Wireshark-bugs: [Wireshark-bugs] [Bug 11326] New: Buildbot crash output: fuzz-2015-07-02-6249.pc
Date: Thu, 02 Jul 2015 10:10:02 +0000
| Bug ID | 11326 |
|---|---|
| Summary | Buildbot crash output: fuzz-2015-07-02-6249.pcap |
| Product | Wireshark |
| Version | unspecified |
| Hardware | x86-64 |
| URL | https://www.wireshark.org/download/automated/captures/fuzz-2015-07-02-6249.pcap |
| OS | Ubuntu |
| Status | CONFIRMED |
| Severity | Major |
| Priority | High |
| Component | Dissection engine (libwireshark) |
| Assignee | bugzilla-admin@wireshark.org |
| Reporter | buildbot-do-not-reply@wireshark.org |
Problems have been found with the following capture file: https://www.wireshark.org/download/automated/captures/fuzz-2015-07-02-6249.pcap stderr: Input file: /home/wireshark/menagerie/menagerie/12373-omnipeek_80211n_pkt.pkt Build host information: Linux wsbb04 3.13.0-55-generic #92-Ubuntu SMP Sun Jun 14 18:32:20 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux Distributor ID: Ubuntu Description: Ubuntu 14.04.2 LTS Release: 14.04 Codename: trusty Buildbot information: BUILDBOT_REPOSITORY=ssh://wireshark-buildbot@code.wireshark.org:29418/wireshark BUILDBOT_BUILDNUMBER=3266 BUILDBOT_URL=http://buildbot.wireshark.org/trunk/ BUILDBOT_BUILDERNAME=Clang Code Analysis BUILDBOT_SLAVENAME=clang-code-analysis BUILDBOT_GOT_REVISION=74338f5e5cfde51170a0492a2663c465fdc70168 Return value: 0 Dissector bug: 0 Valgrind error count: 100 Git commit commit 74338f5e5cfde51170a0492a2663c465fdc70168 Author: Guy Harris <guy@alum.mit.edu> Date: Mon Jun 29 21:43:40 2015 -0700 Set the PHY value when providing our own metadata structure. Bug: 11319 Change-Id: I8b746f7238729173b2ca23734e9f7fdbbe4f5110 Reviewed-on: https://code.wireshark.org/review/9232 Reviewed-by: Guy Harris <guy@alum.mit.edu> Command and args: ./tools/valgrind-wireshark.sh -T ==29151== Memcheck, a memory error detector ==29151== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al. ==29151== Using Valgrind-3.10.0.SVN and LibVEX; rerun with -h for copyright info ==29151== Command: /home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/bin/tshark -Vx -nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2015-07-02-6249.pcap ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x6B2A078: dissect_wlan_radio (packet-ieee80211-radio.c:802) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== by 0x6774A0E: dissector_try_uint_new (packet.c:1133) ==29151== by 0x6B645BF: ip_try_dissect (packet-ip.c:1965) ==29151== by 0x6B65E9F: dissect_ip (packet-ip.c:2446) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x6B2A0A3: dissect_wlan_radio (packet-ieee80211-radio.c:807) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== by 0x6774A0E: dissector_try_uint_new (packet.c:1133) ==29151== by 0x6B645BF: ip_try_dissect (packet-ip.c:1965) ==29151== by 0x6B65E9F: dissect_ip (packet-ip.c:2446) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x6B2A0CF: dissect_wlan_radio (packet-ieee80211-radio.c:812) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== by 0x6774A0E: dissector_try_uint_new (packet.c:1133) ==29151== by 0x6B645BF: ip_try_dissect (packet-ip.c:1965) ==29151== by 0x6B65E9F: dissect_ip (packet-ip.c:2446) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x6B2A0FF: dissect_wlan_radio (packet-ieee80211-radio.c:820) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== by 0x6774A0E: dissector_try_uint_new (packet.c:1133) ==29151== by 0x6B645BF: ip_try_dissect (packet-ip.c:1965) ==29151== by 0x6B65E9F: dissect_ip (packet-ip.c:2446) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x6B2A12A: dissect_wlan_radio (packet-ieee80211-radio.c:825) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== by 0x6774A0E: dissector_try_uint_new (packet.c:1133) ==29151== by 0x6B645BF: ip_try_dissect (packet-ip.c:1965) ==29151== by 0x6B65E9F: dissect_ip (packet-ip.c:2446) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x6B2A15F: dissect_wlan_radio (packet-ieee80211-radio.c:830) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== by 0x6774A0E: dissector_try_uint_new (packet.c:1133) ==29151== by 0x6B645BF: ip_try_dissect (packet-ip.c:1965) ==29151== by 0x6B65E9F: dissect_ip (packet-ip.c:2446) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x6B2A197: dissect_wlan_radio (packet-ieee80211-radio.c:835) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== by 0x6774A0E: dissector_try_uint_new (packet.c:1133) ==29151== by 0x6B645BF: ip_try_dissect (packet-ip.c:1965) ==29151== by 0x6B65E9F: dissect_ip (packet-ip.c:2446) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x6B2A1F9: dissect_wlan_radio (packet-ieee80211-radio.c:848) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== by 0x6774A0E: dissector_try_uint_new (packet.c:1133) ==29151== by 0x6B645BF: ip_try_dissect (packet-ip.c:1965) ==29151== by 0x6B65E9F: dissect_ip (packet-ip.c:2446) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== ==29151== Use of uninitialised value of size 8 ==29151== at 0xC5B9A4B: _itoa_word (_itoa.c:179) ==29151== by 0xC5BD6F6: vfprintf (vfprintf.c:1660) ==29151== by 0xC679234: __vsnprintf_chk (vsnprintf_chk.c:63) ==29151== by 0x678EB92: proto_item_append_text (proto.c:4832) ==29151== by 0x6B2A239: dissect_wlan_radio (packet-ieee80211-radio.c:853) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0xC5B9A55: _itoa_word (_itoa.c:179) ==29151== by 0xC5BD6F6: vfprintf (vfprintf.c:1660) ==29151== by 0xC679234: __vsnprintf_chk (vsnprintf_chk.c:63) ==29151== by 0x678EB92: proto_item_append_text (proto.c:4832) ==29151== by 0x6B2A239: dissect_wlan_radio (packet-ieee80211-radio.c:853) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0xC5BD742: vfprintf (vfprintf.c:1660) ==29151== by 0xC679234: __vsnprintf_chk (vsnprintf_chk.c:63) ==29151== by 0x678EB92: proto_item_append_text (proto.c:4832) ==29151== by 0x6B2A239: dissect_wlan_radio (packet-ieee80211-radio.c:853) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== by 0x6774A0E: dissector_try_uint_new (packet.c:1133) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0xC5BA659: vfprintf (vfprintf.c:1660) ==29151== by 0xC679234: __vsnprintf_chk (vsnprintf_chk.c:63) ==29151== by 0x678EB92: proto_item_append_text (proto.c:4832) ==29151== by 0x6B2A239: dissect_wlan_radio (packet-ieee80211-radio.c:853) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== by 0x6774A0E: dissector_try_uint_new (packet.c:1133) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0xC5BA6DC: vfprintf (vfprintf.c:1660) ==29151== by 0xC679234: __vsnprintf_chk (vsnprintf_chk.c:63) ==29151== by 0x678EB92: proto_item_append_text (proto.c:4832) ==29151== by 0x6B2A239: dissect_wlan_radio (packet-ieee80211-radio.c:853) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== by 0x6774A0E: dissector_try_uint_new (packet.c:1133) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x6B2A274: dissect_wlan_radio (packet-ieee80211-radio.c:858) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== by 0x6774A0E: dissector_try_uint_new (packet.c:1133) ==29151== by 0x6B645BF: ip_try_dissect (packet-ip.c:1965) ==29151== by 0x6B65E9F: dissect_ip (packet-ip.c:2446) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== ==29151== Use of uninitialised value of size 8 ==29151== at 0x6B2A2AF: dissect_wlan_radio (packet-ieee80211-radio.c:861) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== by 0x6774A0E: dissector_try_uint_new (packet.c:1133) ==29151== by 0x6B645BF: ip_try_dissect (packet-ip.c:1965) ==29151== by 0x6B65E9F: dissect_ip (packet-ip.c:2446) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x67A1262: uint_to_str_back (to_str.c:1229) ==29151== by 0x6790E15: fill_label_number (proto.c:7023) ==29151== by 0x678EB30: proto_item_append_text (proto.c:4826) ==29151== by 0x6B2A2C8: dissect_wlan_radio (packet-ieee80211-radio.c:861) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== by 0x6774A0E: dissector_try_uint_new (packet.c:1133) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x6B2A2F0: dissect_wlan_radio (packet-ieee80211-radio.c:872) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== by 0x6774A0E: dissector_try_uint_new (packet.c:1133) ==29151== by 0x6B645BF: ip_try_dissect (packet-ip.c:1965) ==29151== by 0x6B65E9F: dissect_ip (packet-ip.c:2446) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x6B2A3F8: dissect_wlan_radio (packet-ieee80211-radio.c:900) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== by 0x6774A0E: dissector_try_uint_new (packet.c:1133) ==29151== by 0x6B645BF: ip_try_dissect (packet-ip.c:1965) ==29151== by 0x6B65E9F: dissect_ip (packet-ip.c:2446) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x6B2A426: dissect_wlan_radio (packet-ieee80211-radio.c:905) ==29151== by 0x6774B6F: call_dissector_work (packet.c:613) ==29151== by 0x677413C: call_dissector_with_data (packet.c:2392) ==29151== by 0x6D3071F: dissect_peekremote_new (packet-peekremote.c:531) ==29151== by 0x6775BF6: dissector_try_heuristic (packet.c:2060) ==29151== by 0x6F06C02: decode_udp_ports (packet-udp.c:542) ==29151== by 0x6F08149: dissect (packet-udp.c:880) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== by 0x6774A0E: dissector_try_uint_new (packet.c:1133) ==29151== by 0x6B645BF: ip_try_dissect (packet-ip.c:1965) ==29151== by 0x6B65E9F: dissect_ip (packet-ip.c:2446) ==29151== by 0x6774B8D: call_dissector_work (packet.c:615) ==29151== ==29151== Use of uninitialised value of size 8 ==29151== at 0x678F3EC: proto_item_fill_label (proto.c:6589) ==29151== by 0x6780982: proto_tree_print_node (print.c:163) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x678091D: proto_tree_print (print.c:132) ==29151== by 0x413AA1: print_packet (tshark.c:4010) ==29151== by 0x413090: process_packet (tshark.c:3620) ==29151== by 0x410A1B: main (tshark.c:3367) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x67A1262: uint_to_str_back (to_str.c:1229) ==29151== by 0x6790E15: fill_label_number (proto.c:7023) ==29151== by 0x6780982: proto_tree_print_node (print.c:163) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x678091D: proto_tree_print (print.c:132) ==29151== by 0x413AA1: print_packet (tshark.c:4010) ==29151== by 0x413090: process_packet (tshark.c:3620) ==29151== by 0x410A1B: main (tshark.c:3367) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x67A1267: uint_to_str_back (to_str.c:1232) ==29151== by 0x6790E15: fill_label_number (proto.c:7023) ==29151== by 0x6780982: proto_tree_print_node (print.c:163) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x678091D: proto_tree_print (print.c:132) ==29151== by 0x413AA1: print_packet (tshark.c:4010) ==29151== by 0x413090: process_packet (tshark.c:3620) ==29151== by 0x410A1B: main (tshark.c:3367) ==29151== ==29151== Use of uninitialised value of size 8 ==29151== at 0x67A1288: uint_to_str_back (to_str.c:1237) ==29151== by 0x6790E15: fill_label_number (proto.c:7023) ==29151== by 0x6780982: proto_tree_print_node (print.c:163) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x678091D: proto_tree_print (print.c:132) ==29151== by 0x413AA1: print_packet (tshark.c:4010) ==29151== by 0x413090: process_packet (tshark.c:3620) ==29151== by 0x410A1B: main (tshark.c:3367) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x67A12A2: uint_to_str_back (to_str.c:1232) ==29151== by 0x6790E15: fill_label_number (proto.c:7023) ==29151== by 0x6780982: proto_tree_print_node (print.c:163) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x678091D: proto_tree_print (print.c:132) ==29151== by 0x413AA1: print_packet (tshark.c:4010) ==29151== by 0x413090: process_packet (tshark.c:3620) ==29151== by 0x410A1B: main (tshark.c:3367) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x67A12A7: uint_to_str_back (to_str.c:1241) ==29151== by 0x6790E15: fill_label_number (proto.c:7023) ==29151== by 0x6780982: proto_tree_print_node (print.c:163) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x678091D: proto_tree_print (print.c:132) ==29151== by 0x413AA1: print_packet (tshark.c:4010) ==29151== by 0x413090: process_packet (tshark.c:3620) ==29151== by 0x410A1B: main (tshark.c:3367) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0xA2411C1: g_strlcpy (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0) ==29151== by 0x6790E85: fill_label_number (proto.c:6183) ==29151== by 0x6780982: proto_tree_print_node (print.c:163) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x678091D: proto_tree_print (print.c:132) ==29151== by 0x413AA1: print_packet (tshark.c:4010) ==29151== by 0x413090: process_packet (tshark.c:3620) ==29151== by 0x410A1B: main (tshark.c:3367) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x4C2E0F8: strlen (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==29151== by 0xC5DE73E: fputs (iofputs.c:35) ==29151== by 0x678339F: print_line_text (print_stream.c:131) ==29151== by 0x67809BD: proto_tree_print_node (print.c:169) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x678091D: proto_tree_print (print.c:132) ==29151== by 0x413AA1: print_packet (tshark.c:4010) ==29151== by 0x413090: process_packet (tshark.c:3620) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x67AE44A: try_val_to_str (value_string.c:114) ==29151== by 0x67964C7: hf_try_val_to_str_const (proto.c:6604) ==29151== by 0x6790DA1: fill_label_number (proto.c:6776) ==29151== by 0x6780982: proto_tree_print_node (print.c:163) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x678091D: proto_tree_print (print.c:132) ==29151== by 0x413AA1: print_packet (tshark.c:4010) ==29151== by 0x413090: process_packet (tshark.c:3620) ==29151== ==29151== Conditional jump or move depends on uninitialised value(s) ==29151== at 0x67A1262: uint_to_str_back (to_str.c:1229) ==29151== by 0x6790DD7: fill_label_number (proto.c:7117) ==29151== by 0x6780982: proto_tree_print_node (print.c:163) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x678091D: proto_tree_print (print.c:132) ==29151== by 0x413AA1: print_packet (tshark.c:4010) ==29151== by 0x413090: process_packet (tshark.c:3620) ==29151== by 0x410A1B: main (tshark.c:3367) ==29151== ==29151== Syscall param write(buf) points to uninitialised byte(s) ==29151== at 0xC65B870: __write_nocancel (syscall-template.S:81) ==29151== by 0xC5E9002: _IO_file_write@@GLIBC_2.2.5 (fileops.c:1261) ==29151== by 0xC5EA4DB: _IO_do_write@@GLIBC_2.2.5 (fileops.c:538) ==29151== by 0xC5E96A0: _IO_file_xsputn@@GLIBC_2.2.5 (fileops.c:1332) ==29151== by 0xC5DE7C3: fputs (iofputs.c:40) ==29151== by 0x678339F: print_line_text (print_stream.c:131) ==29151== by 0x67809BD: proto_tree_print_node (print.c:169) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== by 0x6780AAB: proto_tree_print_node (print.c:218) ==29151== by 0x6784049: proto_tree_children_foreach (proto.c:645) ==29151== Address 0x4027d84 is not stack'd, malloc'd or (recently) free'd ==29151== ==29151== ==29151== HEAP SUMMARY: ==29151== in use at exit: 2,238,626 bytes in 162,555 blocks ==29151== total heap usage: 820,862 allocs, 658,307 frees, 66,098,339 bytes allocated ==29151== ==29151== LEAK SUMMARY: ==29151== definitely lost: 3,020 bytes in 127 blocks ==29151== indirectly lost: 36,552 bytes in 51 blocks ==29151== possibly lost: 0 bytes in 0 blocks ==29151== still reachable: 2,199,054 bytes in 162,377 blocks ==29151== suppressed: 0 bytes in 0 blocks ==29151== Rerun with --leak-check=full to see details of leaked memory ==29151== ==29151== For counts of detected and suppressed errors, rerun with: -v ==29151== Use --track-origins=yes to see where uninitialised values come from ==29151== ERROR SUMMARY: 100 errors from 30 contexts (suppressed: 0 from 0) [ no debug trace ]
You are receiving this mail because:
- You are watching all bug changes.
- Follow-Ups:
- [Wireshark-bugs] [Bug 11326] Buildbot crash output: fuzz-2015-07-02-6249.pcap
- From: bugzilla-daemon
- [Wireshark-bugs] [Bug 11326] Buildbot crash output: fuzz-2015-07-02-6249.pcap
- From: bugzilla-daemon
- [Wireshark-bugs] [Bug 11326] Buildbot crash output: fuzz-2015-07-02-6249.pcap
- From: bugzilla-daemon
- [Wireshark-bugs] [Bug 11326] Buildbot crash output: fuzz-2015-07-02-6249.pcap
- Prev by Date: [Wireshark-bugs] [Bug 11325] Wireshark and tshark crashing when opening the capture file with Default profile
- Next by Date: [Wireshark-bugs] [Bug 11325] Wireshark and tshark crashing when opening the capture file with Default profile
- Previous by thread: [Wireshark-bugs] [Bug 11325] Wireshark and tshark crashing when opening the capture file with Default profile
- Next by thread: [Wireshark-bugs] [Bug 11326] Buildbot crash output: fuzz-2015-07-02-6249.pcap
- Index(es):