Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 12663] New: Fuzzed PCAP causing segmentation fault in parse_wbxml_tag

Wireshark-bugs: [Wireshark-bugs] [Bug 12663] New: Fuzzed PCAP causing segmentation fault in pars
Date: Mon, 25 Jul 2016 07:38:15 +0000
Bug ID	12663
Summary	Fuzzed PCAP causing segmentation fault in parse_wbxml_tag_defined
Product	Wireshark
Version	2.0.2
Hardware	x86
OS	Ubuntu
Status	UNCONFIRMED
Severity	Major
Priority	Low
Component	Dissection engine (libwireshark)
Assignee	bugzilla-admin@wireshark.org
Reporter	antti.levomaki@gmail.com
Created attachment 14761 [details]
Sample PCAP

Build Information:
TShark (Wireshark) 2.0.2 (SVN Rev Unknown from unknown)

Copyright 1998-2016 Gerald Combs <gerald@wireshark.org> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with libpcap, with POSIX capabilities (Linux), with libnl 3,
with libz 1.2.8, with GLib 2.48.0, with SMI 0.4.8, with c-ares 1.10.0, with Lua
5.2, with GnuTLS 3.4.10, with Gcrypt 1.6.5, with MIT Kerberos, with GeoIP.

Running on Linux 4.4.0-22-generic, with locale en_GB.UTF-8, with libpcap
version
1.7.4, with libz 1.2.8, with GnuTLS 3.4.10, with Gcrypt 1.6.5.
Intel Core Processor (Haswell) (with SSE4.2)

Built using gcc 5.3.1 20160407.

--
Fuzzed PCAP causes segmentation fault on tshark 2.0.2 and a recent build from
repository ( commit 688d055acd523e645c1e87267dcf4a0a9867adbd ).

ASAN output from 'tshark -2 -V -r <pcap>':

ASAN:SIGSEGV
=================================================================
==14293==ERROR: AddressSanitizer: stack-overflow on address 0x7ffe628f5f48 (pc
0x7f1712dd91c3 bp 0x7ffe628f64c0 sp 0x7ffe628f5f50 T0)
    #0 0x7f1712dd91c2 in vfprintf (/lib/x86_64-linux-gnu/libc.so.6+0x4d1c2)
    #1 0x7f1712ea1fd5 in __vsnprintf_chk
(/lib/x86_64-linux-gnu/libc.so.6+0x115fd5)
    #2 0x7f171ae7f2bd in wmem_strdup_vprintf
/workarea/fuzz/victimlibs2/wireshark/epan/wmem/wmem_strutl.c:111
    #3 0x7f171ae7f4ad in wmem_strdup_printf
/workarea/fuzz/victimlibs2/wireshark/epan/wmem/wmem_strutl.c:80
    #4 0x7f171a857c69 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7507
    #5 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #6 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #7 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #8 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #9 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #10 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #11 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #12 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #13 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #14 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #15 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #16 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #17 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #18 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #19 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #20 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #21 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #22 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #23 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #24 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #25 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #26 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #27 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #28 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #29 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #30 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #31 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #32 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #33 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #34 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #35 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #36 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #37 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #38 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #39 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #40 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #41 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #42 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #43 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #44 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #45 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #46 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #47 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #48 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #49 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #50 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #51 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #52 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #53 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #54 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #55 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #56 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #57 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #58 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #59 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #60 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #61 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #62 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #63 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #64 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #65 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #66 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #67 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #68 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #69 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #70 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #71 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #72 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #73 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #74 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #75 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #76 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #77 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #78 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #79 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #80 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #81 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #82 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #83 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #84 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #85 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #86 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #87 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #88 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #89 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #90 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #91 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #92 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #93 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #94 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #95 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #96 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #97 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #98 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #99 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #100 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #101 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #102 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #103 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #104 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #105 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #106 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #107 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #108 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #109 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #110 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #111 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #112 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #113 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #114 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #115 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #116 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #117 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #118 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #119 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #120 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #121 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #122 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #123 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #124 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #125 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #126 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #127 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #128 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #129 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #130 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #131 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #132 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #133 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #134 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #135 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #136 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #137 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #138 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #139 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #140 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #141 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #142 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #143 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #144 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #145 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #146 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #147 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #148 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #149 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #150 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #151 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #152 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #153 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #154 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #155 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #156 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #157 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #158 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #159 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #160 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #161 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #162 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #163 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #164 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #165 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #166 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #167 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #168 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #169 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #170 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #171 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #172 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #173 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #174 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #175 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #176 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #177 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #178 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #179 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #180 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #181 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #182 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #183 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #184 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #185 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #186 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #187 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #188 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #189 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #190 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #191 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #192 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #193 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #194 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #195 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #196 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #197 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #198 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #199 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #200 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #201 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #202 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #203 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #204 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #205 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #206 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #207 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #208 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #209 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #210 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #211 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #212 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #213 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #214 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #215 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #216 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #217 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #218 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #219 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #220 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #221 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #222 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #223 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #224 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #225 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #226 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #227 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #228 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #229 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #230 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #231 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #232 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #233 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #234 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #235 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #236 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #237 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #238 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #239 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #240 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #241 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #242 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #243 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #244 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #245 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #246 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #247 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #248 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #249 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #250 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525
    #251 0x7f171a8579c4 in parse_wbxml_tag_defined
/workarea/fuzz/victimlibs2/wireshark/epan/dissectors/packet-wbxml.c:7525

SUMMARY: AddressSanitizer: stack-overflow ??:0 vfprintf
==14293==ABORTING
You are receiving this mail because:
You are watching all bug changes.
Follow-Ups:
- [Wireshark-bugs] [Bug 12663] Fuzzed PCAP causing segmentation fault in parse_wbxml_tag_defined
  - From: bugzilla-daemon
- [Wireshark-bugs] [Bug 12663] Fuzzed PCAP causing segmentation fault in parse_wbxml_tag_defined
  - From: bugzilla-daemon
- [Wireshark-bugs] [Bug 12663] Fuzzed PCAP causing segmentation fault in parse_wbxml_tag_defined
  - From: bugzilla-daemon
- [Wireshark-bugs] [Bug 12663] Fuzzed PCAP causing segmentation fault in parse_wbxml_tag_defined
  - From: bugzilla-daemon
- [Wireshark-bugs] [Bug 12663] Fuzzed PCAP causing segmentation fault in parse_wbxml_tag_defined
  - From: bugzilla-daemon
Prev by Date: [Wireshark-bugs] [Bug 12662] Fuzzed PCAP causing segmentation fault in dissect_ldss_transfer
Next by Date: [Wireshark-bugs] [Bug 12663] Fuzzed PCAP causing segmentation fault in parse_wbxml_tag_defined
Previous by thread: [Wireshark-bugs] [Bug 12662] Fuzzed PCAP causing segmentation fault in dissect_ldss_transfer
Next by thread: [Wireshark-bugs] [Bug 12663] Fuzzed PCAP causing segmentation fault in parse_wbxml_tag_defined
Index(es):
- Date
- Thread