Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 10482] New: Buildbot crash output: fuzz-2014-09-18-13053.pcap

[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	10482
Summary	Buildbot crash output: fuzz-2014-09-18-13053.pcap
Product	Wireshark
Version	unspecified
Hardware	x86-64
URL	https://www.wireshark.org/download/automated/captures/fuzz-2014-09-18-13053.pcap
OS	Ubuntu
Status	CONFIRMED
Severity	Major
Priority	High
Component	Dissection engine (libwireshark)
Assignee	bugzilla-admin@wireshark.org
Reporter	buildbot-do-not-reply@wireshark.org

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2014-09-18-13053.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/7480-ARDATA_V10.pcap

Build host information:
Linux wsbb04 3.13.0-35-generic #62-Ubuntu SMP Fri Aug 15 01:58:42 UTC 2014
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:    Ubuntu
Description:    Ubuntu 14.04.1 LTS
Release:    14.04
Codename:    trusty

Buildbot information:
BUILDBOT_REPOSITORY=ssh://wireshark-buildbot@code.wireshark.org:29418/wireshark
BUILDBOT_BUILDNUMBER=2966
BUILDBOT_URL=http://buildbot.wireshark.org/trunk/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_SLAVENAME=clang-code-analysis
BUILDBOT_GOT_REVISION=eefdaf6a64533611fec0b565d27113d3744de859

Return value:  0

Dissector bug:  0

Valgrind error count:  20



Git commit
commit eefdaf6a64533611fec0b565d27113d3744de859
Author: Jeff Morriss <jeff.morriss.ws@gmail.com>
Date:   Tue Sep 16 10:02:25 2014 -0400

    Fix typo in French translation.

    Bug: 10471
    Change-Id: I0e191d4f6b53a16236953d4e5b80956fa421008e
    Reviewed-on: https://code.wireshark.org/review/4125
    Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>


Command and args: ./tools/valgrind-wireshark.sh 

==14121== Memcheck, a memory error detector
==14121== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al.
==14121== Using Valgrind-3.10.0.SVN and LibVEX; rerun with -h for copyright
info
==14121== Command:
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/bin/tshark
-nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2014-09-18-13053.pcap
==14121== 
==14121== Conditional jump or move depends on uninitialised value(s)
==14121==    at 0x68377A7: dissect_ndr_uint3264 (packet-dcerpc-ndr.c:239)
==14121==    by 0x6867D2C: dissect_ndr_ucvarray_core (packet-dcerpc.c:1785)
==14121==    by 0x686953A: dissect_ndr_ucvarray (packet-dcerpc.c:1837)
==14121==    by 0x6826DF3: epm_dissect_ept_entry_t_array
(packet-dcerpc-epm.c:204)
==14121==    by 0x686C1C9: dissect_deferred_pointers (packet-dcerpc.c:2319)
==14121==    by 0x686C5A3: dissect_ndr_pointer_cb.part.10
(packet-dcerpc.c:2684)
==14121==    by 0x686CA1F: dissect_ndr_pointer (packet-dcerpc.c:2699)
==14121==    by 0x6826B16: epm_dissect_ept_lookup_resp
(packet-dcerpc-epm.c:221)
==14121==    by 0x686A77D: dcerpc_try_handoff (packet-dcerpc.c:2974)
==14121==    by 0x686AAEE: dissect_dcerpc_dg_stub.constprop.13
(packet-dcerpc.c:5297)
==14121==    by 0x686BA26: dissect_dcerpc_dg (packet-dcerpc.c:5509)
==14121==    by 0x66677B9: dissector_try_heuristic (packet.c:2028)
==14121== 
==14121== Conditional jump or move depends on uninitialised value(s)
==14121==    at 0x68377A7: dissect_ndr_uint3264 (packet-dcerpc-ndr.c:239)
==14121==    by 0x6867D7C: dissect_ndr_ucvarray_core (packet-dcerpc.c:1790)
==14121==    by 0x686953A: dissect_ndr_ucvarray (packet-dcerpc.c:1837)
==14121==    by 0x6826DF3: epm_dissect_ept_entry_t_array
(packet-dcerpc-epm.c:204)
==14121==    by 0x686C1C9: dissect_deferred_pointers (packet-dcerpc.c:2319)
==14121==    by 0x686C5A3: dissect_ndr_pointer_cb.part.10
(packet-dcerpc.c:2684)
==14121==    by 0x686CA1F: dissect_ndr_pointer (packet-dcerpc.c:2699)
==14121==    by 0x6826B16: epm_dissect_ept_lookup_resp
(packet-dcerpc-epm.c:221)
==14121==    by 0x686A77D: dcerpc_try_handoff (packet-dcerpc.c:2974)
==14121==    by 0x686AAEE: dissect_dcerpc_dg_stub.constprop.13
(packet-dcerpc.c:5297)
==14121==    by 0x686BA26: dissect_dcerpc_dg (packet-dcerpc.c:5509)
==14121==    by 0x66677B9: dissector_try_heuristic (packet.c:2028)
==14121== 
==14121== Conditional jump or move depends on uninitialised value(s)
==14121==    at 0x68377A7: dissect_ndr_uint3264 (packet-dcerpc-ndr.c:239)
==14121==    by 0x6867DC7: dissect_ndr_ucvarray_core (packet-dcerpc.c:1795)
==14121==    by 0x686953A: dissect_ndr_ucvarray (packet-dcerpc.c:1837)
==14121==    by 0x6826DF3: epm_dissect_ept_entry_t_array
(packet-dcerpc-epm.c:204)
==14121==    by 0x686C1C9: dissect_deferred_pointers (packet-dcerpc.c:2319)
==14121==    by 0x686C5A3: dissect_ndr_pointer_cb.part.10
(packet-dcerpc.c:2684)
==14121==    by 0x686CA1F: dissect_ndr_pointer (packet-dcerpc.c:2699)
==14121==    by 0x6826B16: epm_dissect_ept_lookup_resp
(packet-dcerpc-epm.c:221)
==14121==    by 0x686A77D: dcerpc_try_handoff (packet-dcerpc.c:2974)
==14121==    by 0x686AAEE: dissect_dcerpc_dg_stub.constprop.13
(packet-dcerpc.c:5297)
==14121==    by 0x686BA26: dissect_dcerpc_dg (packet-dcerpc.c:5509)
==14121==    by 0x66677B9: dissector_try_heuristic (packet.c:2028)
==14121== 
==14121== Conditional jump or move depends on uninitialised value(s)
==14121==    at 0x68377A7: dissect_ndr_uint3264 (packet-dcerpc-ndr.c:239)
==14121==    by 0x686C31D: dissect_ndr_pointer_cb.part.10
(packet-dcerpc.c:2642)
==14121==    by 0x686CA1F: dissect_ndr_pointer (packet-dcerpc.c:2699)
==14121==    by 0x68278DD: epm_dissect_ept_entry_t (packet-dcerpc-epm.c:175)
==14121==    by 0x6867EC8: dissect_ndr_ucvarray_core (packet-dcerpc.c:1814)
==14121==    by 0x686953A: dissect_ndr_ucvarray (packet-dcerpc.c:1837)
==14121==    by 0x6826DF3: epm_dissect_ept_entry_t_array
(packet-dcerpc-epm.c:204)
==14121==    by 0x686C1FC: dissect_deferred_pointers (packet-dcerpc.c:2370)
==14121==    by 0x686C5A3: dissect_ndr_pointer_cb.part.10
(packet-dcerpc.c:2684)
==14121==    by 0x686CA1F: dissect_ndr_pointer (packet-dcerpc.c:2699)
==14121==    by 0x6826B16: epm_dissect_ept_lookup_resp
(packet-dcerpc-epm.c:221)
==14121==    by 0x686A77D: dcerpc_try_handoff (packet-dcerpc.c:2974)
==14121== 
==14121== Conditional jump or move depends on uninitialised value(s)
==14121==    at 0x6695FFA: tvb_ensure_bytes_exist (tvbuff.c:542)
==14121==    by 0x686C331: dissect_ndr_pointer_cb.part.10
(packet-dcerpc.c:2644)
==14121==    by 0x686CA1F: dissect_ndr_pointer (packet-dcerpc.c:2699)
==14121==    by 0x68278DD: epm_dissect_ept_entry_t (packet-dcerpc-epm.c:175)
==14121==    by 0x6867EC8: dissect_ndr_ucvarray_core (packet-dcerpc.c:1814)
==14121==    by 0x686953A: dissect_ndr_ucvarray (packet-dcerpc.c:1837)
==14121==    by 0x6826DF3: epm_dissect_ept_entry_t_array
(packet-dcerpc-epm.c:204)
==14121==    by 0x686C1FC: dissect_deferred_pointers (packet-dcerpc.c:2370)
==14121==    by 0x686C5A3: dissect_ndr_pointer_cb.part.10
(packet-dcerpc.c:2684)
==14121==    by 0x686CA1F: dissect_ndr_pointer (packet-dcerpc.c:2699)
==14121==    by 0x6826B16: epm_dissect_ept_lookup_resp
(packet-dcerpc-epm.c:221)
==14121==    by 0x686A77D: dcerpc_try_handoff (packet-dcerpc.c:2974)
==14121== 
==14121== Conditional jump or move depends on uninitialised value(s)
==14121==    at 0x6696000: tvb_ensure_bytes_exist (tvbuff.c:551)
==14121==    by 0x686C331: dissect_ndr_pointer_cb.part.10
(packet-dcerpc.c:2644)
==14121==    by 0x686CA1F: dissect_ndr_pointer (packet-dcerpc.c:2699)
==14121==    by 0x68278DD: epm_dissect_ept_entry_t (packet-dcerpc-epm.c:175)
==14121==    by 0x6867EC8: dissect_ndr_ucvarray_core (packet-dcerpc.c:1814)
==14121==    by 0x686953A: dissect_ndr_ucvarray (packet-dcerpc.c:1837)
==14121==    by 0x6826DF3: epm_dissect_ept_entry_t_array
(packet-dcerpc-epm.c:204)
==14121==    by 0x686C1FC: dissect_deferred_pointers (packet-dcerpc.c:2370)
==14121==    by 0x686C5A3: dissect_ndr_pointer_cb.part.10
(packet-dcerpc.c:2684)
==14121==    by 0x686CA1F: dissect_ndr_pointer (packet-dcerpc.c:2699)
==14121==    by 0x6826B16: epm_dissect_ept_lookup_resp
(packet-dcerpc-epm.c:221)
==14121==    by 0x686A77D: dcerpc_try_handoff (packet-dcerpc.c:2974)
==14121== 
==14121== Conditional jump or move depends on uninitialised value(s)
==14121==    at 0x6696007: tvb_ensure_bytes_exist (tvbuff.c:553)
==14121==    by 0x686C331: dissect_ndr_pointer_cb.part.10
(packet-dcerpc.c:2644)
==14121==    by 0x686CA1F: dissect_ndr_pointer (packet-dcerpc.c:2699)
==14121==    by 0x68278DD: epm_dissect_ept_entry_t (packet-dcerpc-epm.c:175)
==14121==    by 0x6867EC8: dissect_ndr_ucvarray_core (packet-dcerpc.c:1814)
==14121==    by 0x686953A: dissect_ndr_ucvarray (packet-dcerpc.c:1837)
==14121==    by 0x6826DF3: epm_dissect_ept_entry_t_array
(packet-dcerpc-epm.c:204)
==14121==    by 0x686C1FC: dissect_deferred_pointers (packet-dcerpc.c:2370)
==14121==    by 0x686C5A3: dissect_ndr_pointer_cb.part.10
(packet-dcerpc.c:2684)
==14121==    by 0x686CA1F: dissect_ndr_pointer (packet-dcerpc.c:2699)
==14121==    by 0x6826B16: epm_dissect_ept_lookup_resp
(packet-dcerpc-epm.c:221)
==14121==    by 0x686A77D: dcerpc_try_handoff (packet-dcerpc.c:2974)
==14121== 
==14121== Conditional jump or move depends on uninitialised value(s)
==14121==    at 0x669600B: tvb_ensure_bytes_exist (tvbuff.c:584)
==14121==    by 0x686C331: dissect_ndr_pointer_cb.part.10
(packet-dcerpc.c:2644)
==14121==    by 0x686CA1F: dissect_ndr_pointer (packet-dcerpc.c:2699)
==14121==    by 0x68278DD: epm_dissect_ept_entry_t (packet-dcerpc-epm.c:175)
==14121==    by 0x6867EC8: dissect_ndr_ucvarray_core (packet-dcerpc.c:1814)
==14121==    by 0x686953A: dissect_ndr_ucvarray (packet-dcerpc.c:1837)
==14121==    by 0x6826DF3: epm_dissect_ept_entry_t_array
(packet-dcerpc-epm.c:204)
==14121==    by 0x686C1FC: dissect_deferred_pointers (packet-dcerpc.c:2370)
==14121==    by 0x686C5A3: dissect_ndr_pointer_cb.part.10
(packet-dcerpc.c:2684)
==14121==    by 0x686CA1F: dissect_ndr_pointer (packet-dcerpc.c:2699)
==14121==    by 0x6826B16: epm_dissect_ept_lookup_resp
(packet-dcerpc-epm.c:221)
==14121==    by 0x686A77D: dcerpc_try_handoff (packet-dcerpc.c:2974)
==14121== 
==14121== Conditional jump or move depends on uninitialised value(s)
==14121==    at 0x6696010: tvb_ensure_bytes_exist (tvbuff.c:587)
==14121==    by 0x686C331: dissect_ndr_pointer_cb.part.10
(packet-dcerpc.c:2644)
==14121==    by 0x686CA1F: dissect_ndr_pointer (packet-dcerpc.c:2699)
==14121==    by 0x68278DD: epm_dissect_ept_entry_t (packet-dcerpc-epm.c:175)
==14121==    by 0x6867EC8: dissect_ndr_ucvarray_core (packet-dcerpc.c:1814)
==14121==    by 0x686953A: dissect_ndr_ucvarray (packet-dcerpc.c:1837)
==14121==    by 0x6826DF3: epm_dissect_ept_entry_t_array
(packet-dcerpc-epm.c:204)
==14121==    by 0x686C1FC: dissect_deferred_pointers (packet-dcerpc.c:2370)
==14121==    by 0x686C5A3: dissect_ndr_pointer_cb.part.10
(packet-dcerpc.c:2684)
==14121==    by 0x686CA1F: dissect_ndr_pointer (packet-dcerpc.c:2699)
==14121==    by 0x6826B16: epm_dissect_ept_lookup_resp
(packet-dcerpc-epm.c:221)
==14121==    by 0x686A77D: dcerpc_try_handoff (packet-dcerpc.c:2974)
==14121== 
==14121== Conditional jump or move depends on uninitialised value(s)
==14121==    at 0x6868603: add_pointer_to_list.isra.1 (packet-dcerpc.c:2412)
==14121==    by 0x686C74F: dissect_ndr_pointer_cb.part.10
(packet-dcerpc.c:2672)
==14121==    by 0x686CA1F: dissect_ndr_pointer (packet-dcerpc.c:2699)
==14121==    by 0x68278DD: epm_dissect_ept_entry_t (packet-dcerpc-epm.c:175)
==14121==    by 0x6867EC8: dissect_ndr_ucvarray_core (packet-dcerpc.c:1814)
==14121==    by 0x686953A: dissect_ndr_ucvarray (packet-dcerpc.c:1837)
==14121==    by 0x6826DF3: epm_dissect_ept_entry_t_array
(packet-dcerpc-epm.c:204)
==14121==    by 0x686C1FC: dissect_deferred_pointers (packet-dcerpc.c:2370)
==14121==    by 0x686C5A3: dissect_ndr_pointer_cb.part.10
(packet-dcerpc.c:2684)
==14121==    by 0x686CA1F: dissect_ndr_pointer (packet-dcerpc.c:2699)
==14121==    by 0x6826B16: epm_dissect_ept_lookup_resp
(packet-dcerpc-epm.c:221)
==14121==    by 0x686A77D: dcerpc_try_handoff (packet-dcerpc.c:2974)
==14121== 
==14121== 
==14121== HEAP SUMMARY:
==14121==     in use at exit: 1,215,202 bytes in 29,582 blocks
==14121==   total heap usage: 223,017 allocs, 193,435 frees, 28,404,239 bytes
allocated
==14121== 
==14121== LEAK SUMMARY:
==14121==    definitely lost: 5,384 bytes in 165 blocks
==14121==    indirectly lost: 36,648 bytes in 49 blocks
==14121==      possibly lost: 0 bytes in 0 blocks
==14121==    still reachable: 1,173,170 bytes in 29,368 blocks
==14121==         suppressed: 0 bytes in 0 blocks
==14121== Rerun with --leak-check=full to see details of leaked memory
==14121== 
==14121== For counts of detected and suppressed errors, rerun with: -v
==14121== Use --track-origins=yes to see where uninitialised values come from
==14121== ERROR SUMMARY: 20 errors from 10 contexts (suppressed: 0 from 0)

[ no debug trace ]

---

      You are receiving this mail because:

• You are watching all bug changes.