[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	9155
Summary	Buildbot crash output: fuzz-2013-09-16-31512.pcap
Classification	Unclassified
Product	Wireshark
Version	unspecified
Hardware	x86-64
URL	http://www.wireshark.org/download/automated/captures/fuzz-2013-09-16-31512.pcap
OS	Ubuntu
Status	CONFIRMED
Severity	Major
Priority	High
Component	Dissection engine (libwireshark)
Assignee	bugzilla-admin@wireshark.org
Reporter	buildbot-do-not-reply@wireshark.org

Problems have been found with the following capture file:

http://www.wireshark.org/download/automated/captures/fuzz-2013-09-16-31512.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/0000.cap

Build host information:
Linux wsbb04 3.2.0-49-generic #75-Ubuntu SMP Tue Jun 18 17:39:32 UTC 2013
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:    Ubuntu
Description:    Ubuntu 12.04.2 LTS
Release:    12.04
Codename:    precise

Buildbot information:
BUILDBOT_REPOSITORY=http://code.wireshark.org/git/wireshark
BUILDBOT_BUILDNUMBER=2096
BUILDBOT_URL=http://buildbot.wireshark.org/trunk/
BUILDBOT_BUILDERNAME=Clang-Code-Analysis
BUILDBOT_SLAVENAME=clang-code-analysis
BUILDBOT_GOT_REVISION=ec2fc7f0e799a82ad1d2e816c21a5ecbd157b7f8

Return value:  0

Dissector bug:  0

Valgrind error count:  5



Git commit
commit ec2fc7f0e799a82ad1d2e816c21a5ecbd157b7f8
Author: Jörg Mayer <jmayer@loplof.de>
Date:   Sat Sep 14 14:42:35 2013 +0000

    emem -> wmem

    svn path=/trunk/; revision=52039


Command and args: ./tools/valgrind-wireshark.sh 

==31646== Memcheck, a memory error detector
==31646== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
==31646== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info
==31646== Command:
/home/wireshark/builders/trunk-clang-ca/clangcodeanalysis/install/bin/tshark
-nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2013-09-16-31512.pcap
==31646== 
==31646== Conditional jump or move depends on uninitialised value(s)
==31646==    at 0xA08B3B1: vfprintf (vfprintf.c:1630)
==31646==    by 0xA148D8F: __vsnprintf_chk (vsnprintf_chk.c:65)
==31646==    by 0x9466D81: g_snprintf (in
/lib/x86_64-linux-gnu/libglib-2.0.so.0.3200.3)
==31646==    by 0x6BC5CC9: dissect_h225_FastStart_item (h225.cnf:280)
==31646==    by 0x694A9C2: dissect_per_sequence_of_helper (packet-per.c:527)
==31646==    by 0x694B898: dissect_per_sequence_of (packet-per.c:558)
==31646==    by 0x6BC44EA: dissect_h225_FastStart (h225.cnf:296)
==31646==    by 0x694E8AA: dissect_per_sequence (packet-per.c:1920)
==31646==    by 0x6BC6A35: dissect_h225_Setup_UUIE (h225.cnf:388)
==31646==    by 0x694E1C1: dissect_per_choice (packet-per.c:1678)
==31646==    by 0x6BC56FE: dissect_h225_T_h323_message_body (h225.cnf:246)
==31646==    by 0x694E532: dissect_per_sequence (packet-per.c:1830)
==31646== 
==31646== 
==31646== HEAP SUMMARY:
==31646==     in use at exit: 1,088,627 bytes in 24,968 blocks
==31646==   total heap usage: 282,235 allocs, 257,267 frees, 11,147,851 bytes
allocated
==31646== 
==31646== LEAK SUMMARY:
==31646==    definitely lost: 2,705 bytes in 43 blocks
==31646==    indirectly lost: 696 bytes in 7 blocks
==31646==      possibly lost: 0 bytes in 0 blocks
==31646==    still reachable: 1,085,226 bytes in 24,918 blocks
==31646==         suppressed: 0 bytes in 0 blocks
==31646== Rerun with --leak-check=full to see details of leaked memory
==31646== 
==31646== For counts of detected and suppressed errors, rerun with: -v
==31646== Use --track-origins=yes to see where uninitialised values come from
==31646== ERROR SUMMARY: 5 errors from 1 contexts (suppressed: 3 from 3)

[ no debug trace ]

---

      You are receiving this mail because:

• You are watching all bug changes.