[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	10454
Summary	Buildbot crash output: fuzz-2014-09-07-19671.pcap
Product	Wireshark
Version	unspecified
Hardware	x86-64
URL	https://www.wireshark.org/download/automated/captures/fuzz-2014-09-07-19671.pcap
OS	Ubuntu
Status	CONFIRMED
Severity	Major
Priority	High
Component	Dissection engine (libwireshark)
Assignee	bugzilla-admin@wireshark.org
Reporter	buildbot-do-not-reply@wireshark.org

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2014-09-07-19671.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/5640-TSTI11_DSA.TRC

Build host information:
Linux wsbb04 3.13.0-35-generic #62-Ubuntu SMP Fri Aug 15 01:58:42 UTC 2014
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:    Ubuntu
Description:    Ubuntu 14.04.1 LTS
Release:    14.04
Codename:    trusty

Buildbot information:
BUILDBOT_REPOSITORY=ssh://wireshark-buildbot@code.wireshark.org:29418/wireshark
BUILDBOT_BUILDNUMBER=2960
BUILDBOT_URL=http://buildbot.wireshark.org/trunk/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_SLAVENAME=clang-code-analysis
BUILDBOT_GOT_REVISION=56ae87a3dd471918a5a0c2f579f7f2a761d446aa

Return value:  0

Dissector bug:  0

Valgrind error count:  6



Git commit
commit 56ae87a3dd471918a5a0c2f579f7f2a761d446aa
Author: Jeff Morriss <jeff.morriss.ws@gmail.com>
Date:   Fri Sep 5 10:42:02 2014 -0400

    Fix compilation when we don't HAVE_GEOIP.

    Change-Id: Ib72178aab69c266cb903ef5ad5587cc0b80eb1fd
    Reviewed-on: https://code.wireshark.org/review/4007
    Reviewed-by: Michael Mann <mmann78@netscape.net>


Command and args: ./tools/valgrind-wireshark.sh 

==8248== Memcheck, a memory error detector
==8248== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al.
==8248== Using Valgrind-3.10.0.SVN and LibVEX; rerun with -h for copyright info
==8248== Command:
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/bin/tshark
-nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2014-09-07-19671.pcap
==8248== 
==8248== Conditional jump or move depends on uninitialised value(s)
==8248==    at 0x6F45C04: dissect_ros_T_argument (ros.cnf:39)
==8248==    by 0x675FB0B: dissect_ber_sequence (packet-ber.c:2384)
==8248==    by 0x6F44BDF: dissect_ros_Invoke (ros.cnf:63)
==8248==    by 0x675DEC4: dissect_ber_choice (packet-ber.c:2895)
==8248==    by 0x6F44F3E: dissect_ros (ros.cnf:199)
==8248==    by 0x666275E: call_dissector_through_handle (packet.c:622)
==8248==    by 0x6663044: call_dissector_work (packet.c:713)
==8248==    by 0x66639D2: dissector_try_string (packet.c:1420)
==8248==    by 0x675EEB6: call_ber_oid_callback (packet-ber.c:1074)
==8248==    by 0x6F280CF: dissect_pres_T_single_ASN1_type (pres.cnf:42)
==8248==    by 0x675DEC4: dissect_ber_choice (packet-ber.c:2895)
==8248==    by 0x6F271BF: dissect_pres_T_presentation_data_values (pres.cnf:99)
==8248== 
==8248== Use of uninitialised value of size 8
==8248==    at 0x9A4D593: g_hash_table_lookup (in
/lib/x86_64-linux-gnu/libglib-2.0.so.0.4000.0)
==8248==    by 0x6F27A22: find_oid_by_pres_ctx_id (packet-pres-template.c:197)
==8248==    by 0x6F45C20: dissect_ros_T_argument (ros.cnf:39)
==8248==    by 0x675FB0B: dissect_ber_sequence (packet-ber.c:2384)
==8248==    by 0x6F44BDF: dissect_ros_Invoke (ros.cnf:63)
==8248==    by 0x675DEC4: dissect_ber_choice (packet-ber.c:2895)
==8248==    by 0x6F44F3E: dissect_ros (ros.cnf:199)
==8248==    by 0x666275E: call_dissector_through_handle (packet.c:622)
==8248==    by 0x6663044: call_dissector_work (packet.c:713)
==8248==    by 0x66639D2: dissector_try_string (packet.c:1420)
==8248==    by 0x675EEB6: call_ber_oid_callback (packet-ber.c:1074)
==8248==    by 0x6F280CF: dissect_pres_T_single_ASN1_type (pres.cnf:42)
==8248== 
==8248== Conditional jump or move depends on uninitialised value(s)
==8248==    at 0x9A4D5CC: g_hash_table_lookup (in
/lib/x86_64-linux-gnu/libglib-2.0.so.0.4000.0)
==8248==    by 0x6F27A22: find_oid_by_pres_ctx_id (packet-pres-template.c:197)
==8248==    by 0x6F45C20: dissect_ros_T_argument (ros.cnf:39)
==8248==    by 0x675FB0B: dissect_ber_sequence (packet-ber.c:2384)
==8248==    by 0x6F44BDF: dissect_ros_Invoke (ros.cnf:63)
==8248==    by 0x675DEC4: dissect_ber_choice (packet-ber.c:2895)
==8248==    by 0x6F44F3E: dissect_ros (ros.cnf:199)
==8248==    by 0x666275E: call_dissector_through_handle (packet.c:622)
==8248==    by 0x6663044: call_dissector_work (packet.c:713)
==8248==    by 0x66639D2: dissector_try_string (packet.c:1420)
==8248==    by 0x675EEB6: call_ber_oid_callback (packet-ber.c:1074)
==8248==    by 0x6F280CF: dissect_pres_T_single_ASN1_type (pres.cnf:42)
==8248== 
==8248== Use of uninitialised value of size 8
==8248==    at 0x9A4D5C2: g_hash_table_lookup (in
/lib/x86_64-linux-gnu/libglib-2.0.so.0.4000.0)
==8248==    by 0x6F27A22: find_oid_by_pres_ctx_id (packet-pres-template.c:197)
==8248==    by 0x6F45C20: dissect_ros_T_argument (ros.cnf:39)
==8248==    by 0x675FB0B: dissect_ber_sequence (packet-ber.c:2384)
==8248==    by 0x6F44BDF: dissect_ros_Invoke (ros.cnf:63)
==8248==    by 0x675DEC4: dissect_ber_choice (packet-ber.c:2895)
==8248==    by 0x6F44F3E: dissect_ros (ros.cnf:199)
==8248==    by 0x666275E: call_dissector_through_handle (packet.c:622)
==8248==    by 0x6663044: call_dissector_work (packet.c:713)
==8248==    by 0x66639D2: dissector_try_string (packet.c:1420)
==8248==    by 0x675EEB6: call_ber_oid_callback (packet-ber.c:1074)
==8248==    by 0x6F280CF: dissect_pres_T_single_ASN1_type (pres.cnf:42)
==8248== 
==8248== 
==8248== HEAP SUMMARY:
==8248==     in use at exit: 1,214,988 bytes in 29,579 blocks
==8248==   total heap usage: 225,212 allocs, 195,633 frees, 28,512,802 bytes
allocated
==8248== 
==8248== LEAK SUMMARY:
==8248==    definitely lost: 5,400 bytes in 166 blocks
==8248==    indirectly lost: 36,648 bytes in 49 blocks
==8248==      possibly lost: 0 bytes in 0 blocks
==8248==    still reachable: 1,172,940 bytes in 29,364 blocks
==8248==         suppressed: 0 bytes in 0 blocks
==8248== Rerun with --leak-check=full to see details of leaked memory
==8248== 
==8248== For counts of detected and suppressed errors, rerun with: -v
==8248== Use --track-origins=yes to see where uninitialised values come from
==8248== ERROR SUMMARY: 6 errors from 4 contexts (suppressed: 0 from 0)

[ no debug trace ]

---

      You are receiving this mail because:

• You are watching all bug changes.