zlib-1.2.8-2 breaks clamav

zlib-1.2.8-2 breaks clamav

[Mike Bonnet]

[-- Attachment #1: Type: text/plain, Size: 335 bytes --]

Hi.  I just found out that the zlib-1.2.8-2 breaks clamav.  A log of the 
output of the "sigtool" commmand from clamav is attached.  It's using 
gzread() to read the compressed signature databases, and the format of 
the data returned has apparently changed between zlib 1.2.8-1 and 
1.2.8-2.  This should be fixed ASAP.

Thanks,
Mike

[-- Attachment #2: sigtool-broken.log --]
[-- Type: text/plain, Size: 1832 bytes --]

$ sigtool --debug --info main.cvd
File: main.cvd
Build time: 11 Oct 2011 10:34 -0400
Version: 54
Signatures: 1044387
Functionality level: 60
Builder: sven
MD5: ef015484e18b983ddf08425e2dad6a3f
Digital signature: WOgEPNPkB4L0W5K9p1Wc+TE9DQOctxVBHGoR4pTqupMF6kJEVukelj0SPR6jTyczszfodstR+HPHG8mHjkvEtLzmmAz8WflU8vlf/XYW8Gjc6QuEetMN7yNy4JditkLVWCb/nf0gD943JTQ6lI+t7IoSqEk04jQncQ7nwNLIcZd
LibClamAV debug: Initialized 0.97.8 engine
LibClamAV debug: in cli_cvdload()
LibClamAV debug: MD5(.tar.gz) = ef015484e18b983ddf08425e2dad6a3f
LibClamAV debug: cli_versig: Decoded signature: ef015484e18b983ddf08425e2dad6a3f
LibClamAV debug: cli_versig: Digital signature is correct.
LibClamAV debug: in cli_tgzload()
LibClamAV debug: main.info loaded
LibClamAV debug: in cli_tgzload()
LibClamAV Error: cli_tgzload: Unknown type flag 'd'
LibClamAV debug: Cleaning up phishcheck
LibClamAV debug: Phishcheck cleaned up
ERROR: cvdinfo: Verification: Malformed database

$ sigtool --debug --info bytecode.cvd
File: bytecode.cvd
Build time: 13 Feb 2013 10:29 -0500
Version: 214
Signatures: 41
Functionality level: 63
Builder: neo
MD5: ff0c9c4e86dee9e705840537bd13ee71
Digital signature: w5Wj8A72FOT7uTGkl1VJ0hy1ud1T/Al8WRJkP7TPU+T/F9yrDYsQHRVtRPED6U0Ub487bZLj8chb+NtPFZ2w9HaD551UKec4+c7ZdhrR80WBkAu9TMO2PbmuHMq4G5aVXNCkLS6Bj9mwfocg71GZDNG2ATOIuge6FS8YDl48xPd
LibClamAV debug: Initialized 0.97.8 engine
LibClamAV debug: in cli_cvdload()
LibClamAV debug: MD5(.tar.gz) = ff0c9c4e86dee9e705840537bd13ee71
LibClamAV debug: cli_versig: Decoded signature: ff0c9c4e86dee9e705840537bd13ee71
LibClamAV debug: cli_versig: Digital signature is correct.
LibClamAV debug: in cli_tgzload()
LibClamAV Error: cli_tgzload: Unknown type flag 'y'
LibClamAV debug: Cleaning up phishcheck
LibClamAV debug: Phishcheck cleaned up
ERROR: cvdinfo: Verification: Malformed database

[-- Attachment #3: Type: text/plain, Size: 218 bytes --]

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: zlib-1.2.8-2 breaks clamav

[Mike Bonnet]

On 11/01/2014 08:31 PM, Mike Bonnet wrote:
> Hi.  I just found out that the zlib-1.2.8-2 breaks clamav.  A log of the
> output of the "sigtool" commmand from clamav is attached.  It's using
> gzread() to read the compressed signature databases, and the format of
> the data returned has apparently changed between zlib 1.2.8-1 and
> 1.2.8-2.  This should be fixed ASAP.

Who would I talk to about getting this fixed?

> Thanks,
> Mike
>
>
> --
> Problem reports:       http://cygwin.com/problems.html
> FAQ:                   http://cygwin.com/faq/
> Documentation:         http://cygwin.com/docs.html
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
>


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: zlib-1.2.8-2 breaks clamav

[Csaba Raduly]

On Thu, Nov 6, 2014 at 4:35 PM, Mike Bonnet  wrote:
> On 11/01/2014 08:31 PM, Mike Bonnet wrote:
>>
>> Hi.  I just found out that the zlib-1.2.8-2 breaks clamav.  A log of the
>> output of the "sigtool" commmand from clamav is attached.  It's using
>> gzread() to read the compressed signature databases, and the format of
>> the data returned has apparently changed between zlib 1.2.8-1 and
>> 1.2.8-2.  This should be fixed ASAP.
>
>
> Who would I talk to about getting this fixed?

I think the Cygwin zlib maintainer, because the difference between -1
and -2 is just a Cygwin-specific repackaging.

Csaba
-- 
GCS a+ e++ d- C++ ULS$ L+$ !E- W++ P+++$ w++$ tv+ b++ DI D++ 5++
The Tao of math: The numbers you can count are not the real numbers.
Life is complex, with real and imaginary parts.
"Ok, it boots. Which means it must be bug-free and perfect. " -- Linus Torvalds
"People disagree with me. I just ignore them." -- Linus Torvalds

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: zlib-1.2.8-2 breaks clamav

[Marco Atzeri]

On 11/6/2014 4:35 PM, Mike Bonnet wrote:
> On 11/01/2014 08:31 PM, Mike Bonnet wrote:
>> Hi.  I just found out that the zlib-1.2.8-2 breaks clamav.  A log of the
>> output of the "sigtool" commmand from clamav is attached.  It's using
>> gzread() to read the compressed signature databases, and the format of
>> the data returned has apparently changed between zlib 1.2.8-1 and
>> 1.2.8-2.  This should be fixed ASAP.
>
> Who would I talk to about getting this fixed?
>
>> Thanks,
>> Mike

This is the place. The zlib package maintainer follow the mailing list.

Have you tested if reinstalling previous zlib-1.2.8-1  restore the 
expected behaviour ?

Marco


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: zlib-1.2.8-2 breaks clamav

[Mike Bonnet]

On 11/06/2014 11:40 AM, Marco Atzeri wrote:
> On 11/6/2014 4:35 PM, Mike Bonnet wrote:
>> On 11/01/2014 08:31 PM, Mike Bonnet wrote:
>>> Hi.  I just found out that the zlib-1.2.8-2 breaks clamav.  A log of the
>>> output of the "sigtool" commmand from clamav is attached.  It's using
>>> gzread() to read the compressed signature databases, and the format of
>>> the data returned has apparently changed between zlib 1.2.8-1 and
>>> 1.2.8-2.  This should be fixed ASAP.
>>
>> Who would I talk to about getting this fixed?
>>
>>> Thanks,
>>> Mike
>
> This is the place. The zlib package maintainer follow the mailing list.
>
> Have you tested if reinstalling previous zlib-1.2.8-1  restore the
> expected behaviour ?

Yes, downgrading to zlib-1.2.8-1 fixes the issues with clamav.



--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: zlib-1.2.8-2 breaks clamav

[Mike Bonnet]

On 11/7/14 5:19 AM, Mike Bonnet wrote:
> On 11/06/2014 11:40 AM, Marco Atzeri wrote:
>> On 11/6/2014 4:35 PM, Mike Bonnet wrote:
>>> On 11/01/2014 08:31 PM, Mike Bonnet wrote:
>>>> Hi.  I just found out that the zlib-1.2.8-2 breaks clamav.  A log of
>>>> the
>>>> output of the "sigtool" commmand from clamav is attached.  It's using
>>>> gzread() to read the compressed signature databases, and the format of
>>>> the data returned has apparently changed between zlib 1.2.8-1 and
>>>> 1.2.8-2.  This should be fixed ASAP.
>>>
>>> Who would I talk to about getting this fixed?
>>>
>>>> Thanks,
>>>> Mike
>>
>> This is the place. The zlib package maintainer follow the mailing list.
>>
>> Have you tested if reinstalling previous zlib-1.2.8-1  restore the
>> expected behaviour ?
>
> Yes, downgrading to zlib-1.2.8-1 fixes the issues with clamav.

Any update on this?  The broken -2 version is still the latest.


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: zlib-1.2.8-2 breaks clamav

[Mike Bonnet]

On 11/13/14 11:23 AM, Mike Bonnet wrote:
> On 11/7/14 5:19 AM, Mike Bonnet wrote:
>> On 11/06/2014 11:40 AM, Marco Atzeri wrote:
>>> On 11/6/2014 4:35 PM, Mike Bonnet wrote:
>>>> On 11/01/2014 08:31 PM, Mike Bonnet wrote:
>>>>> Hi.  I just found out that the zlib-1.2.8-2 breaks clamav.  A log of
>>>>> the
>>>>> output of the "sigtool" commmand from clamav is attached.  It's using
>>>>> gzread() to read the compressed signature databases, and the format of
>>>>> the data returned has apparently changed between zlib 1.2.8-1 and
>>>>> 1.2.8-2.  This should be fixed ASAP.
>>>>
>>>> Who would I talk to about getting this fixed?
>>>>
>>>>> Thanks,
>>>>> Mike
>>>
>>> This is the place. The zlib package maintainer follow the mailing list.
>>>
>>> Have you tested if reinstalling previous zlib-1.2.8-1  restore the
>>> expected behaviour ?
>>
>> Yes, downgrading to zlib-1.2.8-1 fixes the issues with clamav.
>
> Any update on this?  The broken -2 version is still the latest.

Ping, any update?  -2 is still out there.  Is anyone else seeing this issue?

>
> --
> Problem reports:       http://cygwin.com/problems.html
> FAQ:                   http://cygwin.com/faq/
> Documentation:         http://cygwin.com/docs.html
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
>


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: zlib-1.2.8-2 breaks clamav

[Marco Atzeri]

On 11/2/2014 1:31 AM, Mike Bonnet wrote:
> Hi.  I just found out that the zlib-1.2.8-2 breaks clamav.  A log of the
> output of the "sigtool" commmand from clamav is attached.  It's using
> gzread() to read the compressed signature databases, and the format of
> the data returned has apparently changed between zlib 1.2.8-1 and
> 1.2.8-2.  This should be fixed ASAP.
>
> Thanks,
> Mike
>

just tested 64bit and

$ sigtool --debug --info main.cvd
File: main.cvd
Build time: 17 Sep 2013 10:57 -0400
Version: 55
Signatures: 2424225
Functionality level: 60
Builder: neo
MD5: 6c03be24ae2171478e0de317e3661e36
Digital signature: 
U44YuTP7vNpU3sZVfI54S78bkaJluqmkJCFX8skaNcNUPoTLnTxXtSuOwWufwn+M+21kGR0CO7hvU3K+44YuOA92rMNNNmKOJOnli+lGv972THU2dkCL+491C6Y4Q+169wIW+Zp/TyH93yt75qGv8vanBM1QdyXk8fnDvsOlC4
LibClamAV debug: Initialized 0.97.8 engine
LibClamAV debug: in cli_cvdload()
LibClamAV debug: MD5(.tar.gz) = 6c03be24ae2171478e0de317e3661e36
LibClamAV debug: cli_versig: Decoded signature: 
6c03be24ae2171478e0de317e3661e36
LibClamAV debug: cli_versig: Digital signature is correct.
LibClamAV debug: in cli_tgzload()
LibClamAV debug: main.info loaded
LibClamAV debug: in cli_tgzload()
LibClamAV debug: Cleaning up phishcheck
LibClamAV debug: Phishcheck cleaned up
Verification OK.

it works as expected.



--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: zlib-1.2.8-2 breaks clamav [attn Yaakov]

[Marco Atzeri]

On 11/19/2014 10:26 PM, Marco Atzeri wrote:
>
>
> On 11/2/2014 1:31 AM, Mike Bonnet wrote:
>> Hi.  I just found out that the zlib-1.2.8-2 breaks clamav.  A log of the
>> output of the "sigtool" commmand from clamav is attached.  It's using
>> gzread() to read the compressed signature databases, and the format of
>> the data returned has apparently changed between zlib 1.2.8-1 and
>> 1.2.8-2.  This should be fixed ASAP.
>>
>> Thanks,
>> Mike
>>
>
> just tested 64bit and
>
> $ sigtool --debug --info main.cvd
> File: main.cvd
> Build time: 17 Sep 2013 10:57 -0400
> Version: 55
> Signatures: 2424225
> Functionality level: 60
> Builder: neo
> MD5: 6c03be24ae2171478e0de317e3661e36
> Digital signature:
> U44YuTP7vNpU3sZVfI54S78bkaJluqmkJCFX8skaNcNUPoTLnTxXtSuOwWufwn+M+21kGR0CO7hvU3K+44YuOA92rMNNNmKOJOnli+lGv972THU2dkCL+491C6Y4Q+169wIW+Zp/TyH93yt75qGv8vanBM1QdyXk8fnDvsOlC4
>
> LibClamAV debug: Initialized 0.97.8 engine
> LibClamAV debug: in cli_cvdload()
> LibClamAV debug: MD5(.tar.gz) = 6c03be24ae2171478e0de317e3661e36
> LibClamAV debug: cli_versig: Decoded signature:
> 6c03be24ae2171478e0de317e3661e36
> LibClamAV debug: cli_versig: Digital signature is correct.
> LibClamAV debug: in cli_tgzload()
> LibClamAV debug: main.info loaded
> LibClamAV debug: in cli_tgzload()
> LibClamAV debug: Cleaning up phishcheck
> LibClamAV debug: Phishcheck cleaned up
> Verification OK.
>
> it works as expected.

the issue seems only on 32 bit

on 32 bit database

$  sigtool --debug --info main.cvd
File: main.cvd
Build time: 11 Oct 2011 10:34 -0400
Version: 54
Signatures: 1044387
Functionality level: 60
Builder: sven
MD5: ef015484e18b983ddf08425e2dad6a3f
Digital signature: 
WOgEPNPkB4L0W5K9p1Wc+TE9DQOctxVBHGoR4pTqupMF6kJEVukelj0SPR6jTyczszfodstR+HPHG8mHjkvEtLzmmAz8WflU8vlf/XYW8Gjc6QuEetMN7yNy4JditkLVWCb/nf0gD943JTQ6lI+t7IoSqEk04jQncQ7nwNLIcZd
LibClamAV debug: Initialized 0.97.8 engine
LibClamAV debug: in cli_cvdload()
LibClamAV debug: MD5(.tar.gz) = ef015484e18b983ddf08425e2dad6a3f
LibClamAV debug: cli_versig: Decoded signature: 
ef015484e18b983ddf08425e2dad6a3f
LibClamAV debug: cli_versig: Digital signature is correct.
LibClamAV debug: in cli_tgzload()
LibClamAV debug: main.info loaded
LibClamAV debug: in cli_tgzload()
LibClamAV Error: cli_tgzload: Unknown type flag 'd'
LibClamAV debug: Cleaning up phishcheck
LibClamAV debug: Phishcheck cleaned up
ERROR: cvdinfo: Verification: Malformed database

on 64bit database

$  sigtool --debug --info main.cvd
File: main.cvd
Build time: 17 Sep 2013 10:57 -0400
Version: 55
Signatures: 2424225
Functionality level: 60
Builder: neo
MD5: 6c03be24ae2171478e0de317e3661e36
Digital signature: 
U44YuTP7vNpU3sZVfI54S78bkaJluqmkJCFX8skaNcNUPoTLnTxXtSuOwWufwn+M+21kGR0CO7hvU3K+44YuOA92rMNNNmKOJOnli+lGv972THU2dkCL+491C6Y4Q+169wIW+Zp/TyH93yt75qGv8vanBM1QdyXk8fnDvsOlC4
LibClamAV debug: Initialized 0.97.8 engine
LibClamAV debug: in cli_cvdload()
LibClamAV debug: MD5(.tar.gz) = 6c03be24ae2171478e0de317e3661e36
LibClamAV debug: cli_versig: Decoded signature: 
6c03be24ae2171478e0de317e3661e36
LibClamAV debug: cli_versig: Digital signature is correct.
LibClamAV debug: in cli_tgzload()
LibClamAV debug: main.info loaded
LibClamAV debug: in cli_tgzload()
LibClamAV Error: cli_tgzload: Unknown type flag 'b'
LibClamAV debug: Cleaning up phishcheck
LibClamAV debug: Phishcheck cleaned up
ERROR: cvdinfo: Verification: Malformed database


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: zlib-1.2.8-2 breaks clamav [attn Yaakov]

[Yaakov Selkowitz]

On 2014-11-19 16:32, Marco Atzeri wrote:
>> On 11/2/2014 1:31 AM, Mike Bonnet wrote:
>>> Hi.  I just found out that the zlib-1.2.8-2 breaks clamav.  A log of the
>>> output of the "sigtool" commmand from clamav is attached.  It's using
>>> gzread() to read the compressed signature databases, and the format of
>>> the data returned has apparently changed between zlib 1.2.8-1 and
>>> 1.2.8-2.  This should be fixed ASAP.
>>>
> the issue seems only on 32 bit

Thanks for narrowing this down, Marco.  I have uploaded a fix for this 
in 1.2.8-3.

--
Yaakov


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: zlib-1.2.8-2 breaks clamav [attn Yaakov]

[Mike Bonnet]

On 11/19/14 5:24 PM, Yaakov Selkowitz wrote:
> On 2014-11-19 16:32, Marco Atzeri wrote:
>>> On 11/2/2014 1:31 AM, Mike Bonnet wrote:
>>>> Hi.  I just found out that the zlib-1.2.8-2 breaks clamav.  A log of
>>>> the
>>>> output of the "sigtool" commmand from clamav is attached.  It's using
>>>> gzread() to read the compressed signature databases, and the format of
>>>> the data returned has apparently changed between zlib 1.2.8-1 and
>>>> 1.2.8-2.  This should be fixed ASAP.
>>>>
>> the issue seems only on 32 bit

Sorry, I should have been more specific that this was a problem with the 
32-bit package.

> Thanks for narrowing this down, Marco.  I have uploaded a fix for this
> in 1.2.8-3.

Thank you!

> --
> Yaakov
>
>
> --
> Problem reports:       http://cygwin.com/problems.html
> FAQ:                   http://cygwin.com/faq/
> Documentation:         http://cygwin.com/docs.html
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
>


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple