Comment 0 for bug 691414

Revision history for this message
Kees Cook (kees) wrote :

Binary package hint: clamav

# apt-cache policy clamav-daemon
clamav-daemon:
  Installed: 0.96.3+dfsg-2ubuntu1.0.10.04.2
  Candidate: 0.96.3+dfsg-2ubuntu1.0.10.04.2

Since the security update of clamav, the daemon takes multiple minutes to load its virus database, and is causing random timeouts for users of the unix socket (in my case, mimedefang), trigger 400-series email temp-fails.

strace just shows it slowly allocating memory and not doing much else.

Logs don't seem to help:
Thu Dec 16 20:58:34 2010 -> +++ Started at Thu Dec 16 20:58:34 2010
Thu Dec 16 20:58:34 2010 -> clamd daemon 0.96.3 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Thu Dec 16 20:58:34 2010 -> Log file size limit disabled.
Thu Dec 16 20:58:34 2010 -> Reading databases from /var/lib/clamav/
Thu Dec 16 20:58:34 2010 -> Not loading PUA signatures.
Thu Dec 16 20:58:38 2010 -> Loaded 856324 signatures.

But minutes later, it's still spinning at 100% CPU and non-responsive on its socket.

Debug symbols seem incomplete for some reason, but here's the backtrace while it's stuck, FWIW:

(gdb) bt
#0 0x00007f6591bad32c in ?? () from /usr/lib/libclamav.so.6
#1 0x00007f6591bad79f in ?? () from /usr/lib/libclamav.so.6
#2 0x00007f6591badaa5 in ?? () from /usr/lib/libclamav.so.6
#3 0x00007f6591badfa9 in ?? () from /usr/lib/libclamav.so.6
#4 0x00007f6591966040 in ?? () from /usr/lib/libclamav.so.6
#5 0x00007f6591ab8166 in ?? () from /usr/lib/libclamav.so.6
#6 0x00007f6591ab827b in ?? () from /usr/lib/libclamav.so.6
#7 0x00007f6591ab7d0b in ?? () from /usr/lib/libclamav.so.6
#8 0x00007f6591ab7e99 in ?? () from /usr/lib/libclamav.so.6
#9 0x00007f659196dcff in ?? () from /usr/lib/libclamav.so.6
#10 0x00007f659196f85b in ?? () from /usr/lib/libclamav.so.6
#11 0x00007f659194bec1 in cli_bytecode_prepare2 () from /usr/lib/libclamav.so.6
#12 0x00007f65918d0310 in cl_engine_compile () from /usr/lib/libclamav.so.6
#13 0x0000000000407cfc in main (argc=<value optimized out>, argv=<value optimized out>) at clamd.c:495