Cisco-Talos/clamav

freshclam clobbers existing valid signature files if it can't connect to the mirror

martinnehg opened this issue · 2 comments

Describe the bug

If freshclam cannot connect to a mirror to download virus signatures, it will first overwrite and clobber any existing any valid signature files and exit. freshclam should check first whether to the mirror before altering the existing signature files.

How to reproduce the problem

freshclam # download virus signatures
# disable internet
freshclam # clobbers existing virus signatures
clamd # observe failure to start due to "Malformed database" error

Attachments

N/A

Do you have any additional 3rd party signatures or just the standard daily, main, and bytecode signature files?

I could not reproduce this issue. Are you able to consistently reproduce it?

Please share the output of clamconf -n as well. it will tell us your version, what additional signature databases you're using, and any other unusual configuration options that may be required to reproduce this issue.