Mailing List Archive

Hi Nozomi Tachibanaki,

In ClamAV 0.105 we increased the max file size and max scan size.
If your clamd.conf setting does not also raise the MaxScanSize setting, then it is likely you would experience the `Heuristics.Limits.Exceeded.MaxFileSize FOUND" alert in 0.103.7 and possibly also in 1.0.1, depending on the file you're scanning.

Sorry about the delayed response.

Regards,
Micah


Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.

________________________________
From: clamav-users <clamav-users-bounces@lists.clamav.net> on behalf of Tachibanaki Nozomi ($B5LLZ(B $B4uH~(B) <nozomi.tachibanaki@jp.ricoh.com>
Sent: Tuesday, April 18, 2023 7:27 PM
To: clamav-users@lists.clamav.net <clamav-users@lists.clamav.net>
Cc: Hino Shogo ($BF|Ln(B $BfF9k(B) <Shogo.Hino@jp.ricoh.com>; Sugawara Masatomo ($B?{86(B $B@5Bg(B) <masatomo.sugawara@jp.ricoh.com>
Subject: [clamav-users] Inquiry about ClamAV's MaxFileSize


Dear Sir or Madam,



Thank you for your help always.

The purpose of this email is to inquire about ClamAV's MaxFileSize.



We are currently using ClamAV version 0.103.7.

We are planning to update to version 1.0.1 and are testing it.

When AlertExceedsMax is set to yes and a file with the same number of bytes as MaxFileSize is scanned,

In version 0.103.7, the message "Heuristics.Limits.Exceeded.MaxFileSize FOUND with AlertExceedsMax" is output, but in version 1.0.1, the message is no longer displayed. Is this a specification?



The clamd.conf setting is as follows

$B!&(BMaxFileSize 2048M



The log of clamd demon is as follows.

$B!&(Bclamd daemon 1.0.1 (OS: Linux, ARCH: x86_64, CPU: x86_64)

$B!&(BLimits: File size limit set to 2147483648 bytes.



The verification file was created using the following command

$B!&(Bfsutil file createnew 2.0G.dat 2147483648





I$B!G(Bm looking forward to hearing from you.

Yours sincerely,





Nozomi Tachibanaki