Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 12442] New: Buildbot crash output: fuzz-2016-05-15-20781.pcap

[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	12442
Summary	Buildbot crash output: fuzz-2016-05-15-20781.pcap
Product	Wireshark
Version	unspecified
Hardware	x86-64
URL	https://www.wireshark.org/download/automated/captures/fuzz-2016-05-15-20781.pcap
OS	Ubuntu
Status	CONFIRMED
Severity	Major
Priority	High
Component	Dissection engine (libwireshark)
Assignee	bugzilla-admin@wireshark.org
Reporter	buildbot-do-not-reply@wireshark.org

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2016-05-15-20781.pcap

stderr:
Input file:
/home/wireshark/menagerie/menagerie/1147-fuzz-2007-11-16-18765.pcap.gz

Build host information:
Linux wsbb04 3.13.0-85-generic #129-Ubuntu SMP Thu Mar 17 20:50:15 UTC 2016
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:    Ubuntu
Description:    Ubuntu 14.04.4 LTS
Release:    14.04
Codename:    trusty

Buildbot information:
BUILDBOT_REPOSITORY=ssh://wireshark-buildbot@code.wireshark.org:29418/wireshark
BUILDBOT_BUILDNUMBER=3579
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-master/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_SLAVENAME=clang-code-analysis
BUILDBOT_GOT_REVISION=92cce488308c839aa4949de7cb8bfb0f9a3ac5e2

Return value:  1

Dissector bug:  0

Valgrind error count:  0



Git commit
commit 92cce488308c839aa4949de7cb8bfb0f9a3ac5e2
Author: Uli Heilmeier <uh@heilmeier.eu>
Date:   Mon May 9 07:14:38 2016 +0200

    GUI: Add shortcut for packet and capture comment

    Added "Ctrl+Alt+C" as shortcut for packet comment.
    Added "Ctrl+Alt+Shift+C" as shortcut for capture comment (GTK)
    resp. for Capture File Properties (QT)

    Bug: 12410
    Change-Id: I1ba61a38829c35f3bb166a94cda4bec3901c7ef1
    Reviewed-on: https://code.wireshark.org/review/15300
    Reviewed-by: Michael Mann <mmann78@netscape.net>
    Petri-Dish: Michael Mann <mmann78@netscape.net>
    Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
    Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com>


=================================================================
==5383==ERROR: AddressSanitizer: stack-buffer-overflow on address
0x7ffd91ed1181 at pc 0x7f496206c90b bp 0x7ffd91ed10b0 sp 0x7ffd91ed10a8
WRITE of size 1 at 0x7ffd91ed1181 thread T0
    #0 0x7f496206c90a 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7c1590a)
    #1 0x7f496206cf9f 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7c15f9f)
    #2 0x7f496289b3a2 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x84443a2)
    #3 0x7f4961af878b 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x76a178b)
    #4 0x7f49628987aa 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x84417aa)
    #5 0x7f4961af878b 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x76a178b)
    #6 0x7f49628962f9 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x843f2f9)
    #7 0x7f4961afb50c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x76a450c)
    #8 0x7f4962896254 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x843f254)
    #9 0x7f4962895a76 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x843ea76)
    #10 0x7f49618d00e1 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x74790e1)
    #11 0x7f49618ce15c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x747715c)
    #12 0x7f4962bf3c6e 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x879cc6e)
    #13 0x7f4961afd845 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x76a6845)
    #14 0x7f4961afe0a5 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x76a70a5)
    #15 0x7f4962bf32af 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x879c2af)
    #16 0x7f4961af09bb 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x76999bb)
    #17 0x7f4962bf326d 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x879c26d)
    #18 0x7f4961af878b 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x76a178b)
    #19 0x7f4962bf22b4 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x879b2b4)
    #20 0x7f4961afb50c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x76a450c)
    #21 0x7f4962bf1879 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x879a879)
    #22 0x7f49618d00e1 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x74790e1)
    #23 0x7f49618cfd7a 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7478d7a)
    #24 0x7f496244a7c0 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7ff37c0)
    #25 0x7f4962449db7 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7ff2db7)
    #26 0x7f496244a1fd 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7ff31fd)
    #27 0x7f4962446ad2 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7fefad2)
    #28 0x7f49618d00e1 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x74790e1)
    #29 0x7f49618d0388 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7479388)
    #30 0x7f4962129a8b 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7cd2a8b)
    #31 0x7f4962125f20 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7ccef20)
    #32 0x7f49618d00e1 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x74790e1)
    #33 0x7f49618cfd7a 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7478d7a)
    #34 0x7f4962483646 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x802c646)
    #35 0x7f496247c066 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x8025066)
    #36 0x7f4962478b40 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x8021b40)
    #37 0x7f4962477ec5 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x8020ec5)
    #38 0x7f4962475a31 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x801ea31)
    #39 0x7f49618d00e1 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x74790e1)
    #40 0x7f49618cfd7a 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7478d7a)
    #41 0x7f49620026a3 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7bab6a3)
    #42 0x7f496200575b 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7bae75b)
    #43 0x7f49618d00e1 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x74790e1)
    #44 0x7f49618d0388 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7479388)
    #45 0x7f4961e193c1 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x79c23c1)
    #46 0x7f49618d00e1 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x74790e1)
    #47 0x7f49618ce15c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x747715c)
    #48 0x7f4961e17b66 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x79c0b66)
    #49 0x7f4961e167b0 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x79bf7b0)
    #50 0x7f49618d00e1 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x74790e1)
    #51 0x7f49618cfd7a 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7478d7a)
    #52 0x7f4961e63f02 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7a0cf02)
    #53 0x7f49618d00e1 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x74790e1)
    #54 0x7f49618ce15c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x747715c)
    #55 0x7f49618cd952 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7476952)
    #56 0x7f49618add8e 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7456d8e)
    #57 0x5018c9 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/bin/tshark+0x5018c9)
    #58 0x4fc422 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/bin/tshark+0x4fc422)
    #59 0x7f4957701ec4  (/lib/x86_64-linux-gnu/libc.so.6+0x21ec4)
    #60 0x440656 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/bin/tshark+0x440656)

Address 0x7ffd91ed1181 is located in stack of thread T0 at offset 65 in frame
    #0 0x7f496206c39f 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7c1539f)

  This frame has 2 object(s):
    [32, 65) 'number' <== Memory access at offset 65 overflows this variable
    [112, 136) 'e164_info'
HINT: this may be a false positive if your program uses some custom stack
unwind mechanism or swapcontext
      (longjmp and C++ exceptions *are* supported)
Shadow bytes around the buggy address:
  0x1000323d21e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x1000323d21f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x1000323d2200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x1000323d2210: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x1000323d2220: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00
=>0x1000323d2230:[01]f2 f2 f2 f2 f2 00 00 00 f3 f3 f3 f3 f3 f3 f3
  0x1000323d2240: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x1000323d2250: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1
  0x1000323d2260: 00 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00
  0x1000323d2270: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x1000323d2280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Heap right redzone:      fb
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack partial redzone:   f4
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
==5383==ABORTING

[ no debug trace ]

---

      You are receiving this mail because:

• You are watching all bug changes.