Mailing List ecs-isp@2rosenthals.com Archived Message #587

From: "Massimo S." <ecs-isp@2rosenthals.com> Full Headers
Undecoded message
Subject: Re: [eCS-ISP] ClamAV
Date: Mon, 16 Oct 2023 19:00:05 +0200
To: eCS ISP Mailing List <ecs-isp@2rosenthals.com>



Il 16/10/2023 18:21, Steven Levine ha scritto:
In <list-8120864@2rosenthals.com>, on 10/16/23
    at 10:04 AM, "Massimo S." <ecs-isp@2rosenthals.com> said:

Hi Massimo,

10-16-2023  09:51:10  SYS2070  PID f1da  TID 0001  Slot 00a0
D:\USR\LOCAL\CLAMAV\BIN\FRESHCLAM.EXE
FRESHCLAM->LIBCN0.2026
182
(i've already updated all the lib/libcx staff with yum)
i first switched the platform to p4 and then updated libc/libcx stuff, how is it possible?

I don't have access to your system, so I can make semi-educated guesses.
Did you reboot afterwards?  Are you sure the update did not fail?  What
does

   yum list installed libc libcx

report?

14/04/04 16:37        356.330    124 a---  libc05.dll
11/09/23 19:37         45.428    124 a---  libc06.dll
11/09/23 19:37         45.429    124 a---  libc061.dll
11/09/23 19:37        153.562    124 a---  libc062.dll
11/09/23 19:37        153.562    124 a---  libc063.dll
11/09/23 19:37        153.628    124 a---  libc064.dll
11/09/23 19:37        153.628    124 a---  libc065.dll
11/09/23 19:37        316.363    124 a---  libc066.dll
11/09/23 19:37      1.274.428    124 a---  libcn0.dll
12/05/23 18:59         59.040    124 a---  libcx0.dll

I can only guess you have a stray copy of libcn0.dll installed or loaded
somewhere.  What does

   psfiles | find "LIBCN0"

report?  It should indicate that the copy from %UNIXROOT\usr\lib is
loaded.

FWIW, lxlite will show the ordinals defined in an executable.

   lxlite -i- -c:exemap libcn0.dll

shows that when run again the properly updated libcn0.dll, the ordinal
that was missing is now defined as:

     02026   ___libc_touch

which happens to be a side effect of my work with Paul and Dmitriy.

Steven

i've rebooted, now it generate no entries in popuplog.os2
but neither an eQ dump (but maybe i've to add SET EXCEPTQ=Z to c.sys)

the result now is this (with 2021 sig. database)

LibClamAV Warning: **************************************************
LibClamAV Warning: ***  The virus database is older than 7 days!  ***
LibClamAV Warning: ***   Please update it as soon as possible.    ***
LibClamAV Warning: **************************************************
cli_realloc(): Can't re-allocate memory to 1828472 bytes.
realloc_problem: Not enough memory
LibClamAV Error: cli_realloc(): Can't re-allocate memory to 1828472 bytes.
LibClamAV Error: cli_ac_addpatt: Can't realloc ac_listtable
LibClamAV Error: cli_parse_add(): Problem adding signature (3).
LibClamAV Error: Problem parsing database at line 65273
LibClamAV Error: Can't load daily.ldb: Can't allocate memory
LibClamAV Error: cli_tgzload: Can't load daily.ldb
LibClamAV Error: Can't load d:\usr\local\clamav\share\clamav/daily.cld: MalformeLibClamAV Error: cli_loaddbdir(): error loading database d:\usr\local\clamav\shaERROR: Malformed database

LIBC PANIC!!
_um_free_maybe_lock: Tried to free block twice - block=11ef3cb8 lock=0x1
pid=0x00db ppid=0x00d7 tid=0x0001 slot=0x008d pri=0x0200 mc=0x0000 ps=0x0010
D:\USR\LOCAL\CLAMAV\BIN\CLAMSCAN.EXE

massimo


Subscribe: Feed, Digest, Index.
Unsubscribe
Mail to ListMaster