| Bug ID |
10510
|
| Summary |
Buildbot crash output: fuzz-2014-09-27-20641.pcap
|
| Product |
Wireshark
|
| Version |
unspecified
|
| Hardware |
x86-64
|
| URL |
https://www.wireshark.org/download/automated/captures/fuzz-2014-09-27-20641.pcap
|
| OS |
Ubuntu
|
| Status |
CONFIRMED
|
| Severity |
Major
|
| Priority |
High
|
| Component |
Dissection engine (libwireshark)
|
| Assignee |
[email protected]
|
| Reporter |
[email protected]
|
Problems have been found with the following capture file:
https://www.wireshark.org/download/automated/captures/fuzz-2014-09-27-20641.pcap
stderr:
Input file: /home/wireshark/menagerie/menagerie/9453-mrcp_1.pcap
Build host information:
Linux wsbb04 3.13.0-36-generic #63-Ubuntu SMP Wed Sep 3 21:30:07 UTC 2014
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID: Ubuntu
Description: Ubuntu 14.04.1 LTS
Release: 14.04
Codename: trusty
Buildbot information:
BUILDBOT_REPOSITORY=ssh://[email protected]:29418/wireshark
BUILDBOT_BUILDNUMBER=2978
BUILDBOT_URL=http://buildbot.wireshark.org/trunk/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_SLAVENAME=clang-code-analysis
BUILDBOT_GOT_REVISION=82d1a85ad28773a5f591bfa80d04fd0c2267e420
Return value: 0
Dissector bug: 0
Valgrind error count: 2
Git commit
commit 82d1a85ad28773a5f591bfa80d04fd0c2267e420
Author: Pascal Quantin <[email protected]>
Date: Thu Sep 25 23:11:10 2014 +0200
GTP: display SAC as BASE_HEX_DEC
Bug: 10490
Change-Id: I0afe1f2ff51f2452830bfc57210dc3a298b68cbf
Reviewed-on: https://code.wireshark.org/review/4290
Reviewed-by: Pascal Quantin <[email protected]>
Reviewed-by: Anders Broman <[email protected]>
Command and args: ./tools/valgrind-wireshark.sh -T
==31860== Memcheck, a memory error detector
==31860== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al.
==31860== Using Valgrind-3.10.0.SVN and LibVEX; rerun with -h for copyright
info
==31860== Command:
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/bin/tshark
-Vx -nr
/fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2014-09-27-20641.pcap
==31860==
==31860== Conditional jump or move depends on uninitialised value(s)
==31860== at 0x4C2E0E9: strlen (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==31860== by 0x9A85B02: g_strdup (in
/lib/x86_64-linux-gnu/libglib-2.0.so.0.4000.0)
==31860== by 0x66B1531: string_fvalue_set_string (ftype-string.c:53)
==31860== by 0x667A2C9: proto_tree_add_string (proto.c:2999)
==31860== by 0x667A460: proto_tree_add_string_format (proto.c:3031)
==31860== by 0x6B17985: dissect_mrcpv2_common.isra.1 (packet-mrcpv2.c:630)
==31860== by 0x6D67BD4: tcp_dissect_pdus (packet-tcp.c:2414)
==31860== by 0x6B174D3: dissect_mrcpv2_tcp (packet-mrcpv2.c:1050)
==31860== by 0x6667F2E: call_dissector_through_handle (packet.c:622)
==31860== by 0x6668814: call_dissector_work (packet.c:713)
==31860== by 0x6668ECB: dissector_try_uint_new (packet.c:1145)
==31860== by 0x6D67F36: decode_tcp_ports (packet-tcp.c:4054)
==31860==
==31860== Conditional jump or move depends on uninitialised value(s)
==31860== at 0x4C2E0F8: strlen (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==31860== by 0x9A85B02: g_strdup (in
/lib/x86_64-linux-gnu/libglib-2.0.so.0.4000.0)
==31860== by 0x66B1531: string_fvalue_set_string (ftype-string.c:53)
==31860== by 0x667A2C9: proto_tree_add_string (proto.c:2999)
==31860== by 0x667A460: proto_tree_add_string_format (proto.c:3031)
==31860== by 0x6B17985: dissect_mrcpv2_common.isra.1 (packet-mrcpv2.c:630)
==31860== by 0x6D67BD4: tcp_dissect_pdus (packet-tcp.c:2414)
==31860== by 0x6B174D3: dissect_mrcpv2_tcp (packet-mrcpv2.c:1050)
==31860== by 0x6667F2E: call_dissector_through_handle (packet.c:622)
==31860== by 0x6668814: call_dissector_work (packet.c:713)
==31860== by 0x6668ECB: dissector_try_uint_new (packet.c:1145)
==31860== by 0x6D67F36: decode_tcp_ports (packet-tcp.c:4054)
==31860==
==31860==
==31860== HEAP SUMMARY:
==31860== in use at exit: 1,218,265 bytes in 29,633 blocks
==31860== total heap usage: 228,661 allocs, 199,028 frees, 28,826,615 bytes
allocated
==31860==
==31860== LEAK SUMMARY:
==31860== definitely lost: 3,753 bytes in 159 blocks
==31860== indirectly lost: 36,840 bytes in 53 blocks
==31860== possibly lost: 0 bytes in 0 blocks
==31860== still reachable: 1,177,672 bytes in 29,421 blocks
==31860== suppressed: 0 bytes in 0 blocks
==31860== Rerun with --leak-check=full to see details of leaked memory
==31860==
==31860== For counts of detected and suppressed errors, rerun with: -v
==31860== Use --track-origins=yes to see where uninitialised values come from
==31860== ERROR SUMMARY: 2 errors from 2 contexts (suppressed: 0 from 0)
[ no debug trace ]
You are receiving this mail because:
- You are watching all bug changes.
