Wireshark-bugs: [Wireshark-bugs] [Bug 10823] New: Buildbot crash output: fuzz-2015-01-01-29029.p
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 01 Jan 2015 23:10:03 +0000
Bug ID 10823
Summary Buildbot crash output: fuzz-2015-01-01-29029.pcap
Product Wireshark
Version unspecified
Hardware x86-64
URL https://www.wireshark.org/download/automated/captures/fuzz-2015-01-01-29029.pcap
OS Ubuntu
Status CONFIRMED
Severity Major
Priority High
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter buildbot-do-not-reply@wireshark.org 

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2015-01-01-29029.pcap

stderr:
Input file:
/home/wireshark/menagerie/menagerie/10617-smtp-auth-login-plain-sample.pcap

Build host information:
Linux wsbb04 3.13.0-43-generic #72-Ubuntu SMP Mon Dec 8 19:35:06 UTC 2014
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:    Ubuntu
Description:    Ubuntu 14.04.1 LTS
Release:    14.04
Codename:    trusty

Buildbot information:
BUILDBOT_REPOSITORY=ssh://wireshark-buildbot@code.wireshark.org:29418/wireshark
BUILDBOT_BUILDNUMBER=3093
BUILDBOT_URL=http://buildbot.wireshark.org/trunk/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_SLAVENAME=clang-code-analysis
BUILDBOT_GOT_REVISION=22701adba1599611eb8ec75f45e663f4b7404105

Return value:  0

Dissector bug:  0

Valgrind error count:  8



Git commit
commit 22701adba1599611eb8ec75f45e663f4b7404105
Author: Pascal Quantin <pascal.quantin@gmail.com>
Date:   Wed Dec 31 13:48:51 2014 +0100

    DNS: ensure that suffix_addr structure is always initialized

    Bug: 10816
    Change-Id: Ifd036148f9f2e76516913bda11cf07fdb63def94
    Reviewed-on: https://code.wireshark.org/review/6174
    Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>


Command and args: ./tools/valgrind-wireshark.sh 

==23156== Memcheck, a memory error detector
==23156== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al.
==23156== Using Valgrind-3.10.0.SVN and LibVEX; rerun with -h for copyright
info
==23156== Command:
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/bin/tshark
-nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2015-01-01-29029.pcap
==23156== 
==23156== Invalid read of size 1
==23156==    at 0x66FAAA0: format_text (strutil.c:184)
==23156==    by 0x6D9F764: dissect_smtp (packet-smtp.c:859)
==23156==    by 0x66D0C73: call_dissector_through_handle (packet.c:628)
==23156==    by 0x66D1704: call_dissector_work (packet.c:715)
==23156==    by 0x66D1E4B: dissector_try_uint_new (packet.c:1147)
==23156==    by 0x6DD7EDB: decode_tcp_ports (packet-tcp.c:4113)
==23156==    by 0x6DD824E: process_tcp_payload (packet-tcp.c:4185)
==23156==    by 0x6DD8835: dissect_tcp_payload (packet-tcp.c:1990)
==23156==    by 0x6DDA4C3: dissect_tcp (packet-tcp.c:5073)
==23156==    by 0x66D0C73: call_dissector_through_handle (packet.c:628)
==23156==    by 0x66D1704: call_dissector_work (packet.c:715)
==23156==    by 0x66D1E4B: dissector_try_uint_new (packet.c:1147)
==23156==  Address 0x11ba8a84 is 0 bytes after a block of size 4 alloc'd
==23156==    at 0x4C2CE8E: realloc (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==23156==    by 0x9B5F6AE: g_realloc (in
/lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0)
==23156==    by 0x7201680: wmem_simple_realloc (wmem_allocator_simple.c:90)
==23156==    by 0x7202C3C: wmem_strbuf_finalize (wmem_strbuf.c:252)
==23156==    by 0x6D9EF98: dissect_smtp (packet-smtp.c:578)
==23156==    by 0x66D0C73: call_dissector_through_handle (packet.c:628)
==23156==    by 0x66D1704: call_dissector_work (packet.c:715)
==23156==    by 0x66D1E4B: dissector_try_uint_new (packet.c:1147)
==23156==    by 0x6DD7EDB: decode_tcp_ports (packet-tcp.c:4113)
==23156==    by 0x6DD824E: process_tcp_payload (packet-tcp.c:4185)
==23156==    by 0x6DD8835: dissect_tcp_payload (packet-tcp.c:1990)
==23156==    by 0x6DDA4C3: dissect_tcp (packet-tcp.c:5073)
==23156== 
==23156== 
==23156== HEAP SUMMARY:
==23156==     in use at exit: 1,217,451 bytes in 29,665 blocks
==23156==   total heap usage: 227,107 allocs, 197,442 frees, 28,750,832 bytes
allocated
==23156== 
==23156== LEAK SUMMARY:
==23156==    definitely lost: 3,656 bytes in 156 blocks
==23156==    indirectly lost: 36,744 bytes in 51 blocks
==23156==      possibly lost: 0 bytes in 0 blocks
==23156==    still reachable: 1,177,051 bytes in 29,458 blocks
==23156==         suppressed: 0 bytes in 0 blocks
==23156== Rerun with --leak-check=full to see details of leaked memory
==23156== 
==23156== For counts of detected and suppressed errors, rerun with: -v
==23156== ERROR SUMMARY: 8 errors from 1 contexts (suppressed: 0 from 0)

[ no debug trace ]

You are receiving this mail because:
  • You are watching all bug changes.