Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SR-3147] Trojan found in swift-lldb source #4578

Closed
swift-ci opened this issue Nov 6, 2016 · 4 comments
Closed

[SR-3147] Trojan found in swift-lldb source #4578

swift-ci opened this issue Nov 6, 2016 · 4 comments
Labels
bug Something isn't working LLDB for Swift

Comments

@swift-ci
Copy link

swift-ci commented Nov 6, 2016

Previous ID SR-3147
Radar None
Original Reporter hexdreamer (JIRA User)
Type Bug
Status Closed
Resolution Invalid
Additional Detail from JIRA
Votes 0
Component/s LLDB for Swift
Labels Bug
Assignee None
Priority Medium

md5: e30719da8abaa133d7d8a1bfb98694d2

Issue Description:

I'm using ClamAV on my computer, and it found this file:

swift-lldb/unittests/SymbolFile/PDB/Inputs/test-pdb.exe: Win.Trojan.Agent-1817571 FOUND

Beyond this, I know nothing else about the problem.

@belkadan
Copy link

belkadan commented Nov 7, 2016

I'm pretty sure this is bogus. It's a test file. But just in case…jingham@apple.com (JIRA User)

@swift-ci
Copy link
Author

swift-ci commented Nov 8, 2016

Comment by Jim Ingham (JIRA)

I forwarded this to lldb-dev where most of the Windows developers of lldb hang out. I'll relay back if I hear anything.

@swift-ci
Copy link
Author

swift-ci commented Nov 8, 2016

Comment by Jim Ingham (JIRA)

Zachary says:

The source code is here:

https://llvm.org/svn/llvm-project/lldb/branches/google/testing/unittests/SymbolFile/PDB/Inputs/test-pdb.cpp

And it definitely does nothing. Most of these AV are heuristic, it's probably suspicious about the fact that it's linked with unusual settings (ie /nodefaultlib) which we did in order to minimize the binary size (the pdb is quite large if we don't do this)

@swift-ci
Copy link
Author

swift-ci commented Nov 8, 2016

Comment by Jim Ingham (JIRA)

This is a slightly odd do nothing test program. It is fooling some AV program, but we don't want to have it do more than nothing to work around the AV identification or the file will get considerably bigger.

@swift-ci swift-ci transferred this issue from apple/swift-issues Apr 25, 2022
@shahmishal shahmishal transferred this issue from apple/swift May 7, 2022
This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working LLDB for Swift
Projects
None yet
Development

No branches or pull requests

2 participants