[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	10985
Summary	Buildbot crash output: fuzz-2015-02-20-16504.pcap
Product	Wireshark
Version	unspecified
Hardware	x86-64
URL	https://www.wireshark.org/download/automated/captures/fuzz-2015-02-20-16504.pcap
OS	Ubuntu
Status	CONFIRMED
Severity	Major
Priority	High
Component	Dissection engine (libwireshark)
Assignee	bugzilla-admin@wireshark.org
Reporter	buildbot-do-not-reply@wireshark.org

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2015-02-20-16504.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/003transf.cap

Build host information:
Linux wsbb04 3.13.0-45-generic #74-Ubuntu SMP Tue Jan 13 19:36:28 UTC 2015
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:    Ubuntu
Description:    Ubuntu 14.04.1 LTS
Release:    14.04
Codename:    trusty

Buildbot information:
BUILDBOT_REPOSITORY=ssh://wireshark-buildbot@code.wireshark.org:29418/wireshark
BUILDBOT_BUILDNUMBER=3147
BUILDBOT_URL=http://buildbot.wireshark.org/trunk/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_SLAVENAME=clang-code-analysis
BUILDBOT_GOT_REVISION=7208355fb99f18b5b82d028f6af170f3dbafc8c9

Return value:  0

Dissector bug:  0

Valgrind error count:  1920



Git commit
commit 7208355fb99f18b5b82d028f6af170f3dbafc8c9
Author: Guy Harris <guy@alum.mit.edu>
Date:   Thu Feb 19 02:14:39 2015 -0800

    Don't put CORBA IDL dissectors in ASN1_ variables.

    Put them into separate CORBA_IDL_ variables, to keep the two types of
    generated dissectors separate.

    Change-Id: I4eb091a76ba5bc7d73533ef38fb29adc12a8ec42
    Reviewed-on: https://code.wireshark.org/review/7250
    Reviewed-by: Guy Harris <guy@alum.mit.edu>


Command and args: ./tools/valgrind-wireshark.sh 

==26987== Memcheck, a memory error detector
==26987== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al.
==26987== Using Valgrind-3.10.0.SVN and LibVEX; rerun with -h for copyright
info
==26987== Command:
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/bin/tshark
-nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2015-02-20-16504.pcap
==26987== 
==26987== Use of uninitialised value of size 8
==26987==    at 0x6739C7C: bytes_to_hexstr_punct (to_str.c:64)
==26987==    by 0x66F971A: manuf_hash_new_entry (addr_resolv.c:1289)
==26987==    by 0x66F9B89: manuf_name_lookup (addr_resolv.c:1367)
==26987==    by 0x66FBCD8: get_manuf_name (addr_resolv.c:3116)
==26987==    by 0x66FBD31: uint_get_manuf_name (addr_resolv.c:3132)
==26987==    by 0x6AB2B06: add_tagged_field (packet-ieee80211.c:15042)
==26987==    by 0x6ABAFF9: ieee_80211_add_tagged_parameters
(packet-ieee80211.c:16081)
==26987==    by 0x6ABE083: dissect_ieee80211_common (packet-ieee80211.c:16234)
==26987==    by 0x6AC0BEC: dissect_ieee80211 (packet-ieee80211.c:18224)
==26987==    by 0x6712DC3: call_dissector_through_handle (packet.c:614)
==26987==    by 0x6713794: call_dissector_work (packet.c:700)
==26987==    by 0x6713EDB: dissector_try_uint_new (packet.c:1132)
==26987== 
==26987== Use of uninitialised value of size 8
==26987==    at 0x6739C84: bytes_to_hexstr_punct (to_str.c:65)
==26987==    by 0x66F971A: manuf_hash_new_entry (addr_resolv.c:1289)
==26987==    by 0x66F9B89: manuf_name_lookup (addr_resolv.c:1367)
==26987==    by 0x66FBCD8: get_manuf_name (addr_resolv.c:3116)
==26987==    by 0x66FBD31: uint_get_manuf_name (addr_resolv.c:3132)
==26987==    by 0x6AB2B06: add_tagged_field (packet-ieee80211.c:15042)
==26987==    by 0x6ABAFF9: ieee_80211_add_tagged_parameters
(packet-ieee80211.c:16081)
==26987==    by 0x6ABE083: dissect_ieee80211_common (packet-ieee80211.c:16234)
==26987==    by 0x6AC0BEC: dissect_ieee80211 (packet-ieee80211.c:18224)
==26987==    by 0x6712DC3: call_dissector_through_handle (packet.c:614)
==26987==    by 0x6713794: call_dissector_work (packet.c:700)
==26987==    by 0x6713EDB: dissector_try_uint_new (packet.c:1132)
==26987== 
==26987== 
==26987== HEAP SUMMARY:
==26987==     in use at exit: 1,221,296 bytes in 29,811 blocks
==26987==   total heap usage: 364,652 allocs, 334,841 frees, 34,861,136 bytes
allocated
==26987== 
==26987== LEAK SUMMARY:
==26987==    definitely lost: 3,656 bytes in 156 blocks
==26987==    indirectly lost: 36,968 bytes in 51 blocks
==26987==      possibly lost: 0 bytes in 0 blocks
==26987==    still reachable: 1,180,672 bytes in 29,604 blocks
==26987==         suppressed: 0 bytes in 0 blocks
==26987== Rerun with --leak-check=full to see details of leaked memory
==26987== 
==26987== For counts of detected and suppressed errors, rerun with: -v
==26987== Use --track-origins=yes to see where uninitialised values come from
==26987== ERROR SUMMARY: 1920 errors from 2 contexts (suppressed: 0 from 0)

[ no debug trace ]

---

      You are receiving this mail because:

• You are watching all bug changes.