scamscan unrar running infinitely

[BlindDuck]

FirefoxCache.txt
msi.txt
StdErr-FirefoxCachfile.txt
StdErr-msi.txt

The single clamscan thread (version 1.5.1) got stuck while unrar a file.

The scan files (from lsof) are:

• a firefox cache file
• a windows msi file

OS: openSuSE Leap 15.3

command lines:
export DIR=ioW10Max ; clamscan -ir $DIR > StdOut-$DIR.txt 2> StdErr-$DIR.txt
export DIR=BrettlaLinux ; du -sh $DIR; date; clamscan -ir $DIR > StdOut-$DIR.txt 2> StdErr-$DIR.txt

The Std*.txt files are empty.

date;ps ax|grep clam
Thu Nov 6 09:38:15 CET 2025
3023 pts/14 R+ 13031:58 clamscan -ir --bell --stdout -ir BrettlaLinux
17748 pts/13 S+ 0:00 grep --color=auto clam
21394 ? Ss 0:11 /usr/local/bin/freshclam -d -c 24
23548 pts/15 R+ 18114:49 clamscan -ir --bell --stdout -ir ioW10Max

date; lsof |grep clamscan
Thu Nov 6 09:36:32 CET 2025
lsof: WARNING: can't stat() fuse.gvfsd-fuse file system /run/user/1000/gvfs
Output information may be incomplete.
lsof: WARNING: can't stat() fuse.portal file system /run/user/1000/doc
Output information may be incomplete.
clamscan 3023 YX cwd DIR 254,1 4096 89654091 /home/YX/Syncthing
clamscan 3023 YX rtd DIR 254,1 4096 2 /
clamscan 3023 YX txt REG 254,1 147152 203438489 /usr/local/bin/clamscan
clamscan 3023 YX mem REG 254,1 15984 203358719 /usr/lib64/gconv/UTF-16.so
clamscan 3023 YX mem REG 254,1 2227376 203328767 /usr/lib64/libstdc++.so.6.0.30
clamscan 3023 YX mem REG 254,1 249480 203441378 /usr/local/lib64/libclamunrar.so.12.1.0
clamscan 3023 YX mem REG 254,1 14376 203455806 /usr/local/lib64/libclamunrar_iface.so.12.1.0
clamscan 3023 YX mem REG 254,1 162000 26476654 /lib64/libpthread-2.31.so
clamscan 3023 YX mem REG 254,1 2296384 26476549 /lib64/libc-2.31.so
clamscan 3023 YX mem REG 254,1 18120 26476567 /lib64/libdl-2.31.so
clamscan 3023 YX mem REG 254,1 1463568 26476569 /lib64/libm-2.31.so
clamscan 3023 YX mem REG 254,1 44904 26476726 /lib64/librt-2.31.so
clamscan 3023 YX mem REG 254,1 17208 26476725 /lib64/libutil-2.31.so
clamscan 3023 YX mem REG 254,1 125640 26476703 /lib64/libgcc_s.so.1
clamscan 3023 YX mem REG 254,1 76104 203438509 /usr/local/lib64/libclammspack.so.0.8.0
clamscan 3023 YX mem REG 254,1 20971176 203438503 /usr/local/lib64/libclamav.so.12.1.0
clamscan 3023 YX mem REG 254,1 202656 26476732 /lib64/ld-2.31.so
clamscan 3023 YX mem REG 254,1 26988 203358730 /usr/lib64/gconv/gconv-modules.cache
clamscan 3023 YX mem REG 254,1 340800 204276609 /usr/lib/locale/de_DE.utf8/LC_CTYPE
clamscan 3023 YX 0u CHR 136,14 0t0 17 /dev/pts/14
clamscan 3023 YX 1w REG 254,1 0 89679141 /home/YX/Syncthing/StdOut-BrettlaLinux.txt
clamscan 3023 YX 2w REG 254,1 0 89680318 /home/YX/Syncthing/StdErr-BrettlaLinux.txt
clamscan 3023 YX 3r DIR 254,1 4096 83038246 /home/YX/Syncthing/BrettlaLinux
clamscan 3023 YX 4r DIR 254,1 4096 83038247 /home/YX/Syncthing/BrettlaLinux/YX
clamscan 3023 YX 5r DIR 254,1 4096 83038252 /home/YX/Syncthing/BrettlaLinux/YX/.cache
clamscan 3023 YX 6r DIR 254,1 4096 83958244 /home/YX/Syncthing/BrettlaLinux/YX/.cache/mozilla
clamscan 3023 YX 7r DIR 254,1 4096 86705018 /home/YX/Syncthing/BrettlaLinux/YX/.cache/mozilla/firefox
clamscan 3023 YX 8r DIR 254,1 4096 86705021 /home/YX/Syncthing/BrettlaLinux/YX/.cache/mozilla/firefox/oadqdg37.default-release
clamscan 3023 YX 9r DIR 254,1 4096 86842492 /home/YX/Syncthing/BrettlaLinux/YX/.cache/mozilla/firefox/oadqdg37.default-release/cache2
clamscan 3023 YX 10r DIR 254,1 3002368 86905864 /home/YX/Syncthing/BrettlaLinux/YX/.cache/mozilla/firefox/oadqdg37.default-release/cache2/entries
clamscan 3023 YX 11r REG 254,1 195286 86920562 /home/YX/Syncthing/BrettlaLinux/YX/.cache/mozilla/firefox/oadqdg37.default-release/cache2/entries/4BC2BECA7476244262A565F3D3D78B7C02AC1CFE
clamscan 23548 YX cwd DIR 254,1 4096 89654091 /home/YX/Syncthing
clamscan 23548 YX rtd DIR 254,1 4096 2 /
clamscan 23548 YX txt REG 254,1 147152 203438489 /usr/local/bin/clamscan
clamscan 23548 YX mem REG 254,1 15984 203358719 /usr/lib64/gconv/UTF-16.so
clamscan 23548 YX mem REG 254,1 2227376 203328767 /usr/lib64/libstdc++.so.6.0.30
clamscan 23548 YX mem REG 254,1 249480 203441378 /usr/local/lib64/libclamunrar.so.12.1.0
clamscan 23548 YX mem REG 254,1 14376 203455806 /usr/local/lib64/libclamunrar_iface.so.12.1.0
clamscan 23548 YX mem REG 254,1 162000 26476654 /lib64/libpthread-2.31.so
clamscan 23548 YX mem REG 254,1 2296384 26476549 /lib64/libc-2.31.so
clamscan 23548 YX mem REG 254,1 18120 26476567 /lib64/libdl-2.31.so
clamscan 23548 YX mem REG 254,1 1463568 26476569 /lib64/libm-2.31.so
clamscan 23548 YX mem REG 254,1 44904 26476726 /lib64/librt-2.31.so
clamscan 23548 YX mem REG 254,1 17208 26476725 /lib64/libutil-2.31.so
clamscan 23548 YX mem REG 254,1 125640 26476703 /lib64/libgcc_s.so.1
clamscan 23548 YX mem REG 254,1 76104 203438509 /usr/local/lib64/libclammspack.so.0.8.0
clamscan 23548 YX mem REG 254,1 20971176 203438503 /usr/local/lib64/libclamav.so.12.1.0
clamscan 23548 YX mem REG 254,1 202656 26476732 /lib64/ld-2.31.so
clamscan 23548 YX mem REG 254,1 26988 203358730 /usr/lib64/gconv/gconv-modules.cache
clamscan 23548 YX mem REG 254,1 340800 204276609 /usr/lib/locale/de_DE.utf8/LC_CTYPE
clamscan 23548 YX 0u CHR 136,15 0t0 18 /dev/pts/15
clamscan 23548 YX 1w REG 254,1 0 89656929 /home/YX/Syncthing/StdOut-ioW10Max.txt (deleted)
clamscan 23548 YX 2w REG 254,1 0 89672301 /home/YX/Syncthing/StdErr-ioW10Max.txt (deleted)
clamscan 23548 YX 3r DIR 254,1 4096 89658010 /home/YX/Syncthing/ioW10Max
clamscan 23548 YX 4r DIR 254,1 45056 89723415 /home/YX/Syncthing/ioW10Max/Downloads
clamscan 23548 YX 5r DIR 254,1 4096 89934212 /home/YX/Syncthing/ioW10Max/Downloads/HoTT_Software_V4_041224
clamscan 23548 YX 6r DIR 254,1 4096 89934213 /home/YX/Syncthing/ioW10Max/Downloads/HoTT_Software_V4_041224/HoTT_Software_V4
clamscan 23548 YX 7r DIR 254,1 4096 89934302 /home/YX/Syncthing/ioW10Max/Downloads/HoTT_Software_V4_041224/HoTT_Software_V4/Util
clamscan 23548 YX 8r DIR 254,1 4096 89934304 /home/YX/Syncthing/ioW10Max/Downloads/HoTT_Software_V4_041224/HoTT_Software_V4/Util/Graupner HoTT Tools MSI 1.0.1408
clamscan 23548 YX 9r REG 254,1 97943592 89934990 /home/YX/Syncthing/ioW10Max/Downloads/HoTT_Software_V4_041224/HoTT_Software_V4/Util/Graupner HoTT Tools MSI 1.0.1408/FirmwareUpdater.msi
clamscan 23548 YX 10u REG 254,1 27138 69662811 /tmp/clamav-b4b36d25fe22115975160035469a96c1.tmp

[val-ms]

I think you ran into a bug we discovered a few weeks back in one of our library dependencies. We contacted the developer and they've made a fix. We'll use the fixed version when it's available when we publish the 1.5.2 version.

[val-ms]

@BlindDuck please don't make files publicly available that crash or cause infinite loops or other potential denial-of-service type issues. I deleted the attachment after grabbing a copy. In the future please offer to send it privately, or go through our vulnerability reporting process.

[val-ms]

Oh regarding the 1.5.2 release date, we have a planned release in January so that would be the very latest. I would like to patch this issue sooner if possible. But I don't have a timeline for it.