https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15329
Bug ID: 15329
Summary: Buildbot crash output: fuzz-2018-12-04-18707.pcap
Product: Wireshark
Version: unspecified
Hardware: x86-64
OS: Ubuntu
Status: CONFIRMED
Severity: Major
Priority: High
Component: Dissection engine (libwireshark)
Assignee: bugzilla-ad...@wireshark.org
Reporter: buildbot-do-not-re...@wireshark.org
Target Milestone: ---
Problems have been found with the following capture file:
https://www.wireshark.org/download/automated/captures/fuzz-2018-12-04-18707.pcap
stderr:
Input file: /home/wireshark/menagerie/menagerie/11778-bug2630_dump.pcap.gz
Build host information:
Linux wsbb04 4.15.0-42-generic #45-Ubuntu SMP Thu Nov 15 19:32:57 UTC 2018
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID: Ubuntu
Description: Ubuntu 18.04.1 LTS
Release: 18.04
Codename: bionic
Buildbot information:
BUILDBOT_WORKERNAME=clang-code-analysis
BUILDBOT_BUILDNUMBER=4957
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-master/
BUILDBOT_REPOSITORY=ssh://wireshark-build...@code.wireshark.org:29418/wireshark
BUILDBOT_GOT_REVISION=6a8168169aa6002e72d7bcfe4f9cf692ce632239
Return value: 0
Dissector bug: 0
Valgrind error count: 0
Git commit
commit 6a8168169aa6002e72d7bcfe4f9cf692ce632239
Author: João Valverde <joao.valve...@tecnico.ulisboa.pt>
Date: Tue Dec 4 01:46:01 2018 +0000
wsutil: Rename DATAFILE_DIR variable
Rename DATAFILE_DIR to be closer to CMake and avoid mixing
with the staging dir path variable of the same name.
Change-Id: I7b1e02152d8bde14cca210fbfae4acbdba7d78d7
Reviewed-on: https://code.wireshark.org/review/30916
Petri-Dish: João Valverde <j...@v6e.pt>
Tested-by: Petri Dish Buildbot
Reviewed-by: João Valverde <j...@v6e.pt>
Command and args:
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/tshark
-nVxr
=================================================================
==21378==ERROR: AddressSanitizer: stack-use-after-scope on address
0x7ffee53c1c30 at pc 0x55f09b6ffd82 bp 0x7ffee53c0050 sp 0x7ffee53bf800
READ of size 32 at 0x7ffee53c1c30 thread T0
#0 0x55f09b6ffd81
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/tshark+0x11ad81)
#1 0x7fd91ff44fc2
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb26efc2)
#2 0x7fd91e810c57
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0x9b3ac57)
#3 0x7fd91e90319e
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0x9c2d19e)
#4 0x7fd91e905295
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0x9c2f295)
#5 0x7fd920074164
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb39e164)
#6 0x7fd9200695e1
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb3935e1)
#7 0x7fd92006a691
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb394691)
#8 0x7fd92006a760
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb394760)
#9 0x7fd91e980327
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0x9caa327)
#10 0x7fd91e97506d
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0x9c9f06d)
#11 0x7fd920074164
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb39e164)
#12 0x7fd9200695e1
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb3935e1)
#13 0x7fd920068f4a
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb392f4a)
#14 0x7fd9200699a9
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb3939a9)
#15 0x7fd91ecfc300
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xa026300)
#16 0x7fd91ed05d97
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xa02fd97)
#17 0x7fd91ecff38f
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xa02938f)
#18 0x7fd920074164
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb39e164)
#19 0x7fd9200695e1
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb3935e1)
#20 0x7fd920068f4a
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb392f4a)
#21 0x7fd91dec6694
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0x91f0694)
#22 0x7fd91decd553
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0x91f7553)
#23 0x7fd920074164
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb39e164)
#24 0x7fd9200695e1
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb3935e1)
#25 0x7fd920068f4a
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb392f4a)
#26 0x7fd9200699a9
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb3939a9)
#27 0x7fd91dab0dfa
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0x8ddadfa)
#28 0x7fd920074164
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb39e164)
#29 0x7fd9200695e1
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb3935e1)
#30 0x7fd9200709ac
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb39a9ac)
#31 0x7fd920065814
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb38f814)
#32 0x7fd91daae4f4
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0x8dd84f4)
#33 0x7fd91daa9f63
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0x8dd3f63)
#34 0x7fd920074164
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb39e164)
#35 0x7fd9200695e1
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb3935e1)
#36 0x7fd920068f4a
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb392f4a)
#37 0x7fd91db6b350
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0x8e95350)
#38 0x7fd920074164
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb39e164)
#39 0x7fd9200695e1
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb3935e1)
#40 0x7fd9200709ac
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb39a9ac)
#41 0x7fd920065814
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb38f814)
#42 0x7fd920065015
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb38f015)
#43 0x7fd920035138
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0xb35f138)
#44 0x55f09b74e9e1
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/tshark+0x1699e1)
#45 0x55f09b75257f
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/tshark+0x16d57f)
#46 0x55f09b74abcb
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/tshark+0x165bcb)
#47 0x55f09b743ce1
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/tshark+0x15ece1)
#48 0x7fd912c8cb96 (/lib/x86_64-linux-gnu/libc.so.6+0x21b96)
#49 0x55f09b640fe9
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/tshark+0x5bfe9)
Address 0x7ffee53c1c30 is located in stack of thread T0 at offset 688 in frame
#0 0x7fd91e97688f
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/../lib/libwireshark.so.0+0x9ca088f)
This frame has 16 object(s):
[32, 36) 'next_offset' (line 3320)
[48, 52) 'content_length' (line 3321)
[64, 68) 'token_1_len' (line 3327)
[80, 84) 'current_method_idx' (line 3328)
[96, 97) 'contacts_expires_0' (line 3335)
[112, 113) 'contacts_expires_unknown' (line 3335)
[128, 144) 'cseq_method' (line 3338)
[160, 288) 'call_id' (line 3339)
[320, 344) 'message_info' (line 3341)
[384, 388) 'response_time' (line 3345)
[400, 408) 'hdtbl_entry' (line 3347)
[432, 492) 'uri_offsets' (line 3548)
[528, 536) 'ti_c' (line 3604)
[560, 564) 'retry' (line 3927)
[576, 656) 'authorization_info' (line 4269)
[688, 720) 'setup_info' (line 4706) <== Memory access at offset 688 is
inside this variable
HINT: this may be a false positive if your program uses some custom stack
unwind mechanism or swapcontext
(longjmp and C++ exceptions *are* supported)
SUMMARY: AddressSanitizer: stack-use-after-scope
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.asan/bin/tshark+0x11ad81)
Shadow bytes around the buggy address:
0x10005ca70330: f1 f1 f1 f1 04 f2 04 f2 04 f2 04 f2 01 f2 01 f2
0x10005ca70340: 00 00 f2 f2 00 00 00 00 00 00 00 00 00 00 00 00
0x10005ca70350: 00 00 00 00 f2 f2 f2 f2 00 00 00 f2 f2 f2 f2 f2
0x10005ca70360: 04 f2 00 f2 f2 f2 f8 f8 f8 f8 f8 f8 f8 f8 f2 f2
0x10005ca70370: f2 f2 f8 f2 f2 f2 f8 f2 f8 f8 f8 f8 f8 f8 f8 f8
=>0x10005ca70380: f8 f8 f2 f2 f2 f2[f8]f8 f8 f8 f3 f3 f3 f3 f3 f3
0x10005ca70390: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x10005ca703a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x10005ca703b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x10005ca703c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x10005ca703d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
Left alloca redzone: ca
Right alloca redzone: cb
==21378==ABORTING
[ no debug trace ]
--
You are receiving this mail because:
You are watching all bug changes.___________________________________________________________________________
Sent via: Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives: https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
