Wireshark-bugs: [Wireshark-bugs] [Bug 10701] New: Buildbot crash output: fuzz-2014-11-14-18166.p
Date: Fri, 14 Nov 2014 10:50:02 +0000
Bug ID | 10701 |
---|---|
Summary | Buildbot crash output: fuzz-2014-11-14-18166.pcap |
Product | Wireshark |
Version | unspecified |
Hardware | x86-64 |
URL | https://www.wireshark.org/download/automated/captures/fuzz-2014-11-14-18166.pcap |
OS | Ubuntu |
Status | CONFIRMED |
Severity | Major |
Priority | High |
Component | Dissection engine (libwireshark) |
Assignee | [email protected] |
Reporter | [email protected] |
Problems have been found with the following capture file: https://www.wireshark.org/download/automated/captures/fuzz-2014-11-14-18166.pcap stderr: Input file: /home/wireshark/menagerie/menagerie/10783-traces_lass-pc-8.10.1.cap.gz Build host information: Linux wsbb04 3.13.0-39-generic #66-Ubuntu SMP Tue Oct 28 13:30:27 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux Distributor ID: Ubuntu Description: Ubuntu 14.04.1 LTS Release: 14.04 Codename: trusty Buildbot information: BUILDBOT_REPOSITORY=ssh://[email protected]:29418/wireshark BUILDBOT_BUILDNUMBER=3058 BUILDBOT_URL=http://buildbot.wireshark.org/trunk/ BUILDBOT_BUILDERNAME=Clang Code Analysis BUILDBOT_SLAVENAME=clang-code-analysis BUILDBOT_GOT_REVISION=f7d91bd29fe147598ea9a4d1eba340e71ef12e91 Return value: 0 Dissector bug: 0 Valgrind error count: 162 Git commit commit f7d91bd29fe147598ea9a4d1eba340e71ef12e91 Author: Gerald Combs <[email protected]> Date: Tue Nov 11 09:56:58 2014 -0800 Qt: Flatten group boxes. As discussed in change 5185, the "big 3" HIGs discourage the use of traditional group boxes. Flatten our existing ones. Change-Id: I68ef4aa9fd0f69a42750bf735df2250a468bfb2d Reviewed-on: https://code.wireshark.org/review/5263 Reviewed-by: Gerald Combs <[email protected]> Command and args: ./tools/valgrind-wireshark.sh ==7835== Memcheck, a memory error detector ==7835== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al. ==7835== Using Valgrind-3.10.0.SVN and LibVEX; rerun with -h for copyright info ==7835== Command: /home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/bin/tshark -nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2014-11-14-18166.pcap ==7835== ==7835== Invalid read of size 1 ==7835== at 0x4C2F1B1: strcmp (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==7835== by 0x9AD3FC8: g_str_equal (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==7835== by 0x9AD30BF: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==7835== by 0x66DB4F4: Radiuslex (radius_dict.l:341) ==7835== by 0x66DC76A: radius_load_dictionary (radius_dict.l:562) ==7835== by 0x6C5191F: register_radius_fields (packet-radius.c:2055) ==7835== by 0x66A9FED: proto_registrar_get_byname (proto.c:878) ==7835== by 0x6C502F6: dissect_attribute_value_pairs (packet-radius.c:994) ==7835== by 0x6C51382: dissect_radius (packet-radius.c:1715) ==7835== by 0x669C3FE: call_dissector_through_handle (packet.c:621) ==7835== by 0x669CCE4: call_dissector_work (packet.c:712) ==7835== by 0x669D39B: dissector_try_uint_new (packet.c:1144) ==7835== Address 0x12461430 is 0 bytes inside a block of size 9 free'd ==7835== at 0x4C2BDEC: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==7835== by 0x66DB4B9: Radiuslex (radius_dict.l:337) ==7835== by 0x66DC76A: radius_load_dictionary (radius_dict.l:562) ==7835== by 0x6C5191F: register_radius_fields (packet-radius.c:2055) ==7835== by 0x66A9FED: proto_registrar_get_byname (proto.c:878) ==7835== by 0x6C502F6: dissect_attribute_value_pairs (packet-radius.c:994) ==7835== by 0x6C51382: dissect_radius (packet-radius.c:1715) ==7835== by 0x669C3FE: call_dissector_through_handle (packet.c:621) ==7835== by 0x669CCE4: call_dissector_work (packet.c:712) ==7835== by 0x669D39B: dissector_try_uint_new (packet.c:1144) ==7835== by 0x669D3E6: dissector_try_uint (packet.c:1170) ==7835== by 0x6DCFC19: decode_udp_ports (packet-udp.c:493) ==7835== ==7835== Invalid read of size 1 ==7835== at 0x4C2F1C8: strcmp (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==7835== by 0x9AD3FC8: g_str_equal (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==7835== by 0x9AD30BF: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==7835== by 0x66DB4F4: Radiuslex (radius_dict.l:341) ==7835== by 0x66DC76A: radius_load_dictionary (radius_dict.l:562) ==7835== by 0x6C5191F: register_radius_fields (packet-radius.c:2055) ==7835== by 0x66A9FED: proto_registrar_get_byname (proto.c:878) ==7835== by 0x6C502F6: dissect_attribute_value_pairs (packet-radius.c:994) ==7835== by 0x6C51382: dissect_radius (packet-radius.c:1715) ==7835== by 0x669C3FE: call_dissector_through_handle (packet.c:621) ==7835== by 0x669CCE4: call_dissector_work (packet.c:712) ==7835== by 0x669D39B: dissector_try_uint_new (packet.c:1144) ==7835== Address 0x12461431 is 1 bytes inside a block of size 9 free'd ==7835== at 0x4C2BDEC: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==7835== by 0x66DB4B9: Radiuslex (radius_dict.l:337) ==7835== by 0x66DC76A: radius_load_dictionary (radius_dict.l:562) ==7835== by 0x6C5191F: register_radius_fields (packet-radius.c:2055) ==7835== by 0x66A9FED: proto_registrar_get_byname (proto.c:878) ==7835== by 0x6C502F6: dissect_attribute_value_pairs (packet-radius.c:994) ==7835== by 0x6C51382: dissect_radius (packet-radius.c:1715) ==7835== by 0x669C3FE: call_dissector_through_handle (packet.c:621) ==7835== by 0x669CCE4: call_dissector_work (packet.c:712) ==7835== by 0x669D39B: dissector_try_uint_new (packet.c:1144) ==7835== by 0x669D3E6: dissector_try_uint (packet.c:1170) ==7835== by 0x6DCFC19: decode_udp_ports (packet-udp.c:493) ==7835== ==7835== Invalid read of size 1 ==7835== at 0x4C2F1B1: strcmp (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==7835== by 0x9AD3FC8: g_str_equal (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==7835== by 0x9AD35EF: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==7835== by 0x66DA9CD: add_attribute (radius_dict.l:359) ==7835== by 0x66DBAFF: Radiuslex (radius_dict.l:234) ==7835== by 0x66DC76A: radius_load_dictionary (radius_dict.l:562) ==7835== by 0x6C5191F: register_radius_fields (packet-radius.c:2055) ==7835== by 0x66A9FED: proto_registrar_get_byname (proto.c:878) ==7835== by 0x6C502F6: dissect_attribute_value_pairs (packet-radius.c:994) ==7835== by 0x6C51382: dissect_radius (packet-radius.c:1715) ==7835== by 0x669C3FE: call_dissector_through_handle (packet.c:621) ==7835== by 0x669CCE4: call_dissector_work (packet.c:712) ==7835== Address 0x12461430 is 0 bytes inside a block of size 9 free'd ==7835== at 0x4C2BDEC: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==7835== by 0x66DB4B9: Radiuslex (radius_dict.l:337) ==7835== by 0x66DC76A: radius_load_dictionary (radius_dict.l:562) ==7835== by 0x6C5191F: register_radius_fields (packet-radius.c:2055) ==7835== by 0x66A9FED: proto_registrar_get_byname (proto.c:878) ==7835== by 0x6C502F6: dissect_attribute_value_pairs (packet-radius.c:994) ==7835== by 0x6C51382: dissect_radius (packet-radius.c:1715) ==7835== by 0x669C3FE: call_dissector_through_handle (packet.c:621) ==7835== by 0x669CCE4: call_dissector_work (packet.c:712) ==7835== by 0x669D39B: dissector_try_uint_new (packet.c:1144) ==7835== by 0x669D3E6: dissector_try_uint (packet.c:1170) ==7835== by 0x6DCFC19: decode_udp_ports (packet-udp.c:493) ==7835== ==7835== Invalid read of size 1 ==7835== at 0x4C2F1C8: strcmp (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==7835== by 0x9AD3FC8: g_str_equal (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==7835== by 0x9AD35EF: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==7835== by 0x66DA9CD: add_attribute (radius_dict.l:359) ==7835== by 0x66DBAFF: Radiuslex (radius_dict.l:234) ==7835== by 0x66DC76A: radius_load_dictionary (radius_dict.l:562) ==7835== by 0x6C5191F: register_radius_fields (packet-radius.c:2055) ==7835== by 0x66A9FED: proto_registrar_get_byname (proto.c:878) ==7835== by 0x6C502F6: dissect_attribute_value_pairs (packet-radius.c:994) ==7835== by 0x6C51382: dissect_radius (packet-radius.c:1715) ==7835== by 0x669C3FE: call_dissector_through_handle (packet.c:621) ==7835== by 0x669CCE4: call_dissector_work (packet.c:712) ==7835== Address 0x12461431 is 1 bytes inside a block of size 9 free'd ==7835== at 0x4C2BDEC: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==7835== by 0x66DB4B9: Radiuslex (radius_dict.l:337) ==7835== by 0x66DC76A: radius_load_dictionary (radius_dict.l:562) ==7835== by 0x6C5191F: register_radius_fields (packet-radius.c:2055) ==7835== by 0x66A9FED: proto_registrar_get_byname (proto.c:878) ==7835== by 0x6C502F6: dissect_attribute_value_pairs (packet-radius.c:994) ==7835== by 0x6C51382: dissect_radius (packet-radius.c:1715) ==7835== by 0x669C3FE: call_dissector_through_handle (packet.c:621) ==7835== by 0x669CCE4: call_dissector_work (packet.c:712) ==7835== by 0x669D39B: dissector_try_uint_new (packet.c:1144) ==7835== by 0x669D3E6: dissector_try_uint (packet.c:1170) ==7835== by 0x6DCFC19: decode_udp_ports (packet-udp.c:493) ==7835== ==7835== ==7835== HEAP SUMMARY: ==7835== in use at exit: 2,365,573 bytes in 47,792 blocks ==7835== total heap usage: 345,046 allocs, 297,254 frees, 50,964,735 bytes allocated ==7835== ==7835== LEAK SUMMARY: ==7835== definitely lost: 3,584 bytes in 156 blocks ==7835== indirectly lost: 36,648 bytes in 49 blocks ==7835== possibly lost: 0 bytes in 0 blocks ==7835== still reachable: 2,325,341 bytes in 47,587 blocks ==7835== suppressed: 0 bytes in 0 blocks ==7835== Rerun with --leak-check=full to see details of leaked memory ==7835== ==7835== For counts of detected and suppressed errors, rerun with: -v ==7835== ERROR SUMMARY: 162 errors from 4 contexts (suppressed: 0 from 0) [ no debug trace ]
You are receiving this mail because:
- You are watching all bug changes.
- Follow-Ups:
- [Wireshark-bugs] [Bug 10701] Buildbot crash output: fuzz-2014-11-14-18166.pcap
- From: bugzilla-daemon
- [Wireshark-bugs] [Bug 10701] Buildbot crash output: fuzz-2014-11-14-18166.pcap
- Prev by Date: [Wireshark-bugs] [Bug 10700] DNS NAPTR RR Replacement Length is incorrect
- Next by Date: [Wireshark-bugs] [Bug 10618] IPv6 Vendor Specific Mobility Option includes the next mobility option type
- Previous by thread: [Wireshark-bugs] [Bug 10700] DNS NAPTR RR Replacement Length is incorrect
- Next by thread: [Wireshark-bugs] [Bug 10701] Buildbot crash output: fuzz-2014-11-14-18166.pcap
- Index(es):