Scan Engine returns a "Malformed container" error for non-PDF files that contain the string "%PDF" in the first 1024 bytes

Article:TECH169726  |  Created: 2011-09-16  |  Updated: 2012-08-01  |  Article URL http://www.symantec.com/docs/TECH169726
Article Type
Technical Solution


Problem



It has been noted that some files which contain the string "%PDF" in their first 1024 bytes, may cause Scan Engine to return the following error while scanning the file:

Malformed container

Conditions

  • File contains %PDF

If the file is a text file, open the file in an editor and search for %PDF. If the file is a binary file use the strings command to find the strings in a file.  On Linux/Solaris this command is part of the operating system.  On Windows download the Microsoft Strings tool. 

 


Cause



Scan Engine is incorrectly using %PDF anywhere in the first 1024 bytes as an indicator of a PDF file.


Solution



Symantec is aware of this issue.  This article is updated as more information is available.  Subscribe to this article to receive updates.

Workaround

  • Allow access for malformed containers

1. Open the Scan Engine console.
2. Click the Policies tab.
3. Click Views|Filtering menu item.
4. Click the Container Handling tab.
5. Uncheck the Block malformed containers checkbox.
6. Click the Deploy Changes button.

 


Supplemental Materials

SourceETrack
Value2530909


Article URL http://www.symantec.com/docs/TECH169726


Terms of use for this information are found in Legal Notices