bugGNU Octave - Bugs: bug #48530, share/nsis/Bin/zip2exe.exe : virus...

 
 

bug #48530: share/nsis/Bin/zip2exe.exe : virus positive in mxe with --enable-windows64 build

Submitted by:  Tatsuro MATSUOKA <tmacchant>
Submitted on:  Sat 16 Jul 2016 02:08:32 AM UTC  
 
Category: Configuration and Build SystemSeverity: 3 - Normal
Priority: 5 - NormalItem Group: Other
Status: FixedAssigned to: John Donoghue <lostbard>
Originator Name: Open/Closed: Closed
Release: otherOperating System: Microsoft Windows

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

(Jump to the original submission Jump to the original submission)

Thu 24 Nov 2016 08:12:48 AM UTC, comment #6:

My corporate proxy still sees https://ftp.gnu.org/gnu/octave/windows/octave-4.2.0-w64-installer.exe as spyware and won't let me download it. w32 download worked fine.

I couldn't really check the installer on VirusTotal as the file size is above 32MB:

https://www.virustotal.com/en/url/2760f2e0e8dd6aa33cd4d2ecce6a67239241065310ae9d96146389c2f91441f7/analysis/

Anonymous
Wed 20 Jul 2016 12:44:48 AM UTC, comment #5:

I have deleted usr/x86_64-w64-mingw32/share/nsis and execute hg pull, hg update, autoconf, and configure and make nsis-installer.

The new installer file does not contain share/nsis directory.
Thus the problem no longer will happen.

Please change status from Ready For Test to Fixed and close this report.

Tatsuro MATSUOKA <tmacchant>
Tue 19 Jul 2016 08:49:43 PM UTC, comment #4:

Pushed changeset http://hg.octave.org/mxe-octave/rev/1d86cb0348ff

John Donoghue <lostbard>
Project MemberIn charge of this item.
Mon 18 Jul 2016 12:35:52 AM UTC, comment #3:

comment #2

I agree with not including the nsis files in the installer ant it is practical solution for this issue.

Tatsuro MATSUOKA <tmacchant>
Sun 17 Jul 2016 12:19:36 PM UTC, comment #2:

I dont think any of the nsis files are needed except for generating the installer in linux, so it could probally be changed to not install any of those files, and save a little on installer exe size.

John Donoghue <lostbard>
Project MemberIn charge of this item.
Sat 16 Jul 2016 11:23:26 PM UTC, comment #1:

Workaround is to delete usr/x86_64-w64-mingw32/share/nsis/Bin/zip2exe.exe and execute "make nsis-installer".
Then the installer file does not contain zip2exe.exe.

Fortunately zip2exe.exe is not related to octave execution.

Tatsuro MATSUOKA <tmacchant>
Sat 16 Jul 2016 02:08:32 AM UTC, original submission:

David reported that in the below octave ML thread

http://octave.1599824.n4.nabble.com/octave-4-0-3-64-bit-binaries-for-windows-td4678168.html

share/nsis/Bin/zip2exe.exe in my 64 bit binary distribution is virus positive

The results by the Virus Total [1],

13/52 (positive/total)

I have built 32bit octave-4.0.3 for windows by mxe-octave,
and scanned share/nsis/Bin/zip2exe.exe by the Viurs Total.
No positive results appeared, which is the same as that in octave-4.0.3 in octave official site.

The executable zip2exe.exe is 32bit application and may be produced by mingw w64 gcc with muliti-lib on 64 bit build. I suspect that the difference is occurred that cause may cause (perhaps false) positive on some virus software.

[1] https://www.virustotal.com/

Tatsuro MATSUOKA <tmacchant>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by lostbard (Posted a comment)
  • -unavailable- added by tmacchant (Submitted the item)
  • -unavailable- added by tmacchant (Person who pointed out the issue)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only project members can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 5 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Wed 20 Jul 2016 10:17:55 AM UTClostbardStatusReady For Test=>Fixed
      Open/ClosedOpen=>Closed
    Tue 19 Jul 2016 08:49:43 PM UTClostbardStatusNone=>Ready For Test
      Assigned toNone=>lostbard
    Sat 16 Jul 2016 02:08:32 AM UTCtmacchantCarbon-Copy-=>Added davidcoe

    Back to the top


    Powered by Savane 3.1-cleanup1