Wireshark-bugs: [Wireshark-bugs] [Bug 10353] New: Buildbot crash output: fuzz-2014-08-06-24669.p

Date: Thu, 07 Aug 2014 10:40:03 +0000
Bug ID 10353
Summary Buildbot crash output: fuzz-2014-08-06-24669.pcap
Classification Unclassified
Product Wireshark
Version unspecified
Hardware x86-64
URL http://www.wireshark.org/download/automated/captures/fuzz-2014-08-06-24669.pcap
OS Ubuntu
Status CONFIRMED
Severity Major
Priority High
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Problems have been found with the following capture file:

http://www.wireshark.org/download/automated/captures/fuzz-2014-08-06-24669.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/4436-out.cap

Build host information:
Linux wsbb04 3.13.0-32-generic #57-Ubuntu SMP Tue Jul 15 03:51:08 UTC 2014
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:    Ubuntu
Description:    Ubuntu 14.04.1 LTS
Release:    14.04
Codename:    trusty

Buildbot information:
BUILDBOT_REPOSITORY=ssh://[email protected]:29418/wireshark
BUILDBOT_BUILDNUMBER=2908
BUILDBOT_URL=http://buildbot.wireshark.org/trunk/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_SLAVENAME=clang-code-analysis
BUILDBOT_GOT_REVISION=892703f9181fe98e87926c70b348b6df3e69c82e

Return value:  0

Dissector bug:  0

Valgrind error count:  2



Git commit
commit 892703f9181fe98e87926c70b348b6df3e69c82e
Author: AndersBroman <[email protected]>
Date:   Wed Aug 6 15:26:20 2014 +0200

    The heuristic for T.125 per is too week and we do not have a PER dissector
    for T.125 so remove the test.
    Remove unused hf entries.
    Fixes bug 10350.

    Change-Id: If28de7877388c669082f8c8a21dd63107d417fbf
    Reviewed-on: https://code.wireshark.org/review/3458
    Reviewed-by: Anders Broman <[email protected]>


Command and args: ./tools/valgrind-wireshark.sh -T

==27437== Memcheck, a memory error detector
==27437== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al.
==27437== Using Valgrind-3.10.0.SVN and LibVEX; rerun with -h for copyright
info
==27437== Command:
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/bin/tshark
-Vx -nr
/fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2014-08-06-24669.pcap
==27437== 
==27437== Conditional jump or move depends on uninitialised value(s)
==27437==    at 0x4C2E0F8: strlen (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==27437==    by 0x99EFB02: g_strdup (in
/lib/x86_64-linux-gnu/libglib-2.0.so.0.4000.0)
==27437==    by 0x667D351: string_fvalue_set_string (ftype-string.c:53)
==27437==    by 0x6645FBA: proto_tree_add_string (proto.c:2983)
==27437==    by 0x67EAB07: dissect_cups (packet-cups.c:189)
==27437==    by 0x6633A93: call_dissector_through_handle (packet.c:626)
==27437==    by 0x66343B4: call_dissector_work (packet.c:713)
==27437==    by 0x6634A6B: dissector_try_uint_new (packet.c:1145)
==27437==    by 0x6634AC6: dissector_try_uint (packet.c:1171)
==27437==    by 0x6D54549: decode_udp_ports (packet-udp.c:461)
==27437==    by 0x6D54DE6: dissect (packet-udp.c:811)
==27437==    by 0x6633A93: call_dissector_through_handle (packet.c:626)
==27437== 
==27437== Conditional jump or move depends on uninitialised value(s)
==27437==    at 0x4C2E0F8: strlen (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==27437==    by 0x66411EF: hfinfo_format_text.isra.10 (proto.c:4058)
==27437==    by 0x664C113: proto_item_fill_label (proto.c:5979)
==27437==    by 0x663FC55: proto_tree_print_node (print.c:186)
==27437==    by 0x66414FB: proto_tree_children_foreach (proto.c:615)
==27437==    by 0x663FB16: proto_tree_print_node (print.c:241)
==27437==    by 0x66414FB: proto_tree_children_foreach (proto.c:615)
==27437==    by 0x663EDA5: proto_tree_print (print.c:153)
==27437==    by 0x4101B3: print_packet (tshark.c:3959)
==27437==    by 0x410AF2: process_packet (tshark.c:3571)
==27437==    by 0x40BF75: main (tshark.c:3347)
==27437== 
==27437== 
==27437== HEAP SUMMARY:
==27437==     in use at exit: 1,212,640 bytes in 29,485 blocks
==27437==   total heap usage: 403,656 allocs, 374,171 frees, 41,969,026 bytes
allocated
==27437== 
==27437== LEAK SUMMARY:
==27437==    definitely lost: 3,640 bytes in 161 blocks
==27437==    indirectly lost: 36,664 bytes in 50 blocks
==27437==      possibly lost: 0 bytes in 0 blocks
==27437==    still reachable: 1,172,336 bytes in 29,274 blocks
==27437==         suppressed: 0 bytes in 0 blocks
==27437== Rerun with --leak-check=full to see details of leaked memory
==27437== 
==27437== For counts of detected and suppressed errors, rerun with: -v
==27437== Use --track-origins=yes to see where uninitialised values come from
==27437== ERROR SUMMARY: 2 errors from 2 contexts (suppressed: 0 from 0)

[ no debug trace ]


You are receiving this mail because:
  • You are watching all bug changes.