions much appreciated Smilie


Moderator's Comments:
Mod Comment Please use CODE tags as required by forum rules!
Please post in adequate forum!

Last edited by RudiC; 01-30-2018 at 07:00 AM.. Reason: Added CODE tags, moved thread to Solaris forum.
# 2  
Old 01-30-2018
I suggest that you try:

Code:
OnAccessMaxFileSize= "4294967295"

in the clamd.conf file.

14.6 Using ClamAV (Sun Java System Messaging Server 6.3 Administration Guide)

Last edited by hicksd8; 01-30-2018 at 04:43 PM..
These 2 Users Gave Thanks to hicksd8 For This Post:
# 3  
Old 01-31-2018
Thanks for the suggestion. Unfortunately it still fails to pick up the signature in the larger file.
I'd also tried setting this value to "0" (No limit) but the result was the same
# 4  
Old 02-05-2018
Based on this post, I did some poking in the clamav source code.

I'm not impressed.

There are way too many instances of 64-to-32 bit truncations in the code - for example, read() is assumed to return int and not the correct ssize_t.

Running Solaris Studio 12.4 lint on just the C files in source tree's libclamav directory:

Code:
bash 4.1$ lint -errchk=%all -errhdr=%user -m64 -I.. -I../clamd -I../libclamav -I../win32 a*.c [c-z]*.c 2>&1 | grep "assignment of 64-bit integer" | wc -l
    398

The blob.c file causes lint to fail with an error, so I used a*.c [c-z]*.c to quickly exclude *.c files that start with b.

And there are 398 instances in just libclamav/*.c where a 64-bit value is truncated. There are also a lot of other problems, too.

It's no surprise at all that clamav has problems with files larger than 2 GB.

And that's just from using lint on the C files. I'd bet the results of compiling the C++ portions with Solaris Studio's C++ compiler and the "-m64 -xport64" command-line options are downright scary.

Last edited by achenle; 02-05-2018 at 01:25 PM..
# 5  
Old 02-05-2018
Thanks for the post. Fortunately, it transpires the files were only >2GB when they were uncompressed. We are now scanning the smaller compressed file with CSW's ClamAV package (32-bit) - this works fine.

It was fairly tricky to get this to compile as 64-bit in the first place so I'm not surprised there were issues with the source.

Thanks again for taking the time Smilie
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Max size directory

Hi I know that a perticular direxctory is cosuming max space . Filesystem 1K-blocks Used Available Use% Mounted on nfsfi02:/vol/fivol2/Dir2/dir 104857600 92671400 12186200 89% /fs/dir I want to know which sub directory is consuming max... (4 Replies)
Discussion started by: ptappeta
4 Replies

2. UNIX for Dummies Questions & Answers

Restrict Max file size

Hello All, I am working on an issue, where I need to check the max file size of a file. If the file size exceeds 2 GB, then I need to generate an error message. Since the file system does not allow a file to be created larger than 2 GB, I am planning to use named pipes & AWK file to acheive my... (6 Replies)
Discussion started by: puru2121
6 Replies

3. UNIX for Dummies Questions & Answers

MAX file size limited to 2GB

Hi All, We are running HP rp7400 box with hpux 11iv1. Recently, we changed 3 kernel parameters a) msgseg from 32560 to 32767 b) msgmnb from 65536 to 65535 c) msgssz from 128 to 256 Then we noticed that all application debug file size increase upto 2GB then it stops. So far we did not... (1 Reply)
Discussion started by: mhbd
1 Replies

4. UNIX for Advanced & Expert Users

Max. file size

i want to know what is the maximum file size supported by linux with ext3 file system. (1 Reply)
Discussion started by: nagalenoj
1 Replies

5. Solaris

max. size of file

I wants to ask that what is the max size of file that we can create in the unix file system. (2 Replies)
Discussion started by: sameerghogre
2 Replies

6. UNIX for Advanced & Expert Users

How to determine the max file size

Does anyone know a way to determine the maximum filesize on a file system on Solaris, HP-UX, AIX, Linux, and OSF1 using the command line? TIA (2 Replies)
Discussion started by: dknight
2 Replies

7. Programming

Max file size can't exceed 2 GB

We have Sun OS 5.9 we are doing a backup process (ProC program) that uses the function... fprintf(fp,"%s;%s;%s;%s;%s;%ld;%ld;%ld;%ld;%s;%s;%s;%d;%s;%s;%s;%ld;%s;%s;%s;%ld;%ld;%s;%ld;%s;%ld;%s;%s;%c%c",x_contrno, x_subno, x_b_subno,x_transdate,x_last_traffic_date,BillAmt_s, x_billamount_int,... (10 Replies)
Discussion started by: atiato
10 Replies

8. UNIX for Dummies Questions & Answers

Max I/O Size

My HP-UX 11.0 system is supporting an Oracle database. I have found a number of references on the Net to the "Max I/O size" in relation to setting Oracle parameters. How can I tell what my max i/o size is? I originally made the assumption that it was referring to my stripe size but now I think... (1 Reply)
Discussion started by: keelba
1 Replies

9. Shell Programming and Scripting

Max size of variable

What is the maximum amount of characters that you can have in a varible name in the ksh shell? (1 Reply)
Discussion started by: lesstjm
1 Replies

10. Shell Programming and Scripting

setting max log file size...

Hello all! I have found a new home, this place is great! I have been searching for days to find a way to set a max size for a log.txt file using a cron job exicuting a shell script. Is it possible for a script to remove older entries in a log file to maintain a limited file size? If so,... (5 Replies)
Discussion started by: v-rod
5 Replies
Login or Register to Ask a Question