Wireshark-bugs: [Wireshark-bugs] [Bug 12583] New: Buildbot crash output: fuzz-2016-07-02-14934.p
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sun, 03 Jul 2016 16:40:04 +0000
Bug ID 12583
Summary Buildbot crash output: fuzz-2016-07-02-14934.pcap
Product Wireshark
Version unspecified
Hardware x86-64
URL https://www.wireshark.org/download/automated/captures/fuzz-2016-07-02-14934.pcap
OS Ubuntu
Status CONFIRMED
Severity Major
Priority High
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter buildbot-do-not-reply@wireshark.org 

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2016-07-02-14934.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/14696-sample.pcap

Build host information:
Linux wsbb04 3.13.0-86-generic #131-Ubuntu SMP Thu May 12 23:33:13 UTC 2016
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:    Ubuntu
Description:    Ubuntu 14.04.4 LTS
Release:    14.04
Codename:    trusty

Buildbot information:
BUILDBOT_REPOSITORY=ssh://wireshark-buildbot@code.wireshark.org:29418/wireshark
BUILDBOT_BUILDNUMBER=145
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-2.0/
BUILDBOT_BUILDERNAME=Fuzz Test
BUILDBOT_SLAVENAME=fuzz-test
BUILDBOT_GOT_REVISION=0fcd23ccac07a7f971ae7466808968bf642320af

Return value:  136

Dissector bug:  0

Valgrind error count:  0



Git commit
commit 0fcd23ccac07a7f971ae7466808968bf642320af
Author: Matt Texier <matthieu@texier.tv>
Date:   Wed Jun 29 17:33:21 2016 +0200

    BGP dissector: Fixing NLRI length for flow spec NLRI

    Bug: 12568
    Change-Id: Id2b89c2d133865771e21acf3ee224f57ac9d262b
    Reviewed-on: https://code.wireshark.org/review/16203
    Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>
    (cherry picked from commit e55eaf573b593d9578aac6847acf3d79e5f3a7dc)
    Reviewed-on: https://code.wireshark.org/review/16219
    Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com>
    Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
    Reviewed-by: Jaap Keuter <jaap.keuter@xs4all.nl>


Command and args: ./tools/valgrind-wireshark.sh 

==10316== Memcheck, a memory error detector
==10316== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al.
==10316== Using Valgrind-3.10.1 and LibVEX; rerun with -h for copyright info
==10316== Command:
/home/wireshark/builders/wireshark-2.0-fuzz/fuzztest/install/bin/tshark -nr
/fuzz/buildbot/fuzztest/valgrind-fuzz-2.0/fuzz-2016-07-02-14934.pcap
==10316== 
==10316== 
==10316== Process terminating with default action of signal 8 (SIGFPE): dumping
core
==10316==  Integer divide by zero at address 0x80435483C
==10316==    at 0x6DE537D: dissect_pbb_tlvblock (packet-packetbb.c:289)
==10316==    by 0x6DE55F0: dissect_pbb_header (packet-packetbb.c:686)
==10316==    by 0x6DE55F0: dissect_packetbb (packet-packetbb.c:729)
==10316==    by 0x684826E: call_dissector_through_handle (packet.c:618)
==10316==    by 0x6848C04: call_dissector_work (packet.c:706)
==10316==    by 0x68493FB: dissector_try_uint_new (packet.c:1163)
==10316==    by 0x6849446: dissector_try_uint (packet.c:1189)
==10316==    by 0x6FCAB79: decode_udp_ports (packet-udp.c:531)
==10316==    by 0x6FCB46C: dissect (packet-udp.c:1003)
==10316==    by 0x6848233: call_dissector_through_handle (packet.c:620)
==10316==    by 0x6848C04: call_dissector_work (packet.c:706)
==10316==    by 0x68493FB: dissector_try_uint_new (packet.c:1163)
==10316==    by 0x6C2225D: ip_try_dissect (packet-ip.c:2000)
==10316== 
==10316== HEAP SUMMARY:
==10316==     in use at exit: 18,223,049 bytes in 188,121 blocks
==10316==   total heap usage: 239,398 allocs, 51,277 frees, 31,128,789 bytes
allocated
==10316== 
==10316== LEAK SUMMARY:
==10316==    definitely lost: 251 bytes in 17 blocks
==10316==    indirectly lost: 0 bytes in 0 blocks
==10316==      possibly lost: 0 bytes in 0 blocks
==10316==    still reachable: 18,222,798 bytes in 188,104 blocks
==10316==         suppressed: 0 bytes in 0 blocks
==10316== Rerun with --leak-check=full to see details of leaked memory
==10316== 
==10316== For counts of detected and suppressed errors, rerun with: -v
==10316== ERROR SUMMARY: 0 errors from 0 contexts (suppressed: 0 from 0)
./tools/valgrind-wireshark.sh: line 113: 10316 Floating point exception(core
dumped) $LIBTOOL valgrind --suppressions=`dirname $0`/vg-suppressions
--tool=$TOOL $CALLGRIND_OUT_FILE $VERBOSE $LEAK_CHECK $REACHABLE $TRACK_ORIGINS
$COMMAND $COMMAND_ARGS $PCAP $COMMAND_ARGS2 > /dev/null

[ no debug trace ]

You are receiving this mail because:
  • You are watching all bug changes.