MIME bypass

This is an example mbox file that has whitespace characters in it. On breezy, dapper, edgy, clamscan will scan this file as "OK". However, if you unpack it ("munpack eicar.mbox") and scan eicar.txt, the test signature is found.

Note that the upstream patch from 0.88.6 to 0.88.7 does not appear to fix this problem. :(

Hm... upstream patch works for me (amd64, edgy chroot):

old version:
root@suut:/tmp# clamscan eicar2.mbox
LibClamAV Warning: **************************************************
LibClamAV Warning: *** The virus database is older than 7 days. ***
LibClamAV Warning: *** Please update it IMMEDIATELY! ***
LibClamAV Warning: **************************************************
eicar2.mbox: OK

----------- SCAN SUMMARY -----------
Known viruses: 64282
Engine version: 0.88.4
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 0.00 MB
Time: 1.931 sec (0 m 1 s)

patched:
root@suut:/tmp# clamscan eicar2.mbox
LibClamAV Warning: **************************************************
LibClamAV Warning: *** The virus database is older than 7 days. ***
LibClamAV Warning: *** Please update it IMMEDIATELY! ***
LibClamAV Warning: **************************************************
eicar2.mbox: Eicar-Test-Signature FOUND

----------- SCAN SUMMARY -----------
Known viruses: 64282
Engine version: 0.88.4
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 0.00 MB
Time: 1.791 sec (0 m 1 s)

can you please retry with the debdiff I'll attach in a minute? Thanks.