• Server crash with 0.99d2

    By Vitaly Burchenkov 2 decades ago

    Hi!



    Environment: Lotus Domino 6.5.1, Debian Linux, precompiled MailScan executables.



    Problem: Server stably crashes when receiving a message with attachment (NSD script does nothing, so I manually kill all processes).



    Log File:



    09/22/2004 11:55:48: MailScan-Addin: Startup……

    09/22/2004 11:55:48: MailScan-Addin: OpenMailScan Version 0.99d2, Copyright © 2004 Hans-Georg Franke

    09/22/2004 11:55:48: MailScan-Addin: OpenMailScan comes with ABSOLUTELY NO WARRANTY;

    09/22/2004 11:55:48: MailScan-Addin: This is free software, and you are welcome to redistribute it under certain conditions;

    09/22/2004 11:55:48: MailScan-Addin: For details see included file "license.txt"

    09/22/2004 11:55:48: MailScan-Addin: DebugLevel: 3

    09/22/2004 11:55:49: MailScan-Addin: Calling scanner with "/usr/bin/f-prot"

    09/22/2004 11:55:49: MailScan-Addin: Calling with Param " -dumb -archive -silent [DIRECTROY]\"

    09/22/2004 11:55:49: MailScan-Addin: Working directory MailScan

    09/22/2004 11:55:49: MailScan-Addin: ReturnCode0: 0 - Text: "(Virusscanned by me)"

    09/22/2004 11:55:49: MailScan-Addin: Handling before0: 1

    09/22/2004 11:55:49: MailScan-Addin: Deleting file with rc0: 1

    09/22/2004 11:55:49: MailScan-Addin: Replacing text for rc0: Suspicous attachment removed:

    09/22/2004 11:55:49: MailScan-Addin: Send mail for rc0: noone@nowhere

    09/22/2004 11:55:49: MailScan-Addin: ReturnCode1: 1 - Text: "Not set"

    09/22/2004 11:55:49: MailScan-Addin: Handling before1: 1

    09/22/2004 11:55:49: MailScan-Addin: Deleting file with rc1: 1

    09/22/2004 11:55:49: MailScan-Addin: Replacing text for rc1: Suspicous attachment removed:

    09/22/2004 11:55:49: MailScan-Addin: Send mail for rc1: noone@nowhere

    09/22/2004 11:55:49: MailScan-Addin: ReturnCode2: 2 - Text: "not set"

    09/22/2004 11:55:49: MailScan-Addin: Handling before2: 1

    09/22/2004 11:55:49: MailScan-Addin: Deleting file with rc2: 1

    09/22/2004 11:55:49: MailScan-Addin: Replacing text for rc2: Suspicous attachment removed:

    09/22/2004 11:55:49: MailScan-Addin: Send mail for rc2: noone@nowhere

    09/22/2004 11:55:49: MailScan-Addin: ReturnCode3: 3 - Text: "(VIRUS FOUND)"

    09/22/2004 11:55:49: MailScan-Addin: Handling before3: 1

    09/22/2004 11:55:49: MailScan-Addin: Deleting file with rc3: 1

    09/22/2004 11:55:49: MailScan-Addin: Replacing text for rc3: Suspicous attachment removed:

    09/22/2004 11:55:49: MailScan-Addin: Send mail for rc3: noone@nowhere

    09/22/2004 11:55:49: MailScan-Addin: ReturnCode4: 4 - Text: "not set"

    09/22/2004 11:55:49: MailScan-Addin: Handling before4: 1

    09/22/2004 11:55:49: MailScan-Addin: Deleting file with rc4: 1

    09/22/2004 11:55:49: MailScan-Addin: Replacing text for rc4: Suspicous attachment removed:

    09/22/2004 11:55:49: MailScan-Addin: Send mail for rc4: noone@nowhere

    09/22/2004 11:55:49: MailScan-Addin: ReturnCode5: 5 - Text: "not set"

    09/22/2004 11:55:49: MailScan-Addin: Handling before5: 1

    09/22/2004 11:55:49: MailScan-Addin: Deleting file with rc5: 1

    09/22/2004 11:55:49: MailScan-Addin: Replacing text for rc5: Suspicous attachment removed:

    09/22/2004 11:55:49: MailScan-Addin: Send mail for rc5: noone@nowhere

    09/22/2004 11:55:49: MailScan-Addin: ReturnCode6: 6 - Text: "not set"

    09/22/2004 11:55:49: MailScan-Addin: Handling before6: 1

    09/22/2004 11:55:49: MailScan-Addin: Deleting file with rc6: 1

    09/22/2004 11:55:49: MailScan-Addin: Replacing text for rc6: Suspicous attachment removed:

    09/22/2004 11:55:49: MailScan-Addin: Send mail for rc6: noone@nowhere

    09/22/2004 11:55:49: MailScan-Addin: ReturnCode7: 7 - Text: "not set"

    09/22/2004 11:55:49: MailScan-Addin: Handling before7: 1

    09/22/2004 11:55:49: MailScan-Addin: Deleting file with rc7: 1

    09/22/2004 11:55:49: MailScan-Addin: Replacing text for rc7: Suspicous attachment removed:

    09/22/2004 11:55:49: MailScan-Addin: Send mail for rc7: noone@nowhere

    09/22/2004 11:55:49: MailScan-Addin: ReturnCode8: 8 - Text: "not set"

    09/22/2004 11:55:49: MailScan-Addin: Handling before8: 1

    09/22/2004 11:55:49: MailScan-Addin: Deleting file with rc8: 1

    09/22/2004 11:55:49: MailScan-Addin: Replacing text for rc8: Suspicous attachment removed:

    09/22/2004 11:55:49: MailScan-Addin: Send mail for rc8: noone@nowhere

    09/22/2004 11:55:49: MailScan-Addin: Other Configuration Error: "(ERROR OCCURED scanning for viruses)"

    09/22/2004 11:55:49: MailScan-Addin: Initialization complete.

    09/22/2004 11:55:49: MailScan-Addin: Searching for Mailboxes.

    09/22/2004 11:55:49: MailScan-Addin: No Multiple Mailboxes.

    09/22/2004 11:55:49: MailScan-Addin: Startup Completed.

    09/22/2004 11:55:57: MailScan-Addin: Found 1 Attachment

    09/22/2004 11:55:57:

    09/22/2004 11:55:57: MailScan-Addin: Scanning Attachment

    09/22/2004 11:55:57: MailScan-Addin: Filename podpis.TIF



    09/22/2004 11:55:57: MailScan-Addin: Creating Directory/local/notesdata/MailScan/163658

    09/22/2004 11:55:57: MailScan-Addin: Cleaning directory/local/notesdata/MailScan/163658

    09/22/2004 11:55:57: MailScan-Addin: Extracting to/local/notesdata/MailScan/163658/podpis.TIF

    09/22/2004 11:55:57: MailScan-Addin: Starting scanner with command:

    09/22/2004 11:55:57: MailScan-Addin: Extracting to/local/notesdata/MailScan/163658/podpis.TIF

    09/22/2004 11:55:57: MailScan-Addin: Directory/local/notesdata/MailScan/163658

    09/22/2004 11:55:57: MailScan-Addin: Directory/local/notesdata/MailScan/163658

    09/22/2004 11:55:57: MailScan-Addin: Returncode of virusscanner: 0

    09/22/2004 11:55:57: MailScan-Addin: Returncode Linux Virscan: 0

    09/22/2004 11:55:57: MailScan-Addin: Directory/local/notesdata/MailScan/163658

    09/22/2004 11:55:57: MailScan-Addin: Processing returncode

    09/22/2004 11:55:57: MailScan-Addin: Start of processRC

    09/22/2004 11:55:57: MailScan-Addin: Processing Subject

    09/22/2004 11:55:57: MailScan-Addin: Manipulating Subject by adding (Virusscanned by me) for rc0 before=1

    09/22/2004 11:55:57: MailScan-Addin: Processing Body

    09/22/2004 11:55:57: MailScan-Addin: Manipulating Body by adding for rc0

    09/22/2004 11:55:57: MailScan-Addin: Directory/local/notesdata/MailScan/163658

    09/22/2004 11:55:57: MailScan-Addin: Getting next attachment

    09/22/2004 11:55:57: MailScan-Addin: Directory/local/notesdata/MailScan/163658

    09/22/2004 11:55:57: MailScan-Addin: Processing delete for returncode 0

    09/22/2004 11:55:57: MailScan-Addin: Processing delete for returncode-index 0

    09/22/2004 11:55:57: MailScan-Addin: Start of processDelete

    09/22/2004 11:55:57: MailScan-Addin: Processing Bodies

    09/22/2004 11:55:57: MailScan-Addin: Calling EnumCompositeBuffer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: SIG_CD_HOTSPOTBEGIN found

    09/22/2004 11:55:57: MailScan-Addin: HOTSPOTREC_TYPE_FILE found

    09/22/2004 11:55:57: MailScan-Addin: found length one: 10

    09/22/2004 11:55:57: MailScan-Addin: attachment filename: podpis.TIF

    09/22/2004 11:55:57: MailScan-Addin: found file - length two: 10

    09/22/2004 11:55:57: MailScan-Addin: original filename: podpis.TIF

    09/22/2004 11:55:57: MailScan-Addin: written text: Suspicous attachment removed: podpis.TIF

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: End of SIG_CD_HOTSPOT found

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: Calling EnumCompositeBuffer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer by one

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: ProcessOneCDRecord

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer

    09/22/2004 11:55:57: MailScan-Addin: Advancing pointer by one

    09/22/2004 11:55:57: MailScan-Addin: Ready with body-items

    09/22/2004 11:55:57: MailScan-Addin: Deleting old Body-Items

    09/22/2004 11:55:57: MailScan-Addin: Appending new Body-Items

    09/22/2004 11:55:57: MailScan-Addin: Ready Appending new Body-Items

    09/22/2004 11:55:57: MailScan-Addin: Remove-filecode 1

    09/22/2004 11:55:57: MailScan-Addin: Moving Attachment

    09/22/2004 11:55:57: MailScan-Addin: New Mail From: CN=XXXXX XXXXXXXXXXX_O=XXXXX

    09/22/2004 11:55:57: MailScan-Addin: filename length 92

    09/22/2004 11:55:57: MailScan-Addin: New filename (part1) :/local/notesdata/MailScan/quara

    09/22/2004 11:55:57: MailScan-Addin: New filename (part2) :/local/notesdata/MailScan/quara/CN=XXXXX XXXXXXXXXX_O=XXXXX–163658–podpis.TIF–podpis.TIF

    09/22/2004 11:55:57: MailScan-Addin: Extracting attachment/local/notesdata/MailScan/quara/CN=XXXXX XXXXXXXXXX_O=XXXXX–163658–podpis.TIF–podpis.TIF for returncode 0



    User "notes" definitely can write to MailScan directory.



    Thanx for any help.

    • Tried to compile binaries from source - still got the same error! (-)

      By Vitaly Burchenkov 2 decades ago
      • Please try this

        By Hans-Georg Franke 2 decades ago

        Hi Vitaly,

        I think i 've found the error. Please change in processNote.c the lines 813 and 814



        if (szBuffer != NULL)

        free(szBuffer);<br/>
        



        to



        if (szFileBuffer != NULL)

        free(szFileBuffer);



        I will post MailScan 0.99d3 to fix this error, if the solution is acknowliged.

        Greetings Hans-Georg

        • Thanks, it works! (-)

          By Vitaly Burchenkov 2 decades ago