Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 13173] New: Buildbot crash output: fuzz-2016-11-24-29035.pcap

[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	13173
Summary	Buildbot crash output: fuzz-2016-11-24-29035.pcap
Product	Wireshark
Version	unspecified
Hardware	x86-64
URL	https://www.wireshark.org/download/automated/captures/fuzz-2016-11-24-29035.pcap
OS	Ubuntu
Status	CONFIRMED
Severity	Major
Priority	High
Component	Dissection engine (libwireshark)
Assignee	bugzilla-admin@wireshark.org
Reporter	buildbot-do-not-reply@wireshark.org

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2016-11-24-29035.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/11275-cops-fuzz-test.pcap

Build host information:
Linux wsbb04 4.4.0-47-generic #68-Ubuntu SMP Wed Oct 26 19:39:52 UTC 2016
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:    Ubuntu
Description:    Ubuntu 16.04.1 LTS
Release:    16.04
Codename:    xenial

Buildbot information:
BUILDBOT_REPOSITORY=ssh://wireshark-buildbot@code.wireshark.org:29418/wireshark
BUILDBOT_WORKERNAME=clang-code-analysis
BUILDBOT_BUILDNUMBER=3791
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-master/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_GOT_REVISION=f39ce7de420ba38a8c90075099bac2132c47fa9f

Return value:  0

Dissector bug:  0

Valgrind error count:  1



Git commit
commit f39ce7de420ba38a8c90075099bac2132c47fa9f
Author: Günther Deschner <gd@samba.org>
Date:   Wed Sep 21 16:50:21 2016 +0200

    dissectors: add PRINTER_INFO_5 decoding for DCE/RPC spoolss dissector.

    Guenther

    Change-Id: I9eb8be636ebdf81092b7abd8d4749410cc5dcc06
    Signed-off-by: Guenther Deschner <gd@samba.org>
    Reviewed-on: https://code.wireshark.org/review/18932
    Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
    Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
    Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
    Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>


==25447== Memcheck, a memory error detector
==25447== Copyright (C) 2002-2015, and GNU GPL'd, by Julian Seward et al.
==25447== Using Valgrind-3.11.0 and LibVEX; rerun with -h for copyright info
==25447== Command:
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/bin/tshark
-nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2016-11-24-29035.pcap
==25447== 
==25447== Conditional jump or move depends on uninitialised value(s)
==25447==    at 0x6B9C2B4: dissect_cops_pdu (packet-cops.c:1102)
==25447==    by 0x718E195: tcp_dissect_pdus (packet-tcp.c:3468)
==25447==    by 0x6B9AC81: dissect_cops (packet-cops.c:1134)
==25447==    by 0x69AC775: call_dissector_through_handle (packet.c:650)
==25447==    by 0x69AC775: call_dissector_work (packet.c:725)
==25447==    by 0x69AC63E: dissector_try_uint_new (packet.c:1290)
==25447==    by 0x718E6AF: decode_tcp_ports (packet-tcp.c:5420)
==25447==    by 0x718F9CF: process_tcp_payload (packet-tcp.c:5483)
==25447==    by 0x718EF28: desegment_tcp (packet-tcp.c:2990)
==25447==    by 0x718EF28: dissect_tcp_payload (packet-tcp.c:5550)
==25447==    by 0x7193997: dissect_tcp (packet-tcp.c:6434)
==25447==    by 0x69AC775: call_dissector_through_handle (packet.c:650)
==25447==    by 0x69AC775: call_dissector_work (packet.c:725)
==25447==    by 0x69AC63E: dissector_try_uint_new (packet.c:1290)
==25447==    by 0x6DDD432: ip_try_dissect (packet-ip.c:1978)
==25447==    by 0x6DDD432: dissect_ip_v4 (packet-ip.c:2441)
==25447== 
==25447== 
==25447== HEAP SUMMARY:
==25447==     in use at exit: 6,085,264 bytes in 9,731 blocks
==25447==   total heap usage: 265,912 allocs, 256,181 frees, 37,341,569 bytes
allocated
==25447== 
==25447== LEAK SUMMARY:
==25447==    definitely lost: 456 bytes in 90 blocks
==25447==    indirectly lost: 384 bytes in 3 blocks
==25447==      possibly lost: 0 bytes in 0 blocks
==25447==    still reachable: 6,084,424 bytes in 9,638 blocks
==25447==         suppressed: 0 bytes in 0 blocks
==25447== Rerun with --leak-check=full to see details of leaked memory
==25447== 
==25447== For counts of detected and suppressed errors, rerun with: -v
==25447== Use --track-origins=yes to see where uninitialised values come from
==25447== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 0 from 0)

[ no debug trace ]

---

      You are receiving this mail because:

• You are watching all bug changes.