| Bug ID |
11610
|
| Summary |
Buildbot crash output: fuzz-2015-10-15-664.pcap
|
| Product |
Wireshark
|
| Version |
unspecified
|
| Hardware |
x86-64
|
| URL |
https://www.wireshark.org/download/automated/captures/fuzz-2015-10-15-664.pcap
|
| OS |
Ubuntu
|
| Status |
CONFIRMED
|
| Severity |
Major
|
| Priority |
High
|
| Component |
Dissection engine (libwireshark)
|
| Assignee |
[email protected]
|
| Reporter |
[email protected]
|
Problems have been found with the following capture file:
https://www.wireshark.org/download/automated/captures/fuzz-2015-10-15-664.pcap
stderr:
Input file: /home/wireshark/menagerie/menagerie/testserver2.cap
Build host information:
Linux wsbb04 3.13.0-65-generic #105-Ubuntu SMP Mon Sep 21 18:50:58 UTC 2015
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID: Ubuntu
Description: Ubuntu 14.04.3 LTS
Release: 14.04
Codename: trusty
Buildbot information:
BUILDBOT_REPOSITORY=ssh://[email protected]:29418/wireshark
BUILDBOT_BUILDNUMBER=3336
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-master/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_SLAVENAME=clang-code-analysis
BUILDBOT_GOT_REVISION=66526f60c495a79a1d784caaca2c1f0d13bb7b11
Return value: 0
Dissector bug: 0
Valgrind error count: 2
Git commit
commit 66526f60c495a79a1d784caaca2c1f0d13bb7b11
Author: Guy Harris <[email protected]>
Date: Tue Oct 13 21:07:33 2015 -0700
Set QT_MULTIMEDIA_LIB if we're using Qt 4 and have QtMultimedia.
Change-Id: Iee13fe86c0d8cacc71ab1cae25f4c735c5fe7b1d
Reviewed-on: https://code.wireshark.org/review/10993
Reviewed-by: Guy Harris <[email protected]>
Command and args: ./tools/valgrind-wireshark.sh
==21241== Memcheck, a memory error detector
==21241== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al.
==21241== Using Valgrind-3.10.0.SVN and LibVEX; rerun with -h for copyright
info
==21241== Command:
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/bin/tshark
-nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2015-10-15-664.pcap
==21241==
==21241== Conditional jump or move depends on uninitialised value(s)
==21241== at 0x4C30C11: __memcmp_sse4_1 (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==21241== by 0x6A4D79E: dcom_interface_new (address.h:118)
==21241== by 0x6A50D68: dissect_dcom_OBJREF (packet-dcom.c:2104)
==21241== by 0x6A4FB7D: dissect_dcom_MInterfacePointer (packet-dcom.c:2146)
==21241== by 0x6A50E7F: dissect_dcom_PMInterfacePointer (packet-dcom.c:2165)
==21241== by 0xF153198: dissect_ICBALogicalDevice_get_ACCO_resp
(packet-dcom-cba.c:790)
==21241== by 0x6A4259A: dcerpc_try_handoff (packet-dcerpc.c:3151)
==21241== by 0x6A41856: dissect_dcerpc_cn_stub (packet-dcerpc.c:3811)
==21241== by 0x6A3FE85: dissect_dcerpc_cn (packet-dcerpc.c:4246)
==21241== by 0x6A42D23: dissect_dcerpc_pdu (packet-dcerpc.c:5241)
==21241== by 0x6F700E7: tcp_dissect_pdus (packet-tcp.c:2487)
==21241== by 0x6A3B363: dissect_dcerpc_tcp (packet-dcerpc.c:5259)
==21241==
==21241== Conditional jump or move depends on uninitialised value(s)
==21241== at 0x6A4D7A1: dcom_interface_new (packet-dcom.c:340)
==21241== by 0x6A50D68: dissect_dcom_OBJREF (packet-dcom.c:2104)
==21241== by 0x6A4FB7D: dissect_dcom_MInterfacePointer (packet-dcom.c:2146)
==21241== by 0x6A50E7F: dissect_dcom_PMInterfacePointer (packet-dcom.c:2165)
==21241== by 0xF153198: dissect_ICBALogicalDevice_get_ACCO_resp
(packet-dcom-cba.c:790)
==21241== by 0x6A4259A: dcerpc_try_handoff (packet-dcerpc.c:3151)
==21241== by 0x6A41856: dissect_dcerpc_cn_stub (packet-dcerpc.c:3811)
==21241== by 0x6A3FE85: dissect_dcerpc_cn (packet-dcerpc.c:4246)
==21241== by 0x6A42D23: dissect_dcerpc_pdu (packet-dcerpc.c:5241)
==21241== by 0x6F700E7: tcp_dissect_pdus (packet-tcp.c:2487)
==21241== by 0x6A3B363: dissect_dcerpc_tcp (packet-dcerpc.c:5259)
==21241== by 0x6802EE6: dissector_try_heuristic (packet.c:2177)
==21241==
==21241==
==21241== HEAP SUMMARY:
==21241== in use at exit: 1,037,441 bytes in 28,223 blocks
==21241== total heap usage: 243,890 allocs, 215,667 frees, 31,248,866 bytes
allocated
==21241==
==21241== LEAK SUMMARY:
==21241== definitely lost: 2,932 bytes in 126 blocks
==21241== indirectly lost: 36,448 bytes in 48 blocks
==21241== possibly lost: 0 bytes in 0 blocks
==21241== still reachable: 998,061 bytes in 28,049 blocks
==21241== suppressed: 0 bytes in 0 blocks
==21241== Rerun with --leak-check=full to see details of leaked memory
==21241==
==21241== For counts of detected and suppressed errors, rerun with: -v
==21241== Use --track-origins=yes to see where uninitialised values come from
==21241== ERROR SUMMARY: 2 errors from 2 contexts (suppressed: 0 from 0)
[ no debug trace ]
You are receiving this mail because:
- You are watching all bug changes.