Mailing List Archive

[clamav-users] Memory allocation issue
Hello

Currently using Clamav 0.103.8 and I am looking at Clamav 1.0.1 as our
next LTS service.

I have one small custom .wdb file which works fine with 0.103.8 and
earlier versions.

However this .wdb will not play with 1.0.1 and produces

root@myhouse:/home/paule# /usr/local/bin/clamscan --debug -d
/etc/clamav/phishing/spoofwhitelist.wdb clam-v3.rar
LibClamAV debug: searching for unrar, user-searchpath: /usr/local/lib
LibClamAV debug: unrar support loaded from
/usr/local/lib/libclamunrar_iface.so.11.0.0
LibClamAV debug: Initialized 1.0.1 engine
LibClamAV debug: Initializing phishcheck module
LibClamAV debug: Phishcheck: Compiling regex: ^
*(http|https|ftp:(//)?)?[0-9]{1,3}(\.[0-9]{1,3}){3}[/?:]? *$
LibClamAV debug: Phishcheck module initialized
LibClamAV debug: Bytecode initialized in interpreter mode
LibClamAV debug: Loading regex_list
LibClamAV Warning: cli_realloc(): File or section is too large to scan
(0 bytes)
.                      For your safety, ClamAV limits how much memory an
operation can allocate to 1073741824 bytes
LibClamAV Error: Can't load /etc/clamav/phishing/spoofwhitelist.wdb:
Can't allocate memory
ERROR: Can't allocate memory
LibClamAV debug: Cleaning up phishcheck
LibClamAV debug: Freeing phishcheck struct
LibClamAV debug: Phishcheck cleaned up


If I replace spoofwhitelist.wdb (33 sigs) with daily.wdb there is no
memory allocation issue error. So no doubt something in my file is
initiating the problem on 1.0.1

Any pointers welcome

Paul


_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat
Re: [clamav-users] Memory allocation issue [ In reply to ]
> However this .wdb will not play with 1.0.1
Can we have it?
Re: [clamav-users] Memory allocation issue [ In reply to ]
Hi Damian,

i got him the right hint, he must add the engine version to each regex e.g ":0-".
Seems that newer clamav-versions need this always, to work properly.

kind greetings
Marc


Von / From: Clamav User Mailinglist <mailto:clamav-users@lists.clamav.net>
An / To: Newcomer01 <mailto:newcomer01@posteo.de>
CC / CC: Damian <mailto:clamav-users@arcsin.de>
Gesendet / Sent: Mittwoch, März 15, 2023 um 10:27 (at 10:27 AM) +0100
Betreff / Subject: Re: [clamav-users] Memory allocation issue
>> However this .wdb will not play with 1.0.1
> Can we have it?
>
> _______________________________________________
>
> Manage your clamav-users mailing list subscription / unsubscribe:
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat

_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat