clamav-users October 2011 archive
Main Archive Page > Month Archives  > clamav-users archives
clamav-users: Re: [clamav-users] clamd unexpected termination: &

Re: [clamav-users] clamd unexpected termination: "... Failure in bytecode testmode"

From: Pierre Dehaen <dehaenp_at_nospam>
Date: Mon Oct 24 2011 - 12:48:13 GMT
To: clamav-users@lists.clamav.net

On 24 Oct 2011 at 15:44, Török Edwin wrote:

> On 2011-10-24 15:40, Pierre Dehaen wrote:
> > On 24 Oct 2011 at 15:23, Török Edwin wrote:
> >
> >> On 2011-10-24 15:03, Török Edwin wrote:
> >>> On 2011-10-24 14:55, Matthias Egger wrote:
> >>>> Hello all
> >>>>
> >>>> On 24.10.2011 12:13, Matthew Slowe wrote:
> >>>>> I'm seeing a problem on a bunch of Solaris 10 SPARC servers running 0.97.x since about 00:55 BST this morning.
> >>>>
> >>>> Just wanted to confirm what Matthew sees.
> >>>>
> >>>> * Also on Solaris 10 SPARC Machines
> >>>> * Same Error since 01:52 MEST this Morning (which should be 00:55 BST?)
> >>>> * Error occurs every 10 Minutes (SelfCheck 600)
> >>>> * upgraded from 0.97.1 to 0.97.3 from scratch (with new definitions)
> >>>>
> >>>> Since we monitor the service it get's restarted every 10min, but this creates always a warning. So i prefer to solve the problem :-)
> >>>
> >>> I just published bytecode.cvd version 150 (and 151 should come out soon too). Does it fix the problem?
> >>
> >> 152 is out which should include the fix for this crash on Sparc.
> >> Once it reaches your mirrors and freshclam confirms that you got bytecode.cvd 152 can you test again to
> >> see if it fixed the crash for you?
> >>
> > Edwin,
> >
> > The update just hit my server 2 minutes ago. In freshclam.log:
> >
> > ClamAV update process started at Mon Oct 24 14:37:00 2011
> > main.cld is up to date (version: 54, sigs: 1044387, f-level: 60, builder: sven)
> > daily.cld is up to date (version: 13843, sigs: 15910, f-level: 60, builder: guitar)
> > Downloading bytecode-150.cdiff [100%]
> > Downloading bytecode-151.cdiff [100%]
> > Downloading bytecode-152.cdiff [100%]
> > bytecode.cld updated (version: 152, sigs: 38, f-level: 60, builder: edwin)
> > Database updated (1060335 signatures) from db.be.clamav.net (IP: 193.1.193.64)
> > Clamd successfully notified about the update.
> >
> > In clamd.log:
> > Mon Oct 24 14:36:15 2011 -> Algorithmic detection enabled.
> > Mon Oct 24 14:36:15 2011 -> Portable Executable support enabled.
> > Mon Oct 24 14:36:15 2011 -> ELF support enabled.
> > Mon Oct 24 14:36:15 2011 -> Mail files support enabled.
> > Mon Oct 24 14:36:15 2011 -> OLE2 support enabled.
> > Mon Oct 24 14:36:15 2011 -> PDF support enabled.
> > Mon Oct 24 14:36:15 2011 -> HTML support enabled.
> > Mon Oct 24 14:36:15 2011 -> Self checking every 600 seconds.
> > Mon Oct 24 14:36:15 2011 -> /var/run/MIMEDefang/mdefang-
> > p9OCaCjA011594/Work/INPUTMBOX: Sanesecurity.Jurlbl.14950.UNOFFICIAL FOUND
> > Mon Oct 24 14:37:06 2011 -> Reading databases from /opt/clamav/share/clamav
> > Mon Oct 24 14:37:27 2011 -> ERROR: Database initialization error: can't compile engine:
> > Failure in bytecode testmode
>
> Yes it still had the old one loaded, when you restart clamd now does it work?
> Try clamdscan --reload and see if it still gives the ERROR.

It looks good ! clamdscan --reload gives:
Mon Oct 24 14:47:42 2011 -> Reading databases from /opt/clamav/share/clamav
Mon Oct 24 14:48:04 2011 -> Database correctly reloaded (1159407 signatures)

Thank you Edwin !

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml