llvm dev - Jun 2012 - [LLVMdev] Windows development and "virus" in LLVM test suite

Hi,

I just filed a bug because LLVM's test suite includes a virus.  This is not
normally a problem on Unix (not even Linux), but as everyone know, Windows
is so vulnerable to vira, that Windows users have to have an antivirus
solution installed.  The problem is that the virus in:


projects/test-suite/MultiSource/Applicaations/ClamAV/inputs/rtf-test/rtf1.rtf

BREAKS the SVN pull of the LLVM test suite: Once the file is read onto
disk, the antivirus solution aborts the SVN pull because SVN cannot access
the file anymore.

I filed a bug to have the offending file removed from LLVM, but it was
immediately closed with a WONTFIX flag.

So, I am asking here, in the greater context of the LLVMdev mailing list,
what can be done to fix the presence of a "virus" in LLVM permanently?
It
is not acceptable to have to ask people to uninstall their antivirus
solution if they want to use the test suite on Windows.

The problem occurs with Microsoft Security Essentials (the poorest
antivirus solution in existence), so it is likely to occur with many
antivirus solutions.

A quite from Wikipedia regarding the file:

 A compliant virus scanner, when detecting the file, will respond in
exactly the same manner as if it found genuinely harmful code.

So any compliant virus scanner will choke and panic upon encountering this
file!


Cheers,
Mikael
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.llvm.org/pipermail/llvm-dev/attachments/20120615/65c530ca/attachment.html>

On Fri, Jun 15, 2012 at 1:02 PM, Mikael Lyngvig <mikael at lyngvig.org>
wrote:
> Hi,
>
> I just filed a bug because LLVM's test suite includes a virus.  This is
not
> normally a problem on Unix (not even Linux), but as everyone know, Windows
> is so vulnerable to vira, that Windows users have to have an antivirus
> solution installed.  The problem is that the virus in:
>
>
>
 projects/test-suite/MultiSource/Applicaations/ClamAV/inputs/rtf-test/rtf1.rtf
>
> BREAKS the SVN pull of the LLVM test suite: Once the file is read onto
disk,
> the antivirus solution aborts the SVN pull because SVN cannot access the
> file anymore.
>
> I filed a bug to have the offending file removed from LLVM, but it was
> immediately closed with a WONTFIX flag.
>
> So, I am asking here, in the greater context of the LLVMdev mailing list,
> what can be done to fix the presence of a "virus" in LLVM
permanently? It is
> not acceptable to have to ask people to uninstall their antivirus solution
> if they want to use the test suite on Windows.
>
> The problem occurs with Microsoft Security Essentials (the poorest
antivirus
> solution in existence), so it is likely to occur with many antivirus
> solutions.
>
> A quite from Wikipedia regarding the file:
>
>  A compliant virus scanner, when detecting the file, will respond in
exactly
> the same manner as if it found genuinely harmful code.
>
> So any compliant virus scanner will choke and panic upon encountering this
> file!
>
>
> Cheers,
> Mikael
>
> _______________________________________________
> LLVM Developers mailing list
> LLVMdev at cs.uiuc.edu         http://llvm.cs.uiuc.edu
> http://lists.cs.uiuc.edu/mailman/listinfo/llvmdev
>
Tell your AV to ignore that folder and program. I don't have an issue
with it on Windows.

- Michael Spencer

On Fri, Jun 15, 2012 at 3:48 PM, Michael Spencer <bigcheesegs at
gmail.com> wrote:
> On Fri, Jun 15, 2012 at 1:02 PM, Mikael Lyngvig <mikael at
lyngvig.org> wrote:
>> Hi,
>>
>> I just filed a bug because LLVM's test suite includes a virus.
 This is not
>> normally a problem on Unix (not even Linux), but as everyone know,
Windows
>> is so vulnerable to vira, that Windows users have to have an antivirus
>> solution installed.  The problem is that the virus in:
>>
>>
>>
 projects/test-suite/MultiSource/Applicaations/ClamAV/inputs/rtf-test/rtf1.rtf
>>
>> BREAKS the SVN pull of the LLVM test suite: Once the file is read onto
disk,
>> the antivirus solution aborts the SVN pull because SVN cannot access
the
>> file anymore.
>>
>> I filed a bug to have the offending file removed from LLVM, but it was
>> immediately closed with a WONTFIX flag.
>>
>> So, I am asking here, in the greater context of the LLVMdev mailing
list,
>> what can be done to fix the presence of a "virus" in LLVM
permanently? It is
>> not acceptable to have to ask people to uninstall their antivirus
solution
>> if they want to use the test suite on Windows.
>>
>> The problem occurs with Microsoft Security Essentials (the poorest
antivirus
>> solution in existence), so it is likely to occur with many antivirus
>> solutions.
>>
>> A quite from Wikipedia regarding the file:
>>
>>  A compliant virus scanner, when detecting the file, will respond in
exactly
>> the same manner as if it found genuinely harmful code.
>>
>> So any compliant virus scanner will choke and panic upon encountering
this
>> file!
>>
>>
>> Cheers,
>> Mikael
>>
>> _______________________________________________
>> LLVM Developers mailing list
>> LLVMdev at cs.uiuc.edu         http://llvm.cs.uiuc.edu
>> http://lists.cs.uiuc.edu/mailman/listinfo/llvmdev
>>
>
> Tell your AV to ignore that folder and program. I don't have an issue
> with it on Windows.
Agreed -- and I'm using MS Security Essentials too, FWIW.  ;-)

~Aaron

1. I can't tell Microsoft Security Essentials to ignore anything.  Even if
I click Allow, it breaks the pull.
2. The issue is not me.  I don't download virus infested stuff and I
don't
visit dangerous sites so I rarely have a need for antivirus solutions.

The issue is the newcomer Windows user whom I have to instruct to disable
and/or remove his antivirus program if he or she wants to set up a Windows
buildbot slave.  A bit drastic, but that's life as it is now.

2012/6/15 Michael Spencer <bigcheesegs at gmail.com>
> On Fri, Jun 15, 2012 at 1:02 PM, Mikael Lyngvig <mikael at
lyngvig.org>
> wrote:
> > Hi,
> >
> > I just filed a bug because LLVM's test suite includes a virus. 
This is
> not
> > normally a problem on Unix (not even Linux), but as everyone know,
> Windows
> > is so vulnerable to vira, that Windows users have to have an antivirus
> > solution installed.  The problem is that the virus in:
> >
> >
> >
> 
projects/test-suite/MultiSource/Applicaations/ClamAV/inputs/rtf-test/rtf1.rtf
> >
> > BREAKS the SVN pull of the LLVM test suite: Once the file is read onto
> disk,
> > the antivirus solution aborts the SVN pull because SVN cannot access
the
> > file anymore.
> >
> > I filed a bug to have the offending file removed from LLVM, but it was
> > immediately closed with a WONTFIX flag.
> >
> > So, I am asking here, in the greater context of the LLVMdev mailing
list,
> > what can be done to fix the presence of a "virus" in LLVM
permanently?
> It is
> > not acceptable to have to ask people to uninstall their antivirus
> solution
> > if they want to use the test suite on Windows.
> >
> > The problem occurs with Microsoft Security Essentials (the poorest
> antivirus
> > solution in existence), so it is likely to occur with many antivirus
> > solutions.
> >
> > A quite from Wikipedia regarding the file:
> >
> >  A compliant virus scanner, when detecting the file, will respond in
> exactly
> > the same manner as if it found genuinely harmful code.
> >
> > So any compliant virus scanner will choke and panic upon encountering
> this
> > file!
> >
> >
> > Cheers,
> > Mikael
> >
> > _______________________________________________
> > LLVM Developers mailing list
> > LLVMdev at cs.uiuc.edu         http://llvm.cs.uiuc.edu
> > http://lists.cs.uiuc.edu/mailman/listinfo/llvmdev
> >
>
> Tell your AV to ignore that folder and program. I don't have an issue
> with it on Windows.
>
> - Michael Spencer
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.llvm.org/pipermail/llvm-dev/attachments/20120615/af20aa74/attachment.html>