[Pkg-clamav-devel] Bug#609759: - further files 1

Török Edwin edwin at clamav.net
Wed Jan 12 16:13:10 UTC 2011


On 2011-01-12 18:12, Andreas Jörg wrote:
> Hi Török,
> 
> please find my answers in your text below.
> 
> 
> Am 12 Jan 2011 um 17:19 hat Török Edwin geschrieben:
> 
> Datum:       Wed, 12 Jan 2011 17:19:21 +0200
> Von:                Török Edwin <edwin at clamav.net>
> An:                 Andreas Jörg <ajoerg123 at yahoo.de>
> Kopie an:           609759 at bugs.debian.org
> Betreff:            Re: Bug#609759 - further files 1
> 
>> On 2011-01-12 14:39, Andreas Jörg wrote:
>> > Please find attached the clamav-log files as well as the windows
>> file on
>> > which the scan crahes.
>> >
>> > I will also provide the output of gdb /usr/bin/clamscan -c
>> core.9723.
>>
>> Thanks for the core file, it is a similar bug as last time.
>>
>> Can you please run these commands:
>> $ cd /tmp
>> $ sigtool --unpack-current bytecode
>> $ clambc -- --debug 767944.cbc 2>log
> 
> I tried that, the logfile only contains "Unable to load --".
> 
> The reason is probably, that 767944.cbc ist not a valid filename here.

Sorry, it should have been: 'clambc 767944.cbc -- --debug 2>log'.
Please try that.

> 
> Please find a list of the files in /tmp as attachment 1.
> 
> 
>>
>> Then send me the file called 'log', make sure it contains CMOV, or
>> CMOVE, if not try another .cbc files from /tmp.
>>
>> Crash is here:
>> Dump of assembler code from 0xb16e58ac to 0xb16e58b6:
>> => 0xb16e58ac:   0f 44 f0       cmove  %eax,%esi
>>    0xb16e58af:   84 db  test   %bl,%bl
>>    0xb16e58b1:   0f 85 80 ff ff ff      jne    0xb16e5837
>>
>> I don't understand why though, the pattern for CMOV is guarded by
>> a
>> CPUID test.
>> Could you install the 'x86info' package, and run this (as root):
>> # modprobe cpuid
>> # x86info -a
>>
>> And send me the output from x86info -a.
>>
> 
> "x86info -a > /root/2011-01-12_x86info.output"  gave the following error
> message on the console: "/dev/cpu/0/msr: No such file or directory"
> 
> Please find x86info.output attached too.

Thanks,
--Edwin





More information about the Pkg-clamav-devel mailing list