Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 10020] New: Buildbot crash output: fuzz-2014-04-20-26765.pcap

[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	10020
Summary	Buildbot crash output: fuzz-2014-04-20-26765.pcap
Classification	Unclassified
Product	Wireshark
Version	unspecified
Hardware	x86-64
URL	http://www.wireshark.org/download/automated/captures/fuzz-2014-04-20-26765.pcap
OS	Ubuntu
Status	CONFIRMED
Severity	Major
Priority	High
Component	Dissection engine (libwireshark)
Assignee	bugzilla-admin@wireshark.org
Reporter	buildbot-do-not-reply@wireshark.org

Problems have been found with the following capture file:

http://www.wireshark.org/download/automated/captures/fuzz-2014-04-20-26765.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/10518-malformed-readdirs.cap.gz

Build host information:
Linux wsbb04 3.2.0-60-generic #91-Ubuntu SMP Wed Feb 19 03:54:44 UTC 2014
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:    Ubuntu
Description:    Ubuntu 12.04.4 LTS
Release:    12.04
Codename:    precise

Buildbot information:
BUILDBOT_REPOSITORY=ssh://wireshark-buildbot@code.wireshark.org:29418/wireshark
BUILDBOT_BUILDNUMBER=2702
BUILDBOT_URL=http://buildbot.wireshark.org/trunk/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_SLAVENAME=clang-code-analysis
BUILDBOT_GOT_REVISION=e1bff5e9e026e1eff9ea2d5a78f22775aef7a260

Return value:  0

Dissector bug:  0

Valgrind error count:  6



Git commit
commit e1bff5e9e026e1eff9ea2d5a78f22775aef7a260
Author: Edwin Groothuis <edwin@mavetju.org>
Date:   Fri Apr 18 16:37:08 2014 +1000

    Fix build for FreeBSD

    Change-Id: Ide3af6a6ed535b839ad4eb1dd58681792b0af3a3
    Reviewed-on: https://code.wireshark.org/review/1195
    Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>


Command and args: ./tools/valgrind-wireshark.sh 

==31109== Memcheck, a memory error detector
==31109== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
==31109== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info
==31109== Command:
/home/wireshark/builders/trunk-clang-ca/clangcodeanalysis/install/bin/tshark
-nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2014-04-20-26765.pcap
==31109== 
==31109== Conditional jump or move depends on uninitialised value(s)
==31109==    at 0x6C3CCF8: dissect_smb2_ioctl_data (packet-smb2.c:4750)
==31109==    by 0x6C15D10: dissect_nt_trans_data_request (packet-smb.c:8614)
==31109==    by 0x6C2AB0F: dissect_nt_transaction_request (packet-smb.c:9151)
==31109==    by 0x6C1EE77: dissect_smb_command (packet-smb.c:17209)
==31109==    by 0x6C1FA66: dissect_smb (packet-smb.c:18167)
==31109==    by 0x6C200FE: dissect_smb_heur (packet-smb.c:18216)
==31109==    by 0x6597D36: dissector_try_heuristic (packet.c:1993)
==31109==    by 0x6A84BF3: dissect_netbios_payload (packet-netbios.c:1071)
==31109==    by 0x6A513C1: dissect_nbss_packet (packet-nbns.c:1541)
==31109==    by 0x6A5157A: dissect_nbss (packet-nbns.c:1862)
==31109==    by 0x6595A3E: call_dissector_through_handle (packet.c:591)
==31109==    by 0x659651D: call_dissector_work (packet.c:682)
==31109== 
==31109== Conditional jump or move depends on uninitialised value(s)
==31109==    at 0x6C3CCFE: dissect_smb2_ioctl_data (packet-smb2.c:4750)
==31109==    by 0x6C15D10: dissect_nt_trans_data_request (packet-smb.c:8614)
==31109==    by 0x6C2AB0F: dissect_nt_transaction_request (packet-smb.c:9151)
==31109==    by 0x6C1EE77: dissect_smb_command (packet-smb.c:17209)
==31109==    by 0x6C1FA66: dissect_smb (packet-smb.c:18167)
==31109==    by 0x6C200FE: dissect_smb_heur (packet-smb.c:18216)
==31109==    by 0x6597D36: dissector_try_heuristic (packet.c:1993)
==31109==    by 0x6A84BF3: dissect_netbios_payload (packet-netbios.c:1071)
==31109==    by 0x6A513C1: dissect_nbss_packet (packet-nbns.c:1541)
==31109==    by 0x6A5157A: dissect_nbss (packet-nbns.c:1862)
==31109==    by 0x6595A3E: call_dissector_through_handle (packet.c:591)
==31109==    by 0x659651D: call_dissector_work (packet.c:682)
==31109== 
==31109== Conditional jump or move depends on uninitialised value(s)
==31109==    at 0x6C3CDA7: dissect_smb2_ioctl_data (packet-smb2.c:4750)
==31109==    by 0x6C15D10: dissect_nt_trans_data_request (packet-smb.c:8614)
==31109==    by 0x6C2AB0F: dissect_nt_transaction_request (packet-smb.c:9151)
==31109==    by 0x6C1EE77: dissect_smb_command (packet-smb.c:17209)
==31109==    by 0x6C1FA66: dissect_smb (packet-smb.c:18167)
==31109==    by 0x6C200FE: dissect_smb_heur (packet-smb.c:18216)
==31109==    by 0x6597D36: dissector_try_heuristic (packet.c:1993)
==31109==    by 0x6A84BF3: dissect_netbios_payload (packet-netbios.c:1071)
==31109==    by 0x6A513C1: dissect_nbss_packet (packet-nbns.c:1541)
==31109==    by 0x6A5157A: dissect_nbss (packet-nbns.c:1862)
==31109==    by 0x6595A3E: call_dissector_through_handle (packet.c:591)
==31109==    by 0x659651D: call_dissector_work (packet.c:682)
==31109== 
==31109== Conditional jump or move depends on uninitialised value(s)
==31109==    at 0x6C3CDA9: dissect_smb2_ioctl_data (packet-smb2.c:4750)
==31109==    by 0x6C15D10: dissect_nt_trans_data_request (packet-smb.c:8614)
==31109==    by 0x6C2AB0F: dissect_nt_transaction_request (packet-smb.c:9151)
==31109==    by 0x6C1EE77: dissect_smb_command (packet-smb.c:17209)
==31109==    by 0x6C1FA66: dissect_smb (packet-smb.c:18167)
==31109==    by 0x6C200FE: dissect_smb_heur (packet-smb.c:18216)
==31109==    by 0x6597D36: dissector_try_heuristic (packet.c:1993)
==31109==    by 0x6A84BF3: dissect_netbios_payload (packet-netbios.c:1071)
==31109==    by 0x6A513C1: dissect_nbss_packet (packet-nbns.c:1541)
==31109==    by 0x6A5157A: dissect_nbss (packet-nbns.c:1862)
==31109==    by 0x6595A3E: call_dissector_through_handle (packet.c:591)
==31109==    by 0x659651D: call_dissector_work (packet.c:682)
==31109== 
==31109== Conditional jump or move depends on uninitialised value(s)
==31109==    at 0x6C3CE9F: dissect_smb2_ioctl_data (packet-smb2.c:4750)
==31109==    by 0x6C15D10: dissect_nt_trans_data_request (packet-smb.c:8614)
==31109==    by 0x6C2AB0F: dissect_nt_transaction_request (packet-smb.c:9151)
==31109==    by 0x6C1EE77: dissect_smb_command (packet-smb.c:17209)
==31109==    by 0x6C1FA66: dissect_smb (packet-smb.c:18167)
==31109==    by 0x6C200FE: dissect_smb_heur (packet-smb.c:18216)
==31109==    by 0x6597D36: dissector_try_heuristic (packet.c:1993)
==31109==    by 0x6A84BF3: dissect_netbios_payload (packet-netbios.c:1071)
==31109==    by 0x6A513C1: dissect_nbss_packet (packet-nbns.c:1541)
==31109==    by 0x6A5157A: dissect_nbss (packet-nbns.c:1862)
==31109==    by 0x6595A3E: call_dissector_through_handle (packet.c:591)
==31109==    by 0x659651D: call_dissector_work (packet.c:682)
==31109== 
==31109== Conditional jump or move depends on uninitialised value(s)
==31109==    at 0x6C3CEA8: dissect_smb2_ioctl_data (packet-smb2.c:4750)
==31109==    by 0x6C15D10: dissect_nt_trans_data_request (packet-smb.c:8614)
==31109==    by 0x6C2AB0F: dissect_nt_transaction_request (packet-smb.c:9151)
==31109==    by 0x6C1EE77: dissect_smb_command (packet-smb.c:17209)
==31109==    by 0x6C1FA66: dissect_smb (packet-smb.c:18167)
==31109==    by 0x6C200FE: dissect_smb_heur (packet-smb.c:18216)
==31109==    by 0x6597D36: dissector_try_heuristic (packet.c:1993)
==31109==    by 0x6A84BF3: dissect_netbios_payload (packet-netbios.c:1071)
==31109==    by 0x6A513C1: dissect_nbss_packet (packet-nbns.c:1541)
==31109==    by 0x6A5157A: dissect_nbss (packet-nbns.c:1862)
==31109==    by 0x6595A3E: call_dissector_through_handle (packet.c:591)
==31109==    by 0x659651D: call_dissector_work (packet.c:682)
==31109== 
==31109== 
==31109== HEAP SUMMARY:
==31109==     in use at exit: 1,249,486 bytes in 29,555 blocks
==31109==   total heap usage: 1,226,496 allocs, 1,196,941 frees, 59,217,810
bytes allocated
==31109== 
==31109== LEAK SUMMARY:
==31109==    definitely lost: 7,607 bytes in 435 blocks
==31109==    indirectly lost: 37,288 bytes in 103 blocks
==31109==      possibly lost: 0 bytes in 0 blocks
==31109==    still reachable: 1,204,591 bytes in 29,017 blocks
==31109==         suppressed: 0 bytes in 0 blocks
==31109== Rerun with --leak-check=full to see details of leaked memory
==31109== 
==31109== For counts of detected and suppressed errors, rerun with: -v
==31109== Use --track-origins=yes to see where uninitialised values come from
==31109== ERROR SUMMARY: 6 errors from 6 contexts (suppressed: 3 from 3)

[ no debug trace ]

---

      You are receiving this mail because:

• You are watching all bug changes.