clamwin Version: 0.90.2.1


Summary:
when closing an open report, then: clamwin crashes (with clamwin I mean the clamwin which is created when the report is opened, not any other running clamwin)

Observed Result:
this happens ONLY when gflags is active for clamwin - without gflags it does not crash
(only when pageheap enabled - heap corruption)


Description:
0. gflags active for clamwin.exe (gflags.exe /i clamwin.exe +hpa)
1. I open the report "Virus Database Update Report"
2. click ok (to close the report)
3. clamwin crashes:




steps I used to reproduce the issue:
4. happens also with the report "Virus Scan report"
5. retry step1-2 or step4 a few times: crash happens always

6. when deactivating gflags: no crash happens

dumps:
full dump https://www.skilledtests.com/diverse/clamwin/gflags_close_opened_report/crash05.zip here (zipped: 23 MB)
resaved dump https://www.skilledtests.com/diverse/clamwin/gflags_close_opened_report/crash05_resave.zip here (zipped: 4 kb - but lesser info)
(please tell me, when you have copied the dumps, so I can remove them from the server due to space constraints. I could also upload more dumps if needed)


My Basic System Information:

OS Name
Microsoft® Windows® Server� Code Name "Longhorn" Datacenter
6.0.6001 Service Pack 1, v.126 Build 6001
AMD Athlon Xp 1800+, 1,25 GB RAM
(more info available on request by a msinfo32 file)



Erkan YILMAZ
blog: https://iaskquestions.com I ask questions



Microsoft (R) Windows Debugger Version 6.7.0005.0
Copyright (c) Microsoft Corporation. All rights reserved.

*** wait with pending attach
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
ModLoad: 00400000 0040c000 E:\Programme\ClamWin\bin\ClamWin.exe
ModLoad: 77340000 7745d000 C:\Windows\system32\ntdll.dll
ModLoad: 71640000 71671000 C:\Windows\system32\verifier.dll
ModLoad: 77000000 770d9000 C:\Windows\system32\kernel32.dll
ModLoad: 76e90000 76f2e000 C:\Windows\system32\USER32.dll
ModLoad: 75db0000 75dfb000 C:\Windows\system32\GDI32.dll
ModLoad: 76dc0000 76e82000 C:\Windows\system32\ADVAPI32.dll
ModLoad: 76f30000 76ff4000 C:\Windows\system32\RPCRT4.dll
ModLoad: 1e000000 1e0f1000 E:\Programme\ClamWin\bin\python23.dll
ModLoad: 75eb0000 7697f000 C:\Windows\system32\SHELL32.dll
ModLoad: 76bc0000 76c6a000 C:\Windows\system32\msvcrt.dll
ModLoad: 75e50000 75ea6000 C:\Windows\system32\SHLWAPI.dll
ModLoad: 77480000 7749e000 C:\Windows\system32\IMM32.DLL
ModLoad: 75ce0000 75da8000 C:\Windows\system32\MSCTF.dll
ModLoad: 774e0000 774e9000 C:\Windows\system32\LPK.DLL
ModLoad: 774f0000 7756d000 C:\Windows\system32\USP10.dll
ModLoad: 74900000 74a95000 C:\Windows\WinSxS\x86_microsoft.windows.common-cont
rols_6595b64144ccf1df_6.0.6001.16510_none_5cdca62408389a6a\comctl32.dll
ModLoad: 10000000 10011000 E:\Programme\ClamWin\lib\win32api.pyd
ModLoad: 74fc0000 74fc8000 C:\Windows\system32\VERSION.dll
ModLoad: 00380000 00397000 E:\Programme\ClamWin\lib\pywintypes23.dll
ModLoad: 76c70000 76db4000 C:\Windows\system32\ole32.dll
ModLoad: 76b30000 76bbc000 C:\Windows\system32\OLEAUT32.dll
ModLoad: 75a80000 75a94000 C:\Windows\system32\secur32.dll
ModLoad: 03700000 03924000 E:\Programme\ClamWin\lib\wxc.pyd
ModLoad: 03930000 03c63000 E:\Programme\ClamWin\lib\wxmsw24h.dll
ModLoad: 74420000 74452000 C:\Windows\system32\WINMM.dll
ModLoad: 743e0000 74419000 C:\Windows\system32\OLEACC.dll
ModLoad: 73900000 73987000 C:\Windows\WinSxS\x86_microsoft.windows.common-cont
rols_6595b64144ccf1df_5.82.6001.16510_none_886c71e650a2e1b7\COMCTL32.dll
ModLoad: 748c0000 748ff000 C:\Windows\system32\uxtheme.dll
ModLoad: 1e1e0000 1e1ee000 E:\Programme\ClamWin\lib\_sre.pyd
ModLoad: 1e1d0000 1e1dc000 E:\Programme\ClamWin\lib\_socket.pyd
ModLoad: 74e10000 74e17000 C:\Windows\system32\WSOCK32.dll
ModLoad: 774b0000 774dd000 C:\Windows\system32\WS2_32.dll
ModLoad: 774a0000 774a6000 C:\Windows\system32\NSI.dll
ModLoad: 060b0000 0612c000 E:\Programme\ClamWin\lib\_ssl.pyd
ModLoad: 1e1c0000 1e1c9000 E:\Programme\ClamWin\lib\_winreg.pyd
ModLoad: 003b0000 003c5000 E:\Programme\ClamWin\lib\win32gui.pyd
ModLoad: 76ab0000 76b24000 C:\Windows\system32\comdlg32.dll
ModLoad: 003f0000 003f6000 E:\Programme\ClamWin\lib\win32event.pyd
ModLoad: 01510000 01563000 E:\Programme\ClamWin\lib\pythoncom23.dll
ModLoad: 01580000 0159b000 E:\Programme\ClamWin\lib\shell.pyd
ModLoad: 027c0000 027d0000 E:\Programme\ClamWin\lib\win32security.pyd
ModLoad: 027d0000 027e4000 E:\Programme\ClamWin\lib\win32file.pyd
ModLoad: 75260000 7529c000 C:\Windows\system32\MSWSOCK.dll
ModLoad: 027f0000 027f6000 E:\Programme\ClamWin\lib\win32pipe.pyd
ModLoad: 04a80000 04a89000 E:\Programme\ClamWin\lib\win32process.pyd
ModLoad: 77470000 77477000 C:\Windows\system32\Psapi.dll
ModLoad: 078c0000 07907000 E:\Programme\ClamWin\lib\gizmosc.pyd
ModLoad: 04a90000 04a9f000 E:\Programme\ClamWin\lib\mxDateTime.pyd
ModLoad: 07e10000 07e40000 E:\Programme\ClamWin\lib\htmlc.pyd
ModLoad: 74320000 74326000 C:\Windows\system32\riched32.dll
ModLoad: 70900000 70974000 C:\Windows\system32\RICHED20.dll
(e54.af4): Access violation - code c0000005 (!!! second chance !!!)
eax=07ec8e90 ebx=07af0e90 ecx=08aedfc0 edx=07ec8e90 esi=08aeffe8 edi=08aedfc0
eip=039bf96d esp=0012f4c8 ebp=08ae7f88 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010202
*** ERROR: Symbol file could not be found. Defaulted to export symbols for E:\P
rogramme\ClamWin\lib\wxmsw24h.dll -
wxmsw24h!wxSizer::Clear+0x1d:
039bf96d c780c800000000000000 mov dword ptr [eax+0C8h],0 ds:0023:07ec8f58=??????
??

callstack:
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\W
indows\system32\ntdll.dll -
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
0012f4d0 039bf49a 00000000 07af0fb4 08ae7f88 wxmsw24h!wxSizer::Clear+0x1d
0012f4e0 039c0567 08ae7f88 037dd399 07af0e90 wxmsw24h!wxSizer::~wxSizer+0x1a
*** WARNING: Unable to verify checksum for E:\Programme\ClamWin\lib\wxc.pyd
*** ERROR: Symbol file could not be found. Defaulted to export symbols for E:\P
rogramme\ClamWin\lib\wxc.pyd -
0012f4e8 037dd399 07af0e90 039db555 00000001 wxmsw24h!wxFlexGridSizer::~wxFlexGr
idSizer+0x47
0012f4f0 039db555 00000001 00000000 03a85b8d wxc!initprintfwc+0x57a9
0012f4fc 03a85b8d 07af0fb4 07af0e90 00000000 wxmsw24h!wxWindowBase::~wxWindowBas
e+0xe5
00000000 00000000 00000000 00000000 00000000 wxmsw24h!wxWindow::~wxWindow+0xfd



ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be wrong.
0012f4d0 039bf49a wxmsw24h!wxSizer::Clear+0x1d
0012f4e0 039c0567 wxmsw24h!wxSizer::~wxSizer+0x1a
0012f4e8 037dd399 wxmsw24h!wxFlexGridSizer::~wxFlexGridSizer+0x47
0012f4f0 039db555 wxc!initprintfwc+0x57a9
0012f4fc 03a85b8d wxmsw24h!wxWindowBase::~wxWindowBase+0xe5
00000000 00000000 wxmsw24h!wxWindow::~wxWindow+0xfd


memory dump:
039bf96d c7 80 c8 00 00 00 00 00-00 00 8b 76 0c 85 f6 75 ...........v...u
039bf97d de 5f 8a 44 24 0c 84 c0-74 08 8b 55 00 8b cd ff ._.D$...t..U....
039bf98d 52 44 8d 4d 2c e8 79 c1-fe ff 5e 5d c2 04 00 90 RD.M,.y...^]....
039bf99d 90 90 90 56 8b 71 3c 85-f6 74 0f 8b 4e 08 8b 01 ...V.q<..t..N...
039bf9ad ff 50 10 8b 76 0c 85 f6-75 f1 5e c3 90 90 90 90 .P..v...u.^.....
039bf9bd 90 90 90 83 ec 08 53 56-8b 74 24 18 57 8b f9 8b ......SV.t$.W...
039bf9cd 06 8b ce ff 90 bc 00 00-00 84 c0 56 74 0e 8d 4c ...........Vt..L
039bf9dd 24 10 51 8b cf e8 d9 01-00 00 eb 0c 8d 54 24 10 $.Q..........T$.

it seams that used wxwindows (clamwin uses wxwin for the gui) it's not fully compatible with vista (are you using vista server or something right?)
it's difficult to use new wxwindows version since the code should be changed a lot
this mean some non trivial work by alch and remember changing devel environment can lead to new bugs
I'll discuss with alch about it

Hello Sherpya,

thank you for explaining the cause for the bug.

Yes, I have Windows Server 2008 (longhorn beta 3)
If you decide to pursue this, feel free to contact me regarding alpha/beta testing.

Erkan YILMAZ
blog: https://iaskquestions.com I ask questions