\Sineflow\ClamAV\Socket\Socket sends to ClamAV Server only file path instead data

[svinohod]

PHP 8.1
Symfony 6.3
sineflow/clamav 1.1.1

Configuration:

sineflow_clam_av:
  strategy: clamd_network
  host: '%env(CLAMAV_HOST)%'
  port: '%env(CLAMAV_PORT)%'

Inside \Sineflow\ClamAV\Socket\Socket::sendCommand contains $dataIn value SCAN /var/www/html/tests/resources/test-1-original.jpg instead file data.

[MatthiasKuehneEllerhold]

The network strategy only works locally and if the clamav-daemon has access to the file.
If the clamav-daemon is on another host (or in another docker container) or runs as non-root with no permission to read the file this wont work.
You'd have to stream the file content to the daemon to get it to work.

[jorismak]

Basically, a mode that works like clamdscan --fdpass (indeed, streaming the contents) would be nice.

It's a good way to bypass permissions errors on servers (like scanning an incoming file upload, which is in /tmp owned by the server process, and clamav-daemon cannot access it directly).