SAVI-Perl problems

[Steve Freegard]

Hi All,

I thought I'd give the sophossavi interface a try - after doing so, I was
tailing the maillog and noticed that MailScanner was spawning a new child
process every 10-20 seconds or so, and that I had several defunct processes
showing up when doing a 'ps axww'.

I put MailScanner into debug mode and ran it by hand and realised that it
was segfaulting.

Here is the last few lines of an strace:

[root at hoshi root]# strace /usr/sbin/MailScanner
/etc/MailScanner/MailScanner.con
f
<<SNIP>>
mprotect(0x40618000, 978944, PROT_READ|PROT_EXEC) = 0
open("/usr/lib/gconv/gconv-modules.cache", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=21040, ...}) = 0
mmap2(NULL, 21040, PROT_READ, MAP_SHARED, 5, 0) = 0x40428000
close(5)                                = 0
futex(0x42130d84, FUTEX_WAKE, 2147483647, NULL) = 0
brk(0)                                  = 0x92fa000
brk(0x92fb000)                          = 0x92fb000
open("/etc/sav.conf", O_RDONLY)         = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=49, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x40
145000
read(5, "SAV virus data directory = /usr/"..., 4096) = 49
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0x40145000, 4096)                = 0
time(NULL)                              = 1051555427
open("/tmp/76630000.$$$", O_RDWR|O_CREAT|O_EXCL, 0600) = 5
close(5)                                = 0
open("/tmp/76630000.$$$", O_RDWR)       = 5
write(5, "\0", 1)                       = 1
close(5)                                = 0
rmdir("/tmp/76630000.$$$")              = -1 ENOTDIR (Not a directory)
unlink("/tmp/76630000.$$$")             = 0
--- SIGSEGV (Segmentation fault) @ 0 (0) ---
+++ killed by SIGSEGV +++
<<SNIP>>

I confirmed that it is SAVI-Perl causing it by changing back to regular
sophos scanning which then stops the segfault.

I'm running this on a Compaq Proliant DL360 1x933Mhz 512Mb RAM running
RedHat 9, MailScanner 4.14-9, Sophos 3.67 and ClamAV 0.54

Anyone else had a similar problem or know how to fix this??

Kind regards,


Steve

--
Steve Freegard
Systems Manager
Littlehampton Book Services Ltd.


**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.lbsltd.co.uk
**********************************************************************