Wireshark-bugs: [Wireshark-bugs] [Bug 10232] New: Buildbot crash output: fuzz-2014-06-26-16428.p

Date: Thu, 26 Jun 2014 03:40:02 +0000
Bug ID 10232
Summary Buildbot crash output: fuzz-2014-06-26-16428.pcap
Classification Unclassified
Product Wireshark
Version unspecified
Hardware x86-64
URL http://www.wireshark.org/download/automated/captures/fuzz-2014-06-26-16428.pcap
OS Ubuntu
Status CONFIRMED
Severity Major
Priority High
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Problems have been found with the following capture file:

http://www.wireshark.org/download/automated/captures/fuzz-2014-06-26-16428.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/10065-example_logs_mcap.btsnoop

Build host information:
Linux wsbb04 3.2.0-64-generic #97-Ubuntu SMP Wed Jun 4 22:04:21 UTC 2014 x86_64
x86_64 x86_64 GNU/Linux
Distributor ID:    Ubuntu
Description:    Ubuntu 12.04.4 LTS
Release:    12.04
Codename:    precise

Buildbot information:
BUILDBOT_REPOSITORY=ssh://[email protected]:29418/wireshark
BUILDBOT_BUILDNUMBER=2831
BUILDBOT_URL=http://buildbot.wireshark.org/trunk/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_SLAVENAME=clang-code-analysis
BUILDBOT_GOT_REVISION=83da877fffaa3de727809918070dafb4d590e1fd

Return value:  0

Dissector bug:  0

Valgrind error count:  2



Git commit
commit 83da877fffaa3de727809918070dafb4d590e1fd
Author: Evan Huus <[email protected]>
Date:   Tue Jun 24 18:25:15 2014 -0400

    Add back initializers dropped in g9356d5c689fa

    They were actually necessary.

    Bug:10224
    Change-Id: I9973bf7bab670d12e5b90bb2a57e99f9125d6a07
    Reviewed-on: https://code.wireshark.org/review/2632
    Reviewed-by: Evan Huus <[email protected]>


Command and args: ./tools/valgrind-wireshark.sh 

==26280== Memcheck, a memory error detector
==26280== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
==26280== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info
==26280== Command:
/home/wireshark/builders/trunk-clang-ca/clangcodeanalysis/install/bin/tshark
-nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2014-06-26-16428.pcap
==26280== 
==26280== Conditional jump or move depends on uninitialised value(s)
==26280==    at 0x711310E: wmem_tree_lookup32 (wmem_tree.c:379)
==26280==    by 0x6723523:
dissect_bthci_evt_disconn_complete.isra.56.constprop.81
(packet-bthci_evt.c:1086)
==26280==    by 0x6723D32: dissect_bthci_evt (packet-bthci_evt.c:3420)
==26280==    by 0x65D61EE: call_dissector_through_handle (packet.c:622)
==26280==    by 0x65D6C2D: call_dissector_work (packet.c:713)
==26280==    by 0x65D7452: dissector_try_uint_new (packet.c:1145)
==26280==    by 0x692A432: dissect_hci_h4 (packet-hci_h4.c:135)
==26280==    by 0x65D61EE: call_dissector_through_handle (packet.c:622)
==26280==    by 0x65D6C2D: call_dissector_work (packet.c:713)
==26280==    by 0x65D7452: dissector_try_uint_new (packet.c:1145)
==26280==    by 0x65D74A6: dissector_try_uint (packet.c:1171)
==26280==    by 0x689078A: dissect_frame (packet-frame.c:508)
==26280== 
==26280== Conditional jump or move depends on uninitialised value(s)
==26280==    at 0x7113112: wmem_tree_lookup32 (wmem_tree.c:382)
==26280==    by 0x6723523:
dissect_bthci_evt_disconn_complete.isra.56.constprop.81
(packet-bthci_evt.c:1086)
==26280==    by 0x6723D32: dissect_bthci_evt (packet-bthci_evt.c:3420)
==26280==    by 0x65D61EE: call_dissector_through_handle (packet.c:622)
==26280==    by 0x65D6C2D: call_dissector_work (packet.c:713)
==26280==    by 0x65D7452: dissector_try_uint_new (packet.c:1145)
==26280==    by 0x692A432: dissect_hci_h4 (packet-hci_h4.c:135)
==26280==    by 0x65D61EE: call_dissector_through_handle (packet.c:622)
==26280==    by 0x65D6C2D: call_dissector_work (packet.c:713)
==26280==    by 0x65D7452: dissector_try_uint_new (packet.c:1145)
==26280==    by 0x65D74A6: dissector_try_uint (packet.c:1171)
==26280==    by 0x689078A: dissect_frame (packet-frame.c:508)
==26280== 
==26280== 
==26280== HEAP SUMMARY:
==26280==     in use at exit: 1,205,343 bytes in 29,223 blocks
==26280==   total heap usage: 222,121 allocs, 192,898 frees, 28,452,206 bytes
allocated
==26280== 
==26280== LEAK SUMMARY:
==26280==    definitely lost: 5,384 bytes in 165 blocks
==26280==    indirectly lost: 36,424 bytes in 49 blocks
==26280==      possibly lost: 0 bytes in 0 blocks
==26280==    still reachable: 1,163,535 bytes in 29,009 blocks
==26280==         suppressed: 0 bytes in 0 blocks
==26280== Rerun with --leak-check=full to see details of leaked memory
==26280== 
==26280== For counts of detected and suppressed errors, rerun with: -v
==26280== Use --track-origins=yes to see where uninitialised values come from
==26280== ERROR SUMMARY: 2 errors from 2 contexts (suppressed: 3 from 3)

[ no debug trace ]


You are receiving this mail because:
  • You are watching all bug changes.