From owner-freebsd-questions@FreeBSD.ORG Sun Oct 5 10:03:38 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 715D616A4B3 for ; Sun, 5 Oct 2003 10:03:38 -0700 (PDT) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [81.2.69.218]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1C2E843FBF for ; Sun, 5 Oct 2003 10:03:37 -0700 (PDT) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost [127.0.0.1]) h95H3W9E061168 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 5 Oct 2003 18:03:33 +0100 (BST) (envelope-from matthew@happy-idiot-talk.infracaninophile.co.uk) Received: (from matthew@localhost)id h95H3WBq061167; Sun, 5 Oct 2003 18:03:32 +0100 (BST) (envelope-from matthew) Date: Sun, 5 Oct 2003 18:03:32 +0100 From: Matthew Seaman To: G D McKee Message-ID: <20031005170332.GB60739@happy-idiot-talk.infracaninophile.co.uk> Mail-Followup-To: Matthew Seaman , G D McKee , freebsd-questions@freebsd.org References: <00bd01c38b52$386c0bd0$c700a8c0@p2000> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="8P1HSweYDcXXzwPJ" Content-Disposition: inline In-Reply-To: <00bd01c38b52$386c0bd0$c700a8c0@p2000> User-Agent: Mutt/1.5.4i X-Spam-Status: No, hits=-4.9 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.60 X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on happy-idiot-talk.infracaninophile.co.uk cc: freebsd-questions@freebsd.org Subject: Re: ClamAV Not Compiling Properly X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Oct 2003 17:03:38 -0000 --8P1HSweYDcXXzwPJ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Oct 05, 2003 at 02:16:55PM +0100, G D McKee wrote: > Every time I try to compile clamav I get the following error. Has anyone= got any ideas how to fix it? >=20 > Thanks in advance >=20 > Gordon >=20 > uname -a > FreeBSD kursk.gdmckee.home 4.9-RC FreeBSD 4.9-RC #0: Sun Oct 5 13:54:04 = BST 2003 gdm@kursk.gdmckee.home:/usr/obj/usr/src/sys/GDMCKEE i386 >=20 >=20 > cc -O -pipe -march=3Dpentium -I/usr/local/include -O -o .libs/clamdscan o= ptions.o clamdscan.o client.o ../clamscan/getopt.o ../clamscan/others.o ../= clamd/cfgfile.o -L/usr/ports/security/clamav/work/clamav-0.60/libclamav /u= sr/ports/security/clamav/work/clamav-0.60/libclamav/.libs/libclamav.so -lci= pher -lz -lbz2 -lc_r -Wl,--rpath -Wl,/usr/local/lib > /usr/lib/libc.so: warning: this program uses gets(), which is unsafe. > /usr/lib/libc.so: warning: mktemp() possibly used unsafely; consider usin= g mkstemp() > /usr/lib/libc.so: warning: tmpnam() possibly used unsafely; consider usin= g mkstemp() > /usr/lib/libc.so: warning: this program uses f_prealloc(), which is not r= ecommended. > /usr/lib/libc.so: warning: tempnam() possibly used unsafely; consider usi= ng mkstemp() > creating clamdscan > gmake[1]: Leaving directory `/usr/ports/security/clamav/work/clamav-0.60/= clamdscan' > Making all in clamav-milter > gmake[1]: Entering directory `/usr/ports/security/clamav/work/clamav-0.60= /clamav-milter' > gmake[1]: Nothing to be done for `all'. > gmake[1]: Leaving directory `/usr/ports/security/clamav/work/clamav-0.60/= clamav-milter' > Making all in etc > gmake[1]: Entering directory `/usr/ports/security/clamav/work/clamav-0.60= /etc' > gmake[1]: Nothing to be done for `all'. > gmake[1]: Leaving directory `/usr/ports/security/clamav/work/clamav-0.60/= etc' > gmake[1]: Entering directory `/usr/ports/security/clamav/work/clamav-0.60' > gmake[1]: Nothing to be done for `all-am'. > gmake[1]: Leaving directory `/usr/ports/security/clamav/work/clamav-0.60 Err... I see no errors here. Plenty of warnings, but no errors. gmake prints out some quite distinctive messages when one of the commands it runs returns a failure error code, but that hasn't happened here. Looks like the compilation actually worked. The warnings arise because the clamav code used C API which are hard to use correctly and without exposing the code to potential buffer overflows or other attacks that can lead to privilege escalation, or worse. Submitting patches back to the clamav project to substitute better API and silence these warnings would be a good deed for the day. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK --8P1HSweYDcXXzwPJ Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (FreeBSD) iD8DBQE/gE7kdtESqEQa7a0RAjQCAKCXJaoZ9krWzZgLWuHx5okgL6fX8QCfUbYW AhiffzVyBQwk9ijuC+st3oA= =+gkx -----END PGP SIGNATURE----- --8P1HSweYDcXXzwPJ--