Wireshark-bugs: [Wireshark-bugs] [Bug 10864] New: Buildbot crash output: fuzz-2015-01-17-24866.p
Date: Sat, 17 Jan 2015 04:40:05 +0000
Bug ID | 10864 |
---|---|
Summary | Buildbot crash output: fuzz-2015-01-17-24866.pcap |
Product | Wireshark |
Version | unspecified |
Hardware | x86-64 |
URL | https://www.wireshark.org/download/automated/captures/fuzz-2015-01-17-24866.pcap |
OS | Ubuntu |
Status | CONFIRMED |
Severity | Major |
Priority | High |
Component | Dissection engine (libwireshark) |
Assignee | [email protected] |
Reporter | [email protected] |
Problems have been found with the following capture file: https://www.wireshark.org/download/automated/captures/fuzz-2015-01-17-24866.pcap stderr: Input file: /home/wireshark/menagerie/menagerie/10159-c910.pcap Build host information: Linux wsbb04 3.13.0-44-generic #73-Ubuntu SMP Tue Dec 16 00:22:43 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux Distributor ID: Ubuntu Description: Ubuntu 14.04.1 LTS Release: 14.04 Codename: trusty Buildbot information: BUILDBOT_REPOSITORY=ssh://[email protected]:29418/wireshark BUILDBOT_BUILDNUMBER=3113 BUILDBOT_URL=http://buildbot.wireshark.org/trunk/ BUILDBOT_BUILDERNAME=Clang Code Analysis BUILDBOT_SLAVENAME=clang-code-analysis BUILDBOT_GOT_REVISION=d5ee022b9e7cecbacc6433597ac44a140e8354ff Return value: 0 Dissector bug: 0 Valgrind error count: 136 Git commit commit d5ee022b9e7cecbacc6433597ac44a140e8354ff Author: Michael Mann <[email protected]> Date: Thu Jan 15 15:09:47 2015 -0500 Replace C++ style comment with C style. Change-Id: Ibee0dccdb5a330866dcd0047216cd5a4da45fc8b Reviewed-on: https://code.wireshark.org/review/6559 Reviewed-by: Michael Mann <[email protected]> Command and args: ./tools/valgrind-wireshark.sh ==22528== Memcheck, a memory error detector ==22528== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al. ==22528== Using Valgrind-3.10.0.SVN and LibVEX; rerun with -h for copyright info ==22528== Command: /home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/bin/tshark -nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2015-01-17-24866.pcap ==22528== ==22528== Use of uninitialised value of size 8 ==22528== at 0x9BA8593: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1B22: find_conversation (conversation.c:900) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Conditional jump or move depends on uninitialised value(s) ==22528== at 0x9BA85CC: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1B22: find_conversation (conversation.c:900) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Use of uninitialised value of size 8 ==22528== at 0x9BA85C2: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1B22: find_conversation (conversation.c:900) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Use of uninitialised value of size 8 ==22528== at 0x9BA8593: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1B46: find_conversation (conversation.c:907) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Use of uninitialised value of size 8 ==22528== at 0x9BA8593: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1C4B: find_conversation (conversation.c:993) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Use of uninitialised value of size 8 ==22528== at 0x9BA8593: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1A51: find_conversation (conversation.c:1037) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Use of uninitialised value of size 8 ==22528== at 0x9BA8593: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1D45: find_conversation (conversation.c:1088) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Use of uninitialised value of size 8 ==22528== at 0x9BA8593: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1CB1: find_conversation (conversation.c:1178) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Use of uninitialised value of size 8 ==22528== at 0x9BA8593: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E1004: conversation_insert_into_hashtable (conversation.c:552) ==22528== by 0x66E16BC: conversation_new (conversation.c:724) ==22528== by 0x6E4EAD4: get_usb_conversation (packet-usb.c:1149) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Conditional jump or move depends on uninitialised value(s) ==22528== at 0x9BA85CC: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E1004: conversation_insert_into_hashtable (conversation.c:552) ==22528== by 0x66E16BC: conversation_new (conversation.c:724) ==22528== by 0x6E4EAD4: get_usb_conversation (packet-usb.c:1149) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Use of uninitialised value of size 8 ==22528== at 0x9BA85C2: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E1004: conversation_insert_into_hashtable (conversation.c:552) ==22528== by 0x66E16BC: conversation_new (conversation.c:724) ==22528== by 0x6E4EAD4: get_usb_conversation (packet-usb.c:1149) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Use of uninitialised value of size 8 ==22528== at 0x9BA8068: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E16BC: conversation_new (conversation.c:724) ==22528== by 0x6E4EAD4: get_usb_conversation (packet-usb.c:1149) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== by 0x66F04EE: call_dissector_through_handle (packet.c:632) ==22528== ==22528== Conditional jump or move depends on uninitialised value(s) ==22528== at 0x9BA80A4: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E16BC: conversation_new (conversation.c:724) ==22528== by 0x6E4EAD4: get_usb_conversation (packet-usb.c:1149) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== by 0x66F04EE: call_dissector_through_handle (packet.c:632) ==22528== ==22528== Use of uninitialised value of size 8 ==22528== at 0x9BA809A: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E16BC: conversation_new (conversation.c:724) ==22528== by 0x6E4EAD4: get_usb_conversation (packet-usb.c:1149) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== by 0x66F04EE: call_dissector_through_handle (packet.c:632) ==22528== ==22528== Use of uninitialised value of size 8 ==22528== at 0x9BA7E9B: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x9BA8106: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E16BC: conversation_new (conversation.c:724) ==22528== by 0x6E4EAD4: get_usb_conversation (packet-usb.c:1149) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Use of uninitialised value of size 8 ==22528== at 0x9BA7F38: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x9BA8106: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E16BC: conversation_new (conversation.c:724) ==22528== by 0x6E4EAD4: get_usb_conversation (packet-usb.c:1149) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Use of uninitialised value of size 8 ==22528== at 0x9BA7F49: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x9BA8106: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E16BC: conversation_new (conversation.c:724) ==22528== by 0x6E4EAD4: get_usb_conversation (packet-usb.c:1149) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Use of uninitialised value of size 8 ==22528== at 0x9BA7ED9: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x9BA8106: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E16BC: conversation_new (conversation.c:724) ==22528== by 0x6E4EAD4: get_usb_conversation (packet-usb.c:1149) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Conditional jump or move depends on uninitialised value(s) ==22528== at 0x9BA85C7: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1B22: find_conversation (conversation.c:900) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Use of uninitialised value of size 8 ==22528== at 0x9BA85D6: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1B22: find_conversation (conversation.c:900) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Conditional jump or move depends on uninitialised value(s) ==22528== at 0x4C30C32: __memcmp_sse4_1 (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==22528== by 0x66E13AD: conversation_match_exact (address.h:186) ==22528== by 0x9BA85EF: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1B22: find_conversation (conversation.c:900) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== ==22528== Use of uninitialised value of size 8 ==22528== at 0x9BA8659: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1B22: find_conversation (conversation.c:900) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Conditional jump or move depends on uninitialised value(s) ==22528== at 0x9BA863A: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1B22: find_conversation (conversation.c:900) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Use of uninitialised value of size 8 ==22528== at 0x9BA8641: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1B22: find_conversation (conversation.c:900) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E50DEB: dissect_usb_setup_request (packet-usb.c:2657) ==22528== by 0x6E52210: dissect_usb_common (packet-usb.c:3517) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== ==22528== Conditional jump or move depends on uninitialised value(s) ==22528== at 0x9BA8598: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1B22: find_conversation (conversation.c:900) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E4EEE4: try_dissect_next_protocol.part.8 (packet-usb.c:2762) ==22528== by 0x6E51C30: dissect_usb_common (packet-usb.c:2657) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== by 0x66F04EE: call_dissector_through_handle (packet.c:632) ==22528== ==22528== Conditional jump or move depends on uninitialised value(s) ==22528== at 0x9BA85A4: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1B22: find_conversation (conversation.c:900) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E5138A: dissect_usb_common (packet-usb.c:3468) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== by 0x66F04EE: call_dissector_through_handle (packet.c:632) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== ==22528== Conditional jump or move depends on uninitialised value(s) ==22528== at 0x9BA8613: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1B22: find_conversation (conversation.c:900) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E5138A: dissect_usb_common (packet-usb.c:3468) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== by 0x66F04EE: call_dissector_through_handle (packet.c:632) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== ==22528== Conditional jump or move depends on uninitialised value(s) ==22528== at 0x9BA85C7: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E1004: conversation_insert_into_hashtable (conversation.c:552) ==22528== by 0x66E16BC: conversation_new (conversation.c:724) ==22528== by 0x6E4EAD4: get_usb_conversation (packet-usb.c:1149) ==22528== by 0x6E5138A: dissect_usb_common (packet-usb.c:3468) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== by 0x66F04EE: call_dissector_through_handle (packet.c:632) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== ==22528== Conditional jump or move depends on uninitialised value(s) ==22528== at 0x9BA8613: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E1004: conversation_insert_into_hashtable (conversation.c:552) ==22528== by 0x66E16BC: conversation_new (conversation.c:724) ==22528== by 0x6E4EAD4: get_usb_conversation (packet-usb.c:1149) ==22528== by 0x6E5138A: dissect_usb_common (packet-usb.c:3468) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== by 0x66F04EE: call_dissector_through_handle (packet.c:632) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== ==22528== Conditional jump or move depends on uninitialised value(s) ==22528== at 0x9BA809F: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E16BC: conversation_new (conversation.c:724) ==22528== by 0x6E4EAD4: get_usb_conversation (packet-usb.c:1149) ==22528== by 0x6E5138A: dissect_usb_common (packet-usb.c:3468) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== by 0x66F04EE: call_dissector_through_handle (packet.c:632) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F2BC1: call_dissector_with_data (packet.c:2413) ==22528== ==22528== Conditional jump or move depends on uninitialised value(s) ==22528== at 0x9BA80A4: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E16BC: conversation_new (conversation.c:724) ==22528== by 0x6E4EAD4: get_usb_conversation (packet-usb.c:1149) ==22528== by 0x6E5138A: dissect_usb_common (packet-usb.c:3468) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== by 0x66F04EE: call_dissector_through_handle (packet.c:632) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F2BC1: call_dissector_with_data (packet.c:2413) ==22528== ==22528== Conditional jump or move depends on uninitialised value(s) ==22528== at 0x9BA8123: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E16BC: conversation_new (conversation.c:724) ==22528== by 0x6E4EAD4: get_usb_conversation (packet-usb.c:1149) ==22528== by 0x6E5138A: dissect_usb_common (packet-usb.c:3468) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== by 0x66F04EE: call_dissector_through_handle (packet.c:632) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F2BC1: call_dissector_with_data (packet.c:2413) ==22528== ==22528== Conditional jump or move depends on uninitialised value(s) ==22528== at 0x9BA85C7: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1B46: find_conversation (conversation.c:907) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E5138A: dissect_usb_common (packet-usb.c:3468) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== by 0x66F04EE: call_dissector_through_handle (packet.c:632) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== ==22528== Conditional jump or move depends on uninitialised value(s) ==22528== at 0x9BA85CC: g_hash_table_lookup (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E0F74: conversation_lookup_hashtable (conversation.c:824) ==22528== by 0x66E1B46: find_conversation (conversation.c:907) ==22528== by 0x6E4EA99: get_usb_conversation (packet-usb.c:1140) ==22528== by 0x6E5138A: dissect_usb_common (packet-usb.c:3468) ==22528== by 0x66F04B3: call_dissector_through_handle (packet.c:636) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== by 0x66F168B: dissector_try_uint_new (packet.c:1155) ==22528== by 0x66F16D6: dissector_try_uint (packet.c:1181) ==22528== by 0x69B4690: dissect_frame (packet-frame.c:494) ==22528== by 0x66F04EE: call_dissector_through_handle (packet.c:632) ==22528== by 0x66F0F44: call_dissector_work (packet.c:723) ==22528== ==22528== Conditional jump or move depends on uninitialised value(s) ==22528== at 0x9BA7C7E: ??? (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x9BA89A0: g_hash_table_remove_all (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x9BA8A0D: g_hash_table_destroy (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==22528== by 0x66E141F: conversation_cleanup (conversation.c:489) ==22528== by 0x66F11A8: cleanup_dissection (packet.c:265) ==22528== by 0x66E5D2D: epan_free (epan.c:202) ==22528== by 0x40C9F9: main (tshark.c:2253) ==22528== ==22528== ==22528== HEAP SUMMARY: ==22528== in use at exit: 1,217,922 bytes in 29,716 blocks ==22528== total heap usage: 227,396 allocs, 197,680 frees, 28,741,079 bytes allocated ==22528== ==22528== LEAK SUMMARY: ==22528== definitely lost: 3,656 bytes in 156 blocks ==22528== indirectly lost: 36,744 bytes in 51 blocks ==22528== possibly lost: 0 bytes in 0 blocks ==22528== still reachable: 1,177,522 bytes in 29,509 blocks ==22528== suppressed: 0 bytes in 0 blocks ==22528== Rerun with --leak-check=full to see details of leaked memory ==22528== ==22528== For counts of detected and suppressed errors, rerun with: -v ==22528== Use --track-origins=yes to see where uninitialised values come from ==22528== ERROR SUMMARY: 136 errors from 35 contexts (suppressed: 0 from 0) [ no debug trace ]
You are receiving this mail because:
- You are watching all bug changes.
- Follow-Ups:
- [Wireshark-bugs] [Bug 10864] Buildbot crash output: fuzz-2015-01-17-24866.pcap
- From: bugzilla-daemon
- [Wireshark-bugs] [Bug 10864] Buildbot crash output: fuzz-2015-01-17-24866.pcap
- Prev by Date: [Wireshark-bugs] [Bug 10861] Little-endian OS X Bluetooth PacketLogger files aren't handled
- Next by Date: [Wireshark-bugs] [Bug 10860] ZigBee ZCL cluster dissector incorrectly tied to ProfileId
- Previous by thread: [Wireshark-bugs] [Bug 10863] Malformed Packet on rsync-version with length 2
- Next by thread: [Wireshark-bugs] [Bug 10864] Buildbot crash output: fuzz-2015-01-17-24866.pcap
- Index(es):