Re: [Clamav-users] clamd stuck at 100% cpu usage

## Roberto Ullfig (rullfig@uic.edu):

> We've also seen clamd stuck at 100% when PDF scanning (new feature
> introduced recently) large files. We've disabled PDF scanning for now.
> We will need to put in our own check to prevent PDF scanning of files
> over a certain size.

I've seen a similar issue: clamd runs at 100% CPU and takes forever scanning one mail.
Some additional facts I gathered: This issue is reproducible with a vanilla (no patches) clamav 0.91.2 on Debian Linux (stable), official signatures only. It does not happen with clamav 0.91.2 on FreeBSD (compiled from ports), so I believe there could be an issue in one of the supporting libraries. The hang occurs when scanning the whole mail, but not when scanning parts as decoded by amavisd-new, so perhaps it's somewhere in the MIME decoder. I have looked into the offending mails, but found nothing obvious (I'm still trying to get a sample, I can't post my users personal mail here).

Regards
Christoph

-- 
Spare Space
_______________________________________________
Help us build a comprehensive ClamAV guide: visit 
http://wiki.clamav.nethttp://lurker.clamav.net/list/clamav-users.html