Wireshark-bugs: [Wireshark-bugs] [Bug 12454] New: Buildbot crash output: fuzz-2016-05-17-11817.p
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 18 May 2016 05:50:03 +0000
Bug ID 12454
Summary Buildbot crash output: fuzz-2016-05-17-11817.pcap
Product Wireshark
Version unspecified
Hardware x86-64
URL https://www.wireshark.org/download/automated/captures/fuzz-2016-05-17-11817.pcap
OS Ubuntu
Status CONFIRMED
Severity Major
Priority High
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter buildbot-do-not-reply@wireshark.org 

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2016-05-17-11817.pcap

stderr:
Input file:
/home/wireshark/menagerie/menagerie/14549-asan_heap-oob_4557e4_4089_48b71f6d4c1deccaae1d67a233556e69931a551c78d36c34.cap

Build host information:
Linux wsbb04 3.13.0-85-generic #129-Ubuntu SMP Thu Mar 17 20:50:15 UTC 2016
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:    Ubuntu
Description:    Ubuntu 14.04.4 LTS
Release:    14.04
Codename:    trusty

Buildbot information:
BUILDBOT_REPOSITORY=ssh://wireshark-buildbot@code.wireshark.org:29418/wireshark
BUILDBOT_BUILDNUMBER=130
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-2.0/
BUILDBOT_BUILDERNAME=Fuzz Test
BUILDBOT_SLAVENAME=fuzz-test
BUILDBOT_GOT_REVISION=faa77457ebb8e3a1a72cdf5ec2b095bcbe163528

Return value:  0

Dissector bug:  0

Valgrind error count:  1



Git commit
commit faa77457ebb8e3a1a72cdf5ec2b095bcbe163528
Author: Pascal Quantin <pascal.quantin@gmail.com>
Date:   Wed May 11 15:16:44 2016 +0200

    Qt: add some cleanup function calls missing when leaving application

    Change-Id: I8f22d321e84daa36d4a40856b61d0844d3489cc2
    Reviewed-on: https://code.wireshark.org/review/15374
    Petri-Dish: Pascal Quantin <pascal.quantin@gmail.com>
    Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
    Reviewed-by: Pascal Quantin <pascal.quantin@gmail.com>
    (cherry picked from commit f3e120816c1e74eda131f95a74e61777995c2c7b)
    Reviewed-on: https://code.wireshark.org/review/15435


Command and args: ./tools/valgrind-wireshark.sh 

==8417== Memcheck, a memory error detector
==8417== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al.
==8417== Using Valgrind-3.10.1 and LibVEX; rerun with -h for copyright info
==8417== Command:
/home/wireshark/builders/wireshark-2.0-fuzz/fuzztest/install/bin/tshark -nr
/fuzz/buildbot/fuzztest/valgrind-fuzz-2.0/fuzz-2016-05-17-11817.pcap
==8417== 
==8417== Conditional jump or move depends on uninitialised value(s)
==8417==    at 0x6889DFC: AirPDcapDecryptWPABroadcastKey (airpdcap.c:318)
==8417==    by 0x688A3C2: AirPDcapRsna4WHandshake (airpdcap.c:1405)
==8417==    by 0x688AB62: AirPDcapScanForKeys (airpdcap.c:564)
==8417==    by 0x688AD8F: AirPDcapPacketProcess (airpdcap.c:696)
==8417==    by 0x6C08202: dissect_ieee80211_common (packet-ieee80211.c:17815)
==8417==    by 0x6C0A055: dissect_ieee80211 (packet-ieee80211.c:18423)
==8417==    by 0x684687E: call_dissector_through_handle (packet.c:618)
==8417==    by 0x6847214: call_dissector_work (packet.c:706)
==8417==    by 0x6847A0B: dissector_try_uint_new (packet.c:1163)
==8417==    by 0x6B1A635: dissect_frame (packet-frame.c:499)
==8417==    by 0x684687E: call_dissector_through_handle (packet.c:618)
==8417==    by 0x6847214: call_dissector_work (packet.c:706)
==8417== 
==8417== 
==8417== HEAP SUMMARY:
==8417==     in use at exit: 1,039,567 bytes in 28,330 blocks
==8417==   total heap usage: 239,421 allocs, 211,091 frees, 31,160,781 bytes
allocated
==8417== 
==8417== LEAK SUMMARY:
==8417==    definitely lost: 2,908 bytes in 125 blocks
==8417==    indirectly lost: 36,448 bytes in 48 blocks
==8417==      possibly lost: 0 bytes in 0 blocks
==8417==    still reachable: 1,000,211 bytes in 28,157 blocks
==8417==         suppressed: 0 bytes in 0 blocks
==8417== Rerun with --leak-check=full to see details of leaked memory
==8417== 
==8417== For counts of detected and suppressed errors, rerun with: -v
==8417== Use --track-origins=yes to see where uninitialised values come from
==8417== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 0 from 0)

[ no debug trace ]

You are receiving this mail because:
  • You are watching all bug changes.