https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14390

            Bug ID: 14390
           Summary: Buildbot crash output: fuzz-2018-02-03-5339.pcap
           Product: Wireshark
           Version: unspecified
          Hardware: x86-64
                OS: Ubuntu
            Status: CONFIRMED
          Severity: Major
          Priority: High
         Component: Dissection engine (libwireshark)
          Assignee: bugzilla-ad...@wireshark.org
          Reporter: buildbot-do-not-re...@wireshark.org
  Target Milestone: ---

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2018-02-03-5339.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/9980-mqseries_V7_protocol.pcap

Build host information:
Linux wsbb04 4.4.0-112-generic #135-Ubuntu SMP Fri Jan 19 11:48:36 UTC 2018
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID: Ubuntu
Description:    Ubuntu 16.04.3 LTS
Release:        16.04
Codename:       xenial

Buildbot information:
BUILDBOT_REPOSITORY=ssh://wireshark-build...@code.wireshark.org:29418/wireshark
BUILDBOT_WORKERNAME=clang-code-analysis
BUILDBOT_BUILDNUMBER=4603
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-master/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_GOT_REVISION=2d8606b584025bb80c3935aa3ecc57b512c61360

Return value:  0

Dissector bug:  0

Valgrind error count:  48



Git commit
commit 2d8606b584025bb80c3935aa3ecc57b512c61360
Author: Dylan Ulis <daul...@gmail.com>
Date:   Fri Feb 2 11:47:44 2018 -0500

    CIP Motion: Support Format Revision 3

    See Volume 9, version 1.2, sections "6-2.7.1.1" and "7-1.1"
    1. Pass Connection Point from FwdOpen to Motion dissector, since that is
now needed to parse I/O payload.
    2. Move Run/Idle Header function to CIP dissector, since it's a CIP
feature, not ENIP.
    3. Add a protocol so that Format Revision 3 can be dissected without the
Forward Open in the capture.
    4. Minor: Highlight more bytes in some EPATH parsing.
    5. Minor: Renaming some things to match spec wording.

    Change-Id: I93626a6492be2675206d38c04fa1c7ce534c04ca
    Reviewed-on: https://code.wireshark.org/review/25570
    Petri-Dish: Michael Mann <mman...@netscape.net>
    Tested-by: Petri Dish Buildbot
    Reviewed-by: Michael Mann <mman...@netscape.net>


==14272== Memcheck, a memory error detector
==14272== Copyright (C) 2002-2015, and GNU GPL'd, by Julian Seward et al.
==14272== Using Valgrind-3.11.0 and LibVEX; rerun with -h for copyright info
==14272== Command:
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/bin/tshark
-nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2018-02-03-5339.pcap
==14272== 
==14272== Conditional jump or move depends on uninitialised value(s)
==14272==    at 0x6F9DE6F: strip_trailing_blanks (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x6FA3F5F: dissect_mq_pdu (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x6FA2004: reassemble_mq (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x73C9AAC: tcp_dissect_pdus (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x6FA12EF: dissect_mq_tcp (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x7D3D647: call_dissector_through_handle (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x7D394C9: call_dissector_work (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x7D3C302: call_dissector_only (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x7D20AF8: try_conversation_dissector (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x73C9D23: decode_tcp_ports (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x73CB778: process_tcp_payload (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x73CAE35: desegment_tcp (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272== 
==14272== Conditional jump or move depends on uninitialised value(s)
==14272==    at 0x6F9DE84: strip_trailing_blanks (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x6FA3F5F: dissect_mq_pdu (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x6FA2004: reassemble_mq (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x73C9AAC: tcp_dissect_pdus (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x6FA12EF: dissect_mq_tcp (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x7D3D647: call_dissector_through_handle (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x7D394C9: call_dissector_work (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x7D3C302: call_dissector_only (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x7D20AF8: try_conversation_dissector (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x73C9D23: decode_tcp_ports (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x73CB778: process_tcp_payload (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272==    by 0x73CAE35: desegment_tcp (in
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/lib/libwireshark.so.0.0.0)
==14272== 

** (process:14272): WARNING **: Extended value string 'mq_StructID_vals' forced
to fall back to linear search:
  entry 51, value 3335968705 [0xc6d6d7c1] < previous entry, value 3569665344
[0xd4c4c540]
==14272== 
==14272== HEAP SUMMARY:
==14272==     in use at exit: 107,735 bytes in 141 blocks
==14272==   total heap usage: 327,125 allocs, 326,984 frees, 43,770,451 bytes
allocated
==14272== 
==14272== LEAK SUMMARY:
==14272==    definitely lost: 0 bytes in 0 blocks
==14272==    indirectly lost: 0 bytes in 0 blocks
==14272==      possibly lost: 0 bytes in 0 blocks
==14272==    still reachable: 13,140 bytes in 98 blocks
==14272==         suppressed: 94,595 bytes in 43 blocks
==14272== Rerun with --leak-check=full to see details of leaked memory
==14272== 
==14272== For counts of detected and suppressed errors, rerun with: -v
==14272== Use --track-origins=yes to see where uninitialised values come from
==14272== ERROR SUMMARY: 48 errors from 2 contexts (suppressed: 0 from 0)

[ no debug trace ]

-- 
You are receiving this mail because:
You are watching all bug changes.
___________________________________________________________________________
Sent via:    Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
             mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

Reply via email to