Date: Sun, 5 Oct 2003 18:03:32 +0100 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: G D McKee <freebsd@gdmckee.com> Cc: freebsd-questions@freebsd.org Subject: Re: ClamAV Not Compiling Properly Message-ID: <20031005170332.GB60739@happy-idiot-talk.infracaninophile.co.uk> In-Reply-To: <00bd01c38b52$386c0bd0$c700a8c0@p2000> References: <00bd01c38b52$386c0bd0$c700a8c0@p2000>
next in thread | previous in thread | raw e-mail | index | archive | help
--8P1HSweYDcXXzwPJ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Sun, Oct 05, 2003 at 02:16:55PM +0100, G D McKee wrote:
> Every time I try to compile clamav I get the following error. Has anyone=
got any ideas how to fix it?
>=20
> Thanks in advance
>=20
> Gordon
>=20
> uname -a
> FreeBSD kursk.gdmckee.home 4.9-RC FreeBSD 4.9-RC #0: Sun Oct 5 13:54:04 =
BST 2003 gdm@kursk.gdmckee.home:/usr/obj/usr/src/sys/GDMCKEE i386
>=20
>=20
> cc -O -pipe -march=3Dpentium -I/usr/local/include -O -o .libs/clamdscan o=
ptions.o clamdscan.o client.o ../clamscan/getopt.o ../clamscan/others.o ../=
clamd/cfgfile.o -L/usr/ports/security/clamav/work/clamav-0.60/libclamav /u=
sr/ports/security/clamav/work/clamav-0.60/libclamav/.libs/libclamav.so -lci=
pher -lz -lbz2 -lc_r -Wl,--rpath -Wl,/usr/local/lib
> /usr/lib/libc.so: warning: this program uses gets(), which is unsafe.
> /usr/lib/libc.so: warning: mktemp() possibly used unsafely; consider usin=
g mkstemp()
> /usr/lib/libc.so: warning: tmpnam() possibly used unsafely; consider usin=
g mkstemp()
> /usr/lib/libc.so: warning: this program uses f_prealloc(), which is not r=
ecommended.
> /usr/lib/libc.so: warning: tempnam() possibly used unsafely; consider usi=
ng mkstemp()
> creating clamdscan
> gmake[1]: Leaving directory `/usr/ports/security/clamav/work/clamav-0.60/=
clamdscan'
> Making all in clamav-milter
> gmake[1]: Entering directory `/usr/ports/security/clamav/work/clamav-0.60=
/clamav-milter'
> gmake[1]: Nothing to be done for `all'.
> gmake[1]: Leaving directory `/usr/ports/security/clamav/work/clamav-0.60/=
clamav-milter'
> Making all in etc
> gmake[1]: Entering directory `/usr/ports/security/clamav/work/clamav-0.60=
/etc'
> gmake[1]: Nothing to be done for `all'.
> gmake[1]: Leaving directory `/usr/ports/security/clamav/work/clamav-0.60/=
etc'
> gmake[1]: Entering directory `/usr/ports/security/clamav/work/clamav-0.60'
> gmake[1]: Nothing to be done for `all-am'.
> gmake[1]: Leaving directory `/usr/ports/security/clamav/work/clamav-0.60
Err... I see no errors here. Plenty of warnings, but no errors.
gmake prints out some quite distinctive messages when one of the
commands it runs returns a failure error code, but that hasn't
happened here. Looks like the compilation actually worked.
The warnings arise because the clamav code used C API which are hard
to use correctly and without exposing the code to potential buffer
overflows or other attacks that can lead to privilege escalation, or
worse. Submitting patches back to the clamav project to substitute
better API and silence these warnings would be a good deed for the
day.
Cheers,
Matthew
--=20
Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks
Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614 Bucks., SL7 1TH UK
--8P1HSweYDcXXzwPJ
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (FreeBSD)
iD8DBQE/gE7kdtESqEQa7a0RAjQCAKCXJaoZ9krWzZgLWuHx5okgL6fX8QCfUbYW
AhiffzVyBQwk9ijuC+st3oA=
=+gkx
-----END PGP SIGNATURE-----
--8P1HSweYDcXXzwPJ--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031005170332.GB60739>