[Pkg-clamav-devel] Bug#542954: libclamunrar: No detection with big rar-Files without compression

Sebastian Andrzej Siewior sebastian at breakpoint.cc
Tue May 6 19:31:45 UTC 2014


On 2009-08-22 15:01:00 [+0200], nutzteil wrote:
> I made rar-archives with the compression-levels '-m0' to '-m5'.
> ('-m0' is RAR-Archive v14, the others are v1d)
> 
> Put eicar / clamav-testfiles in it.
> When ther are small number of files, all is ok.
> But with a big number of files ( ~ 50 MB ~ 360 files from sp3.cab (WinXP)),
> the testfile is not detected in compression-level '-m0' (without compression).

Could it have something to do with  --max-filesize & --max-scansize ?
Which means clamscan would stop early because the archive is too big.
If not, could you please provide a link to a testcase?

Sebastian



More information about the Pkg-clamav-devel mailing list