Bug 22437 - Editing a blank document generates fsav (linux) virus
Summary: Editing a blank document generates fsav (linux) virus
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Red Hat Linux
Classification: Retired
Component: file
Version: 7.0
Hardware: i686
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Trond Eivind Glomsrxd
QA Contact: Aaron Brown
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2000-12-18 07:21 UTC by Need Real Name
Modified: 2007-04-18 16:30 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2000-12-18 07:21:10 UTC
Embargoed:


Attachments (Terms of Use)

Description Need Real Name 2000-12-18 07:21:08 UTC
If you create a new document, of ASCII text with emacs (GNU Emacs 20.7.1
(i386-redhat-linux-gnu, X toolkit) of Tue Oct 10 2000 on porky.) and
populate that file with text you cat cut and pasted from another window,
the file gets the wrong magic number.
When you run file from the command line you will get an error like:

fsav (linux) virus (29811-74)

The hard part is that the text has to be of sufficent length and contain no
"#" sybols for this error to occur (meaning that if you try this with say
/etc/printcap you will not be able to duplicate the error.)

I have enclosed a piece of test text that will do the trick.  The test text
is delimited by "==CUT HERE==" at the beginning and end of the text.

==CUT HERE==
Hi Sean,
Just wanted to follow-up on mom & dad's gift and Moriarty. Did you have a
chance to visit the links? I'll be in Moriarty on Friday. I was hoping
maybe we could go to ABQ. on Sat. I think I just need to replace the fan on
my computer. As for gifts, here's my list. In any event, just let me know
your thoughts. Thanks.
Michael
 
CDs
The Outfield - Play Deep
or
Grease - The Soundtrack
 
Those are old CDs and if you can't find them, consider a DVD. Although I
don't own a DVD player yet, I will be purchasing one in the next year.
 
True Romance (1993)
or
Terminator 2: Judgment Day (1991)
or
Thelma & Louise (1991)
==CUT HERE==

Comment 1 Trond Eivind Glomsrxd 2000-12-18 15:15:16 UTC
This was an error in the magic file, which had a bad check - this has been fixed
in file-3.33-1, currently in Rawhide.


Note You need to log in before you can comment on or make changes to this bug.