Wireshark-bugs: [Wireshark-bugs] [Bug 13157] New: Buildbot crash output: fuzz-2016-11-19-6636.pc
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sat, 19 Nov 2016 19:10:09 +0000
Bug ID 13157
Summary Buildbot crash output: fuzz-2016-11-19-6636.pcap
Product Wireshark
Version unspecified
Hardware x86-64
URL https://www.wireshark.org/download/automated/captures/fuzz-2016-11-19-6636.pcap
OS Ubuntu
Status CONFIRMED
Severity Major
Priority High
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter buildbot-do-not-reply@wireshark.org 

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2016-11-19-6636.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/11275-cops-fuzz-test.pcap

Build host information:
Linux wsbb04 4.4.0-47-generic #68-Ubuntu SMP Wed Oct 26 19:39:52 UTC 2016
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:    Ubuntu
Description:    Ubuntu 16.04.1 LTS
Release:    16.04
Codename:    xenial

Buildbot information:
BUILDBOT_REPOSITORY=ssh://wireshark-buildbot@code.wireshark.org:29418/wireshark
BUILDBOT_WORKERNAME=clang-code-analysis
BUILDBOT_BUILDNUMBER=3784
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-master/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_GOT_REVISION=6926cf0294032e88f267b98000211037882326f9

Return value:  0

Dissector bug:  0

Valgrind error count:  1



Git commit
commit 6926cf0294032e88f267b98000211037882326f9
Author: Jaap Keuter <jaap.keuter@xs4all.nl>
Date:   Fri Nov 18 10:42:26 2016 +0100

    LBM_UIMflow: Fix range_ratio calculation (CID-1355421)

    Port the same calculation from sequence_dialog.cpp.
    Resolves the Coverity issue and aligns the output just a bit better.

    Change-Id: Iaa464149630e0fafb5bdff20019440c3fb67bbbd
    Reviewed-on: https://code.wireshark.org/review/18868
    Reviewed-by: Jaap Keuter <jaap.keuter@xs4all.nl>
    Petri-Dish: Jaap Keuter <jaap.keuter@xs4all.nl>
    Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
    Reviewed-by: Michael Mann <mmann78@netscape.net>


==30922== Memcheck, a memory error detector
==30922== Copyright (C) 2002-2015, and GNU GPL'd, by Julian Seward et al.
==30922== Using Valgrind-3.11.0 and LibVEX; rerun with -h for copyright info
==30922== Command:
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/bin/tshark
-nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2016-11-19-6636.pcap
==30922== 
==30922== Conditional jump or move depends on uninitialised value(s)
==30922==    at 0x6B99BE4: dissect_cops_pdu (packet-cops.c:1102)
==30922==    by 0x7189535: tcp_dissect_pdus (packet-tcp.c:3468)
==30922==    by 0x6B985B1: dissect_cops (packet-cops.c:1134)
==30922==    by 0x69AA215: call_dissector_through_handle (packet.c:650)
==30922==    by 0x69AA215: call_dissector_work (packet.c:725)
==30922==    by 0x69AA0DE: dissector_try_uint_new (packet.c:1290)
==30922==    by 0x7189A4F: decode_tcp_ports (packet-tcp.c:5420)
==30922==    by 0x718AD6F: process_tcp_payload (packet-tcp.c:5483)
==30922==    by 0x718A2C8: desegment_tcp (packet-tcp.c:2990)
==30922==    by 0x718A2C8: dissect_tcp_payload (packet-tcp.c:5550)
==30922==    by 0x718EE9C: dissect_tcp (packet-tcp.c:6434)
==30922==    by 0x69AA215: call_dissector_through_handle (packet.c:650)
==30922==    by 0x69AA215: call_dissector_work (packet.c:725)
==30922==    by 0x69AA0DE: dissector_try_uint_new (packet.c:1290)
==30922==    by 0x6DDAA72: ip_try_dissect (packet-ip.c:1978)
==30922==    by 0x6DDAA72: dissect_ip_v4 (packet-ip.c:2441)
==30922== 
==30922== 
==30922== HEAP SUMMARY:
==30922==     in use at exit: 6,085,327 bytes in 9,727 blocks
==30922==   total heap usage: 266,107 allocs, 256,380 frees, 37,349,599 bytes
allocated
==30922== 
==30922== LEAK SUMMARY:
==30922==    definitely lost: 472 bytes in 90 blocks
==30922==    indirectly lost: 512 bytes in 4 blocks
==30922==      possibly lost: 0 bytes in 0 blocks
==30922==    still reachable: 6,084,343 bytes in 9,633 blocks
==30922==         suppressed: 0 bytes in 0 blocks
==30922== Rerun with --leak-check=full to see details of leaked memory
==30922== 
==30922== For counts of detected and suppressed errors, rerun with: -v
==30922== Use --track-origins=yes to see where uninitialised values come from
==30922== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 0 from 0)

[ no debug trace ]

You are receiving this mail because:
  • You are watching all bug changes.