Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 10967] New: Buildbot crash output: fuzz-2015-02-13-32410.pcap

Wireshark-bugs: [Wireshark-bugs] [Bug 10967] New: Buildbot crash output: fuzz-2015-02-13-32410.p

Date: Mon, 16 Feb 2015 05:40:02 +0000

Bug ID	10967
Summary	Buildbot crash output: fuzz-2015-02-13-32410.pcap
Product	Wireshark
Version	unspecified
Hardware	x86-64
URL	https://www.wireshark.org/download/automated/captures/fuzz-2015-02-13-32410.pcap
OS	Ubuntu
Status	CONFIRMED
Severity	Major
Priority	High
Component	Dissection engine (libwireshark)
Assignee	[email protected]
Reporter	[email protected]

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2015-02-13-32410.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/ss.pcap

Build host information:
Linux wsbb04 3.13.0-45-generic #74-Ubuntu SMP Tue Jan 13 19:36:28 UTC 2015
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:    Ubuntu
Description:    Ubuntu 14.04.1 LTS
Release:    14.04
Codename:    trusty

Buildbot information:
BUILDBOT_REPOSITORY=ssh://[email protected]:29418/wireshark
BUILDBOT_BUILDNUMBER=3145
BUILDBOT_URL=http://buildbot.wireshark.org/trunk/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_SLAVENAME=clang-code-analysis
BUILDBOT_GOT_REVISION=60cc8b4fd8a8584bace71cb9cd2b59f9d450a0ce

Return value:  0

Dissector bug:  0

Valgrind error count:  51



Git commit
commit 60cc8b4fd8a8584bace71cb9cd2b59f9d450a0ce
Author: Dario Lombardo <[email protected]>
Date:   Wed Feb 4 10:25:16 2015 +0100

    Support for looking for incomplete dissectors.

    Change-Id: I03e592dd3d54fc0e1c4af09d5d5336dda93f950e
    Reviewed-on: https://code.wireshark.org/review/6978
    Reviewed-by: Evan Huus <[email protected]>
    Petri-Dish: Evan Huus <[email protected]>
    Tested-by: Petri Dish Buildbot <[email protected]>
    Reviewed-by: Alexis La Goutte <[email protected]>


Command and args: ./tools/valgrind-wireshark.sh 

==17796== Memcheck, a memory error detector
==17796== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al.
==17796== Using Valgrind-3.10.0.SVN and LibVEX; rerun with -h for copyright
info
==17796== Command:
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/bin/tshark
-nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2015-02-13-32410.pcap
==17796== 
==17796== Invalid read of size 1
==17796==    at 0x4C2E0E2: strlen (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==17796==    by 0x41338F: print_packet (tshark.c:3829)
==17796==    by 0x4139FA: process_packet (tshark.c:3633)
==17796==    by 0x40C859: main (tshark.c:3380)
==17796==  Address 0x121276f0 is 0 bytes inside a block of size 80 free'd
==17796==    at 0x4C2BDEC: free (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==17796==    by 0x726010C: wmem_simple_free_all (wmem_allocator_simple.c:107)
==17796==    by 0x7260D8B: wmem_leave_packet_scope (wmem_scopes.c:81)
==17796==    by 0x4136B3: process_packet (tshark.c:3619)
==17796==    by 0x40C859: main (tshark.c:3380)
==17796== 
==17796== Invalid read of size 1
==17796==    at 0x4C2E0F4: strlen (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==17796==    by 0x41338F: print_packet (tshark.c:3829)
==17796==    by 0x4139FA: process_packet (tshark.c:3633)
==17796==    by 0x40C859: main (tshark.c:3380)
==17796==  Address 0x121276f1 is 1 bytes inside a block of size 80 free'd
==17796==    at 0x4C2BDEC: free (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==17796==    by 0x726010C: wmem_simple_free_all (wmem_allocator_simple.c:107)
==17796==    by 0x7260D8B: wmem_leave_packet_scope (wmem_scopes.c:81)
==17796==    by 0x4136B3: process_packet (tshark.c:3619)
==17796==    by 0x40C859: main (tshark.c:3380)
==17796== 
==17796== Invalid read of size 8
==17796==    at 0x4C2F790: memcpy@@GLIBC_2.14 (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==17796==    by 0x4133C3: print_packet (string3.h:51)
==17796==    by 0x4139FA: process_packet (tshark.c:3633)
==17796==    by 0x40C859: main (tshark.c:3380)
==17796==  Address 0x121276f0 is 0 bytes inside a block of size 80 free'd
==17796==    at 0x4C2BDEC: free (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==17796==    by 0x726010C: wmem_simple_free_all (wmem_allocator_simple.c:107)
==17796==    by 0x7260D8B: wmem_leave_packet_scope (wmem_scopes.c:81)
==17796==    by 0x4136B3: process_packet (tshark.c:3619)
==17796==    by 0x40C859: main (tshark.c:3380)
==17796== 
==17796== Invalid read of size 2
==17796==    at 0x4C2F7E0: memcpy@@GLIBC_2.14 (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==17796==    by 0x4133C3: print_packet (string3.h:51)
==17796==    by 0x4139FA: process_packet (tshark.c:3633)
==17796==    by 0x40C859: main (tshark.c:3380)
==17796==  Address 0x121276f8 is 8 bytes inside a block of size 80 free'd
==17796==    at 0x4C2BDEC: free (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==17796==    by 0x726010C: wmem_simple_free_all (wmem_allocator_simple.c:107)
==17796==    by 0x7260D8B: wmem_leave_packet_scope (wmem_scopes.c:81)
==17796==    by 0x4136B3: process_packet (tshark.c:3619)
==17796==    by 0x40C859: main (tshark.c:3380)
==17796== 
==17796== Invalid read of size 1
==17796==    at 0x4C2F950: memcpy@@GLIBC_2.14 (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==17796==    by 0x4133C3: print_packet (string3.h:51)
==17796==    by 0x4139FA: process_packet (tshark.c:3633)
==17796==    by 0x40C859: main (tshark.c:3380)
==17796==  Address 0x121276fa is 10 bytes inside a block of size 80 free'd
==17796==    at 0x4C2BDEC: free (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==17796==    by 0x726010C: wmem_simple_free_all (wmem_allocator_simple.c:107)
==17796==    by 0x7260D8B: wmem_leave_packet_scope (wmem_scopes.c:81)
==17796==    by 0x4136B3: process_packet (tshark.c:3619)
==17796==    by 0x40C859: main (tshark.c:3380)
==17796== 
==17796== Invalid read of size 2
==17796==    at 0x4C2F7EF: memcpy@@GLIBC_2.14 (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==17796==    by 0x4133C3: print_packet (string3.h:51)
==17796==    by 0x4139FA: process_packet (tshark.c:3633)
==17796==    by 0x40C859: main (tshark.c:3380)
==17796==  Address 0x12562264 is 4 bytes inside a block of size 80 free'd
==17796==    at 0x4C2BDEC: free (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==17796==    by 0x726010C: wmem_simple_free_all (wmem_allocator_simple.c:107)
==17796==    by 0x7260D8B: wmem_leave_packet_scope (wmem_scopes.c:81)
==17796==    by 0x4136B3: process_packet (tshark.c:3619)
==17796==    by 0x40C859: main (tshark.c:3380)
==17796== 
==17796== 
==17796== HEAP SUMMARY:
==17796==     in use at exit: 1,223,195 bytes in 29,852 blocks
==17796==   total heap usage: 324,593 allocs, 294,741 frees, 33,676,647 bytes
allocated
==17796== 
==17796== LEAK SUMMARY:
==17796==    definitely lost: 4,008 bytes in 178 blocks
==17796==    indirectly lost: 36,984 bytes in 52 blocks
==17796==      possibly lost: 0 bytes in 0 blocks
==17796==    still reachable: 1,182,203 bytes in 29,622 blocks
==17796==         suppressed: 0 bytes in 0 blocks
==17796== Rerun with --leak-check=full to see details of leaked memory
==17796== 
==17796== For counts of detected and suppressed errors, rerun with: -v
==17796== ERROR SUMMARY: 51 errors from 6 contexts (suppressed: 0 from 0)

[ no debug trace ]

You are receiving this mail because:

You are watching all bug changes.

Follow-Ups:
- [Wireshark-bugs] [Bug 10967] Buildbot crash output: fuzz-2015-02-13-32410.pcap
  - From: bugzilla-daemon

Prev by Date: [Wireshark-bugs] [Bug 10935] wireshark QT could not open new file, not any response by pressing File -> Open menu
Next by Date: [Wireshark-bugs] [Bug 10963] wireshark QT has blank content in Authors and License tab in Help -> About Wireshark menu
Previous by thread: [Wireshark-bugs] [Bug 10966] New: Flow graph will not display using "standard source/destination address"; network (IP) addresses are always used
Next by thread: [Wireshark-bugs] [Bug 10967] Buildbot crash output: fuzz-2015-02-13-32410.pcap
Index(es):
- Date
- Thread