[sanesecurity] Re: clamd crashes, or lack there of

  • From: Bill Maidment <bill.maidment@xxxxxxxxxxxx>
  • To: sanesecurity@xxxxxxxxxxxxx
  • Date: Mon, 23 Mar 2009 11:03:40 +1100

Henrique de Moraes Holschuh wrote:
Bill Maidment wrote:
Sad to say, with clamav-0.95RC2 installed, I am getting crashes (about 1 a day). I'd say that clamav-0.95RC1 was less prone to crash, but it still happened every few days.

Try to trigger the following race conditions:

1. Ongoing scan of a file  +   database reload

2. Database reload (due to freshclam - I think it uses the signal) + database reload (due to sanesecurity download scripts, might be signals or something else).

If either one causes the bug, report this to the clamav bugzila, please.

I think (2) is more probable. It is one of two differences between everyone that doesn't use sanesecurity, and everyone that does (the other being the signatures themselves, of course).

BTW: I haven't had a single crash yet, Debian Lenny 64-bits, freshclam + the usual sanesecurity scripts, all operating in signal mode, and not triggering at the same time (mostly by luck). However, my scan race windows are *small*, so it shouldn't be easy for this box to hit the bug if it is indeed either (1) or (2).

Good news. I found that a duplicate signature update script was running and once that was removed, there have been no further clamd crashes.
Thanks everyone for the excellent assistance.
Cheers
Bill

--
Bill Maidment
IT Department

PH: +61 (0)2 9927 3234
FAX: +61 (0)2 9925 0454

Elgas Ltd.
LEVEL 1/10-18 CLIFF ST
MILSONS POINT, NSW 2061
AUSTRALIA

Email: bill.maidment@xxxxxxxxxxxx
Website: http://www.elgas.com.au

Other related posts: