Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 7801] Buildbot crash output: fuzz-2012-10-05-27746.pcap

Date: Sat, 6 Oct 2012 06:56:18 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7801

Evan Huus <eapache@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
                 CC|                            |eapache@xxxxxxxxx
         Resolution|FIXED                       |

--- Comment #2 from Evan Huus <eapache@xxxxxxxxx> 2012-10-06 06:56:15 PDT ---
Revision 45337 fixed the main issue, but the crash still gives errors
(potentially unrelated) when run under valgrind:

==3867== Invalid read of size 1
==3867==    at 0x4C2C831: strcmp (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==3867==    by 0x973C348: g_str_equal (ghash.c:1704)
==3867==    by 0x973B51F: g_hash_table_insert_internal (ghash.c:422)
==3867==    by 0x609A821: Radiuslex (radius_dict.l:231)
==3867==    by 0x609B37C: radius_load_dictionary (radius_dict.l:596)
==3867==    by 0x656797F: register_radius_fields (packet-radius.c:2016)
==3867==    by 0x606CADD: proto_registrar_get_byname (proto.c:802)
==3867==    by 0x6566DB1: dissect_radius (packet-radius.c:1401)
==3867==    by 0x605F2DE: call_dissector_through_handle (packet.c:413)
==3867==    by 0x605FB2C: call_dissector_work (packet.c:508)
==3867==    by 0x606031F: dissector_try_uint_new (packet.c:928)
==3867==    by 0x6060376: dissector_try_uint (packet.c:954)
==3867==  Address 0x10279820 is 0 bytes inside a block of size 19 free'd
==3867==    at 0x4C2A739: free (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==3867==    by 0x6099470: add_attribute (radius_dict.l:382)
==3867==    by 0x609A821: Radiuslex (radius_dict.l:231)
==3867==    by 0x609B37C: radius_load_dictionary (radius_dict.l:596)
==3867==    by 0x656797F: register_radius_fields (packet-radius.c:2016)
==3867==    by 0x606CADD: proto_registrar_get_byname (proto.c:802)
==3867==    by 0x6566DB1: dissect_radius (packet-radius.c:1401)
==3867==    by 0x605F2DE: call_dissector_through_handle (packet.c:413)
==3867==    by 0x605FB2C: call_dissector_work (packet.c:508)
==3867==    by 0x606031F: dissector_try_uint_new (packet.c:928)
==3867==    by 0x6060376: dissector_try_uint (packet.c:954)
==3867==    by 0x66BBEE4: decode_udp_ports (packet-udp.c:271)
==3867== 
==3867== Invalid read of size 1
==3867==    at 0x4C2C848: strcmp (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==3867==    by 0x973C348: g_str_equal (ghash.c:1704)
==3867==    by 0x973B51F: g_hash_table_insert_internal (ghash.c:422)
==3867==    by 0x609A821: Radiuslex (radius_dict.l:231)
==3867==    by 0x609B37C: radius_load_dictionary (radius_dict.l:596)
==3867==    by 0x656797F: register_radius_fields (packet-radius.c:2016)
==3867==    by 0x606CADD: proto_registrar_get_byname (proto.c:802)
==3867==    by 0x6566DB1: dissect_radius (packet-radius.c:1401)
==3867==    by 0x605F2DE: call_dissector_through_handle (packet.c:413)
==3867==    by 0x605FB2C: call_dissector_work (packet.c:508)
==3867==    by 0x606031F: dissector_try_uint_new (packet.c:928)
==3867==    by 0x6060376: dissector_try_uint (packet.c:954)
==3867==  Address 0x10279821 is 1 bytes inside a block of size 19 free'd
==3867==    at 0x4C2A739: free (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==3867==    by 0x6099470: add_attribute (radius_dict.l:382)
==3867==    by 0x609A821: Radiuslex (radius_dict.l:231)
==3867==    by 0x609B37C: radius_load_dictionary (radius_dict.l:596)
==3867==    by 0x656797F: register_radius_fields (packet-radius.c:2016)
==3867==    by 0x606CADD: proto_registrar_get_byname (proto.c:802)
==3867==    by 0x6566DB1: dissect_radius (packet-radius.c:1401)
==3867==    by 0x605F2DE: call_dissector_through_handle (packet.c:413)
==3867==    by 0x605FB2C: call_dissector_work (packet.c:508)
==3867==    by 0x606031F: dissector_try_uint_new (packet.c:928)
==3867==    by 0x6060376: dissector_try_uint (packet.c:954)
==3867==    by 0x66BBEE4: decode_udp_ports (packet-udp.c:271)

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.