Mailing List Archive: libclamav crashes in cli

I'm using the stable 0.92.1 kit on Windows.

cli_ctime tries to convert the given time into readable string. There is no
check in this function for invalid timestamp (time_t). As a result, a PE binary
with a wrong/invalid timestamp crashes in cli_ctime, as ctime returns NULL and
there is no code to handle it.

If ctime returns null, it should be handled ; maybe "invalid time" can be
copied to the buffer.

Any idea if there is any fix coming up on this?

Thanks

____________________________________________________________________________________
Never miss a thing. Make Yahoo your home page.
http://www.yahoo.com/r/hs
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

Gerald Naveen wrote:
> I'm using the stable 0.92.1 kit on Windows.
>
> cli_ctime tries to convert the given time into readable string. There is no
> check in this function for invalid timestamp (time_t). As a result, a PE binary
> with a wrong/invalid timestamp crashes in cli_ctime, as ctime returns NULL and
> there is no code to handle it.
>
> If ctime returns null, it should be handled ; maybe "invalid time" can be
> copied to the buffer.
>
> Any idea if there is any fix coming up on this?

Please raise a bug on bugzilla.
>
> Thanks

--
Nigel Horne. Adjudicator, Arranger, Band Trainer, Conductor, Composer, Tutor.
NJH Music, Barnsley, UK. ICQ#20252325
njh@bandsman.co.uk http://www.bandsman.co.uk