[prev in list] [next in list] [prev in thread] [next in thread] 

List:       wireshark-bugs
Subject:    [Wireshark-bugs] [Bug 15091] New: Buildbot crash output: fuzz-2018-08-29-23893.pcap
From:       bugzilla-daemon () wireshark ! org
Date:       2018-08-30 7:30:03
Message-ID: bug-15091-15 () https ! bugs ! wireshark ! org/bugzilla/
[Download RAW message or body]

--15356142031.b09BAE.2368
Date: Thu, 30 Aug 2018 07:30:03 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugs.wireshark.org/bugzilla/
Auto-Submitted: auto-generated

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15091

            Bug ID: 15091
           Summary: Buildbot crash output: fuzz-2018-08-29-23893.pcap
           Product: Wireshark
           Version: unspecified
          Hardware: x86-64
                OS: Ubuntu
            Status: CONFIRMED
          Severity: Major
          Priority: High
         Component: Dissection engine (libwireshark)
          Assignee: bugzilla-admin@wireshark.org
          Reporter: buildbot-do-not-reply@wireshark.org
  Target Milestone: ---

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2018-08-29-23893.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/16477-bleGAP.pcap

Build host information:
Linux wsbb04 4.15.0-32-generic #35-Ubuntu SMP Fri Aug 10 17:58:07 UTC 2018
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID: Ubuntu
Description:    Ubuntu 18.04.1 LTS
Release:        18.04
Codename:       bionic

Buildbot information:
BUILDBOT_WORKERNAME=fuzz-test
BUILDBOT_BUILDNUMBER=112
BUILDBOT_BUILDERNAME=Fuzz Test
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-2.2/
BUILDBOT_REPOSITORY=ssh://wireshark-buildbot@code.wireshark.org:29418/wireshark
BUILDBOT_GOT_REVISION=3b76ff5d745ab44e13f6b211c6d1e728586d9133

Return value:  0

Dissector bug:  0

Valgrind error count:  9



Git commit
commit 3b76ff5d745ab44e13f6b211c6d1e728586d9133
Author: Gerald Combs <gerald@wireshark.org>
Date:   Wed Aug 29 09:46:49 2018 -0700

    Build 2.2.17.

    Change-Id: I95d160304306dc6cbb660cf3b507ba4f1062c945
    Reviewed-on: https://code.wireshark.org/review/29337
    Reviewed-by: Gerald Combs <gerald@wireshark.org>


Command and args: ./tools/valgrind-wireshark.sh -b
/home/wireshark/builders/wireshark-2.2-fuzz/fuzztest/install/bin  

==17601== Memcheck, a memory error detector
==17601== Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward et al.
==17601== Using Valgrind-3.13.0 and LibVEX; rerun with -h for copyright info
==17601== Command:
/home/wireshark/builders/wireshark-2.2-fuzz/fuzztest/install/bin/tshark -nr
/fuzz/buildbot/fuzztest/valgrind-fuzz-2.2/fuzz-2018-08-29-23893.pcap
==17601== 
==17601== Invalid read of size 1
==17601==    at 0x7556972: wmem_strong_hash (wmem_map.c:253)
==17601==    by 0x75567D3: wmem_map_lookup (wmem_map.c:178)
==17601==    by 0x69482A8: eth_name_lookup (addr_resolv.c:1672)
==17601==    by 0x6949440: get_ether_name (addr_resolv.c:2969)
==17601==    by 0x6951A27: col_set_addr.isra.5 (column-utils.c:1909)
==17601==    by 0x6953F61: col_fill_in (column-utils.c:2184)
==17601==    by 0x120014: print_packet (tshark.c:3825)
==17601==    by 0x1209A2: process_packet (tshark.c:3465)
==17601==    by 0x117B43: load_cap_file (tshark.c:3212)
==17601==    by 0x117B43: main (tshark.c:1902)
==17601==  Address 0x1ffefff88a is on thread 1's stack
==17601==  1502 bytes below stack pointer
==17601== 
==17601== Invalid read of size 4
==17601==    at 0x6946E12: eth_addr_cmp (addr_resolv.c:1461)
==17601==    by 0x7556801: wmem_map_lookup (wmem_map.c:182)
==17601==    by 0x69482A8: eth_name_lookup (addr_resolv.c:1672)
==17601==    by 0x6949440: get_ether_name (addr_resolv.c:2969)
==17601==    by 0x6951A27: col_set_addr.isra.5 (column-utils.c:1909)
==17601==    by 0x6953F61: col_fill_in (column-utils.c:2184)
==17601==    by 0x120014: print_packet (tshark.c:3825)
==17601==    by 0x1209A2: process_packet (tshark.c:3465)
==17601==    by 0x117B43: load_cap_file (tshark.c:3212)
==17601==    by 0x117B43: main (tshark.c:1902)
==17601==  Address 0x1ffefff88a is on thread 1's stack
==17601==  1502 bytes below stack pointer
==17601== 
==17601== Invalid read of size 2
==17601==    at 0x6946E24: eth_addr_cmp (addr_resolv.c:1461)
==17601==    by 0x7556801: wmem_map_lookup (wmem_map.c:182)
==17601==    by 0x69482A8: eth_name_lookup (addr_resolv.c:1672)
==17601==    by 0x6949440: get_ether_name (addr_resolv.c:2969)
==17601==    by 0x6951A27: col_set_addr.isra.5 (column-utils.c:1909)
==17601==    by 0x6953F61: col_fill_in (column-utils.c:2184)
==17601==    by 0x120014: print_packet (tshark.c:3825)
==17601==    by 0x1209A2: process_packet (tshark.c:3465)
==17601==    by 0x117B43: load_cap_file (tshark.c:3212)
==17601==    by 0x117B43: main (tshark.c:1902)
==17601==  Address 0x1ffefff88e is on thread 1's stack
==17601==  1498 bytes below stack pointer
==17601== 
==17601== 
==17601== HEAP SUMMARY:
==17601==     in use at exit: 456,458 bytes in 9,934 blocks
==17601==   total heap usage: 272,400 allocs, 262,466 frees, 33,280,728 bytes
allocated
==17601== 
==17601== LEAK SUMMARY:
==17601==    definitely lost: 1,467 bytes in 50 blocks
==17601==    indirectly lost: 8,087 bytes in 262 blocks
==17601==      possibly lost: 0 bytes in 0 blocks
==17601==    still reachable: 446,904 bytes in 9,622 blocks
==17601==         suppressed: 0 bytes in 0 blocks
==17601== Rerun with --leak-check=full to see details of leaked memory
==17601== 
==17601== For counts of detected and suppressed errors, rerun with: -v
==17601== ERROR SUMMARY: 9 errors from 3 contexts (suppressed: 1 from 1)

[ no debug trace ]

-- 
You are receiving this mail because:
You are watching all bug changes.
--15356142031.b09BAE.2368
Date: Thu, 30 Aug 2018 07:30:03 +0000
MIME-Version: 1.0
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugs.wireshark.org/bugzilla/
Auto-Submitted: auto-generated

<html>
    <head>
      <base href="https://bugs.wireshark.org/bugzilla/" />
      <style>
        body, th, td {
            font-size: 12px;
            font-family: Arial, Helvetica, sans-serif; }
        p, pre { margin-top: 1em; }
        pre {
            font-family: Bitstream Vera Sans Mono, Consolas, Lucida Console, \
monospace;  white-space: pre-wrap;
	}
        table { border: 0; border-spacing: 0; border-collapse: collapse; }
        th, td {
            padding: 0.25em;
            padding-left: 0.5em;
            padding-right: 0.5em;
        }
        th { background: rgb(240, 240, 240); }
        th.th_top { border-bottom: 1px solid rgb(116, 126, 147); }
        th.th_left { border-right: 1px solid rgb(116, 126, 147); }
        td.removed { background-color: #ffcccc; }
        td.added { background-color: #e4ffc7; }
      </style>
    </head>
    <body><table>
        <tr>
          <th class="th_left">Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_CONFIRMED "
   title="CONFIRMED - Buildbot crash output: fuzz-2018-08-29-23893.pcap"
   href="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15091">15091</a>
          </td>
        </tr>

        <tr>
          <th class="th_left">Summary</th>
          <td>Buildbot crash output: fuzz-2018-08-29-23893.pcap
          </td>
        </tr>

        <tr>
          <th class="th_left">Product</th>
          <td>Wireshark
          </td>
        </tr>

        <tr>
          <th class="th_left">Version</th>
          <td>unspecified
          </td>
        </tr>

        <tr>
          <th class="th_left">Hardware</th>
          <td>x86-64
          </td>
        </tr>

        <tr>
          <th class="th_left">OS</th>
          <td>Ubuntu
          </td>
        </tr>

        <tr>
          <th class="th_left">Status</th>
          <td>CONFIRMED
          </td>
        </tr>

        <tr>
          <th class="th_left">Severity</th>
          <td>Major
          </td>
        </tr>

        <tr>
          <th class="th_left">Priority</th>
          <td>High
          </td>
        </tr>

        <tr>
          <th class="th_left">Component</th>
          <td>Dissection engine (libwireshark)
          </td>
        </tr>

        <tr>
          <th class="th_left">Assignee</th>
          <td>bugzilla-admin&#64;wireshark.org
          </td>
        </tr>

        <tr>
          <th class="th_left">Reporter</th>
          <td>buildbot-do-not-reply&#64;wireshark.org
          </td>
        </tr>

        <tr>
          <th class="th_left">Target Milestone</th>
          <td>---
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Problems have been found with the following capture file:

<a href="https://www.wireshark.org/download/automated/captures/fuzz-2018-08-29-23893.p \
cap">https://www.wireshark.org/download/automated/captures/fuzz-2018-08-29-23893.pcap</a>


stderr:
Input file: /home/wireshark/menagerie/menagerie/16477-bleGAP.pcap

Build host information:
Linux wsbb04 4.15.0-32-generic #35-Ubuntu SMP Fri Aug 10 17:58:07 UTC 2018
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID: Ubuntu
Description:    Ubuntu 18.04.1 LTS
Release:        18.04
Codename:       bionic

Buildbot information:
BUILDBOT_WORKERNAME=fuzz-test
BUILDBOT_BUILDNUMBER=112
BUILDBOT_BUILDERNAME=Fuzz Test
BUILDBOT_URL=<a href="http://buildbot.wireshark.org/wireshark-2.2/">http://buildbot.wireshark.org/wireshark-2.2/</a>
 BUILDBOT_REPOSITORY=ssh://<a \
href="mailto:wireshark-buildbot&#64;code.wireshark.org">wireshark-buildbot&#64;code.wireshark.org</a>:29418/wireshark
 BUILDBOT_GOT_REVISION=3b76ff5d745ab44e13f6b211c6d1e728586d9133

Return value:  0

Dissector bug:  0

Valgrind error count:  9



Git commit
<a href="https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3b76ff5d745ab44e13f6b211c6d1e728586d9133">commit \
                3b76ff5d745ab44e13f6b211c6d1e728586d9133</a>
Author: Gerald Combs &lt;<a \
                href="mailto:gerald&#64;wireshark.org">gerald&#64;wireshark.org</a>&gt;
                
Date:   Wed Aug 29 09:46:49 2018 -0700

    Build 2.2.17.

    Change-Id: <a href="https://code.wireshark.org/review/#/q/I95d160304306dc6cbb660cf3b507ba4f1062c945">I95d160304306dc6cbb660cf3b507ba4f1062c945</a>
  Reviewed-on: <a href="https://code.wireshark.org/review/29337">https://code.wireshark.org/review/29337</a>
  Reviewed-by: Gerald Combs &lt;<a \
href="mailto:gerald&#64;wireshark.org">gerald&#64;wireshark.org</a>&gt;


Command and args: ./tools/valgrind-wireshark.sh -b
/home/wireshark/builders/wireshark-2.2-fuzz/fuzztest/install/bin  

==17601== Memcheck, a memory error detector
==17601== Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward et al.
==17601== Using Valgrind-3.13.0 and LibVEX; rerun with -h for copyright info
==17601== Command:
/home/wireshark/builders/wireshark-2.2-fuzz/fuzztest/install/bin/tshark -nr
/fuzz/buildbot/fuzztest/valgrind-fuzz-2.2/fuzz-2018-08-29-23893.pcap
==17601== 
==17601== Invalid read of size 1
==17601==    at 0x7556972: wmem_strong_hash (wmem_map.c:253)
==17601==    by 0x75567D3: wmem_map_lookup (wmem_map.c:178)
==17601==    by 0x69482A8: eth_name_lookup (addr_resolv.c:1672)
==17601==    by 0x6949440: get_ether_name (addr_resolv.c:2969)
==17601==    by 0x6951A27: col_set_addr.isra.5 (column-utils.c:1909)
==17601==    by 0x6953F61: col_fill_in (column-utils.c:2184)
==17601==    by 0x120014: print_packet (tshark.c:3825)
==17601==    by 0x1209A2: process_packet (tshark.c:3465)
==17601==    by 0x117B43: load_cap_file (tshark.c:3212)
==17601==    by 0x117B43: main (tshark.c:1902)
==17601==  Address 0x1ffefff88a is on thread 1's stack
==17601==  1502 bytes below stack pointer
==17601== 
==17601== Invalid read of size 4
==17601==    at 0x6946E12: eth_addr_cmp (addr_resolv.c:1461)
==17601==    by 0x7556801: wmem_map_lookup (wmem_map.c:182)
==17601==    by 0x69482A8: eth_name_lookup (addr_resolv.c:1672)
==17601==    by 0x6949440: get_ether_name (addr_resolv.c:2969)
==17601==    by 0x6951A27: col_set_addr.isra.5 (column-utils.c:1909)
==17601==    by 0x6953F61: col_fill_in (column-utils.c:2184)
==17601==    by 0x120014: print_packet (tshark.c:3825)
==17601==    by 0x1209A2: process_packet (tshark.c:3465)
==17601==    by 0x117B43: load_cap_file (tshark.c:3212)
==17601==    by 0x117B43: main (tshark.c:1902)
==17601==  Address 0x1ffefff88a is on thread 1's stack
==17601==  1502 bytes below stack pointer
==17601== 
==17601== Invalid read of size 2
==17601==    at 0x6946E24: eth_addr_cmp (addr_resolv.c:1461)
==17601==    by 0x7556801: wmem_map_lookup (wmem_map.c:182)
==17601==    by 0x69482A8: eth_name_lookup (addr_resolv.c:1672)
==17601==    by 0x6949440: get_ether_name (addr_resolv.c:2969)
==17601==    by 0x6951A27: col_set_addr.isra.5 (column-utils.c:1909)
==17601==    by 0x6953F61: col_fill_in (column-utils.c:2184)
==17601==    by 0x120014: print_packet (tshark.c:3825)
==17601==    by 0x1209A2: process_packet (tshark.c:3465)
==17601==    by 0x117B43: load_cap_file (tshark.c:3212)
==17601==    by 0x117B43: main (tshark.c:1902)
==17601==  Address 0x1ffefff88e is on thread 1's stack
==17601==  1498 bytes below stack pointer
==17601== 
==17601== 
==17601== HEAP SUMMARY:
==17601==     in use at exit: 456,458 bytes in 9,934 blocks
==17601==   total heap usage: 272,400 allocs, 262,466 frees, 33,280,728 bytes
allocated
==17601== 
==17601== LEAK SUMMARY:
==17601==    definitely lost: 1,467 bytes in 50 blocks
==17601==    indirectly lost: 8,087 bytes in 262 blocks
==17601==      possibly lost: 0 bytes in 0 blocks
==17601==    still reachable: 446,904 bytes in 9,622 blocks
==17601==         suppressed: 0 bytes in 0 blocks
==17601== Rerun with --leak-check=full to see details of leaked memory
==17601== 
==17601== For counts of detected and suppressed errors, rerun with: -v
==17601== ERROR SUMMARY: 9 errors from 3 contexts (suppressed: 1 from 1)

[ no debug trace ]</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are watching all bug changes.</li>
      </ul>
    </body>
</html>
--15356142031.b09BAE.2368--


[Attachment #3 (text/plain)]

___________________________________________________________________________
Sent via:    Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
             mailto:wireshark-bugs-request@wireshark.org?subject=unsubscribe

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic