Wireshark-bugs: [Wireshark-bugs] [Bug 13162] New: Buildbot crash output: fuzz-2016-11-20-16952.p
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 22 Nov 2016 04:20:04 +0000
Bug ID 13162
Summary Buildbot crash output: fuzz-2016-11-20-16952.pcap
Product Wireshark
Version unspecified
Hardware x86-64
URL https://www.wireshark.org/download/automated/captures/fuzz-2016-11-20-16952.pcap
OS Ubuntu
Status CONFIRMED
Severity Major
Priority High
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter buildbot-do-not-reply@wireshark.org 

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2016-11-20-16952.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/video_call_1.pcap

Build host information:
Linux wsbb04 4.4.0-47-generic #68-Ubuntu SMP Wed Oct 26 19:39:52 UTC 2016
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:    Ubuntu
Description:    Ubuntu 16.04.1 LTS
Release:    16.04
Codename:    xenial

Buildbot information:
BUILDBOT_REPOSITORY=ssh://wireshark-buildbot@code.wireshark.org:29418/wireshark
BUILDBOT_WORKERNAME=fuzz-test
BUILDBOT_BUILDNUMBER=162
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-2.2/
BUILDBOT_BUILDERNAME=Fuzz Test
BUILDBOT_GOT_REVISION=20c13278798f07c8f2739957362a2eedb5d71a77

Return value:  0

Dissector bug:  0

Valgrind error count:  1



Git commit
commit 20c13278798f07c8f2739957362a2eedb5d71a77
Author: Alexis La Goutte <alexis.lagoutte@gmail.com>
Date:   Sun Nov 20 10:06:18 2016 +0100

    VXLAN: Fix conflict for hf fields

    'vxlan.flags_reserved' exists multiple times with NOT compatible types:
FT_UINT8 and FT_BOOLEAN

    Change-Id: I98d296393796defc5741c41a496432eb8f927be2
    Reviewed-on: https://code.wireshark.org/review/18881
    Reviewed-by: Michael Mann <mmann78@netscape.net>
    (cherry picked from commit ded081ccecfbba91cacabba70d69a7eb36a5288d)
    Reviewed-on: https://code.wireshark.org/review/18892


==15988== Memcheck, a memory error detector
==15988== Copyright (C) 2002-2015, and GNU GPL'd, by Julian Seward et al.
==15988== Using Valgrind-3.11.0 and LibVEX; rerun with -h for copyright info
==15988== Command:
/home/wireshark/builders/wireshark-2.2-fuzz/fuzztest/install/bin/tshark -Vx -nr
/fuzz/buildbot/fuzztest/valgrind-fuzz-2.2/fuzz-2016-11-20-16952.pcap
==15988== 
==15988== Conditional jump or move depends on uninitialised value(s)
==15988==    at 0x6FB4BA4: tree_add_li (packet-rlc.c:764)
==15988==    by 0x6FB6AAA: rlc_decode_li.constprop.7 (packet-rlc.c:1795)
==15988==    by 0x6FB83E0: dissect_rlc_am (packet-rlc.c:2309)
==15988==    by 0x6FB9045: dissect_rlc_dcch (packet-rlc.c:2478)
==15988==    by 0x694395E: call_dissector_through_handle (packet.c:648)
==15988==    by 0x694395E: call_dissector_work (packet.c:723)
==15988==    by 0x6945391: call_dissector_with_data (packet.c:2816)
==15988==    by 0x714D661: dissect_mac_fdd_dch (packet-umts_mac.c:564)
==15988==    by 0x694395E: call_dissector_through_handle (packet.c:648)
==15988==    by 0x694395E: call_dissector_work (packet.c:723)
==15988==    by 0x6945391: call_dissector_with_data (packet.c:2816)
==15988==    by 0x7144698: dissect_tb_data (packet-umts_fp.c:815)
==15988==    by 0x714A8CF: dissect_dch_channel_info (packet-umts_fp.c:2557)
==15988==    by 0x714A8CF: dissect_fp_common (packet-umts_fp.c:4442)
==15988==    by 0x694395E: call_dissector_through_handle (packet.c:648)
==15988==    by 0x694395E: call_dissector_work (packet.c:723)
==15988== 
==15988== 
==15988== HEAP SUMMARY:
==15988==     in use at exit: 457,910 bytes in 9,988 blocks
==15988==   total heap usage: 1,411,550 allocs, 1,401,562 frees, 110,936,649
bytes allocated
==15988== 
==15988== LEAK SUMMARY:
==15988==    definitely lost: 2,077 bytes in 87 blocks
==15988==    indirectly lost: 8,767 bytes in 279 blocks
==15988==      possibly lost: 0 bytes in 0 blocks
==15988==    still reachable: 447,066 bytes in 9,622 blocks
==15988==         suppressed: 0 bytes in 0 blocks
==15988== Rerun with --leak-check=full to see details of leaked memory
==15988== 
==15988== For counts of detected and suppressed errors, rerun with: -v
==15988== Use --track-origins=yes to see where uninitialised values come from
==15988== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 1 from 1)

[ no debug trace ]

You are receiving this mail because:
  • You are watching all bug changes.