Skip to content
GitLab
    • GitLab: the DevOps platform
    • Explore GitLab
    • Install GitLab
    • How GitLab compares
    • Get started
    • GitLab docs
    • GitLab Learn
  • Pricing
  • Talk to an expert
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
    • Switch to GitLab Next
    Projects Groups Topics Snippets
  • Register
  • Sign in
  • wireshark wireshark
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributor statistics
    • Graph
    • Compare revisions
    • Locked files
  • Issues 1.4k
    • Issues 1.4k
    • List
    • Boards
    • Service Desk
    • Milestones
    • Iterations
    • Requirements
  • Merge requests 178
    • Merge requests 178
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Artifacts
    • Schedules
    • Test cases
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Model experiments
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Code review
    • Insights
    • Issue
    • Repository
  • Wiki
    • Wiki
  • External wiki
    • External wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • Wireshark FoundationWireshark Foundation
  • wiresharkwireshark
  • Issues
  • #18852
Closed
Open
Issue created Feb 09, 2023 by A Wireshark GitLab Utility@ws-gitlab-utilityDeveloper

Fuzz job crash output: fuzz-2023-02-09-6781.pcap

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2023-02-09-6781.pcap.gz

stderr:

Branch: release-3.6
Input file: /var/menagerie/menagerie/ultimate_wireshark_protocols_pcap_220213.pcap
CI job name: ASan Menagerie Fuzz, ID: 3745537378
CI job URL: https://gitlab.com/wireshark/wireshark/-/jobs/3745537378
Return value: 0
Dissector bug: 0
Date and time: Thu Feb  9 18:18:52 UTC 2023

Commits in the last 48 hours:
47b7d995c f5fileinfo: Typo / omission fix from last merge.
5dd154ec0 f5fileinfo: Add missing platform identifiers
584a60fb5 Fix RSVP P2MP ID rendering in RSVP session summary
3384739e0 Qt: Fencepost error in minimap/intelligent scrollbar
dc548290c macOS: Forget our ChmodBPF package when uninstalling
2457d1ca9 macOS: Fixup our signature identifiers

Build host information:
Linux 5.15.0-58-generic #64-Ubuntu SMP Thu Jan 5 11:43:13 UTC 2023 x86_64
Distributor ID:	Ubuntu
Description:	Ubuntu 22.04.1 LTS
Release:	22.04
Codename:	jammy

Command and args: /builds/wireshark/wireshark/_install/bin/tshark -2  -nVxr
Running as user "root" and group "root". This could be dangerous.
 ** (tshark:10816) 18:18:21.965807 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 404: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:22.094905 [Epan WARNING] -- Dissector bug, protocol COSE, in packet 707: epan/tvbuff.c:760: failed assertion "tvb && tvb->initialized"
 ** (tshark:10816) 18:18:22.881997 [Epan WARNING] -- Dissector bug, protocol COSE, in packet 1985: epan/tvbuff.c:760: failed assertion "tvb && tvb->initialized"
 ** (tshark:10816) 18:18:23.596166 [Epan WARNING] -- Dissector bug, protocol COSE, in packet 3415: epan/tvbuff.c:760: failed assertion "tvb && tvb->initialized"
 ** (tshark:10816) 18:18:24.004968 [Epan WARNING] -- Dissector bug, protocol COSE, in packet 4522: epan/tvbuff.c:760: failed assertion "tvb && tvb->initialized"
 ** (tshark:10816) 18:18:24.029543 [Epan WARNING] -- Dissector bug, protocol SABP, in packet 4599: epan/tvbuff.c:547: failed assertion "tvb && tvb->initialized"
 ** (tshark:10816) 18:18:24.626959 [Epan WARNING] -- Dissector bug, protocol COSE, in packet 6228: epan/tvbuff.c:760: failed assertion "tvb && tvb->initialized"
 ** (tshark:10816) 18:18:24.788368 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 6638: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:24.926452 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 7033: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:25.135746 [Epan WARNING] -- Dissector bug, protocol COSE, in packet 7650: epan/tvbuff.c:760: failed assertion "tvb && tvb->initialized"
 ** (tshark:10816) 18:18:25.525593 [Epan WARNING] -- Dissector bug, protocol COSE, in packet 8636: epan/tvbuff.c:760: failed assertion "tvb && tvb->initialized"
 ** (tshark:10816) 18:18:25.847832 [Epan WARNING] -- Dissector bug, protocol IEEE1609dot2, in packet 9497: Invalid length 0 passed to proto_tree_add_item_ret_uint64
 ** (tshark:10816) 18:18:28.060116 [Epan WARNING] -- Dissector bug, protocol COSE, in packet 11936: epan/tvbuff_composite.c:277: failed assertion "num_members"
 ** (tshark:10816) 18:18:28.328387 [Epan WARNING] -- Dissector bug, protocol CDP, in packet 12713: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:28.378402 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 12856: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:28.727284 [Epan WARNING] -- Dissector bug, protocol COSE, in packet 13847: epan/tvbuff.c:760: failed assertion "tvb && tvb->initialized"
 ** (tshark:10816) 18:18:29.216921 [Epan WARNING] -- Dissector bug, protocol COSE, in packet 14498: epan/tvbuff.c:760: failed assertion "tvb && tvb->initialized"
 ** (tshark:10816) 18:18:29.218567 [Epan WARNING] -- Dissector bug, protocol SABP, in packet 14502: epan/tvbuff.c:547: failed assertion "tvb && tvb->initialized"
 ** (tshark:10816) 18:18:29.433890 [Epan WARNING] -- Dissector bug, protocol DICOM, in packet 14965: epan/column-utils.c:682: failed assertion "str"
 ** (tshark:10816) 18:18:30.273525 [Epan WARNING] -- Dissector bug, protocol GNW, in packet 17042: epan/dissectors/packet-geonw.c:1264: failed assertion "!(tmp_val & 0xffffffff00000000)"
 ** (tshark:10816) 18:18:31.021317 [Epan WARNING] -- Dissector bug, protocol CDP, in packet 19010: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:31.248377 [Epan WARNING] -- Dissector bug, protocol DICOM, in packet 19304: epan/column-utils.c:682: failed assertion "str"
 ** (tshark:10816) 18:18:31.705531 [Epan WARNING] -- Dissector bug, protocol BPv7, in packet 20042: epan/tvbuff_composite.c:220: failed assertion "member->length"
 ** (tshark:10816) 18:18:31.910066 [Epan WARNING] -- Dissector bug, protocol CDP, in packet 20210: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:32.149215 [Epan WARNING] -- Dissector bug, protocol IEEE1609dot2, in packet 20736: Invalid length 0 passed to proto_tree_add_item_ret_uint64
 ** (tshark:10816) 18:18:32.416159 [Epan WARNING] -- Dissector bug, protocol TCP, in packet 21393: epan/dissectors/packet-tcp.c:6454: failed assertion "save_desegment_offset == pinfo->desegment_offset && save_desegment_len == pinfo->desegment_len"
 ** (tshark:10816) 18:18:32.679227 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 22069: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:33.957068 [Epan WARNING] -- Dissector bug, protocol ATN-ULCS, in packet 24866: epan/tvbuff.c:405: failed assertion "datalen>0"
 ** (tshark:10816) 18:18:34.325892 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 25841: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:34.339828 [Epan WARNING] -- Dissector bug, protocol BPv7, in packet 25875: epan/tvbuff_composite.c:220: failed assertion "member->length"
 ** (tshark:10816) 18:18:35.692689 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 28339: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:35.864566 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 28750: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:36.067923 [Epan WARNING] -- Dissector bug, protocol DICOM, in packet 29247: epan/column-utils.c:682: failed assertion "str"
 ** (tshark:10816) 18:18:36.461461 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 30307: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:36.699444 [Epan WARNING] -- Dissector bug, protocol DICOM, in packet 31022: epan/column-utils.c:682: failed assertion "str"
 ** (tshark:10816) 18:18:36.907907 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 31511: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:37.547476 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 33230: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:37.634818 [Epan WARNING] -- Dissector bug, protocol WSP, in packet 33508: epan/tvbuff.c:907: failed assertion "tvb && tvb->initialized"
 ** (tshark:10816) 18:18:37.656937 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 33550: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:38.240163 [Epan WARNING] -- Dissector bug, protocol MPTCP, in packet 34777: epan/dissectors/packet-tcp.c:4851: failed assertion "DISSECTOR_ASSERT_NOT_REACHED"
 ** (tshark:10816) 18:18:38.543216 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 35579: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:39.484556 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 37858: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:39.900054 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 38718: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:40.365975 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 40039: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:40.525381 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 40537: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:40.624658 [Epan WARNING] -- Dissector bug, protocol COSE, in packet 40809: epan/tvbuff.c:760: failed assertion "tvb && tvb->initialized"
 ** (tshark:10816) 18:18:40.781076 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 41235: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:41.291963 [Epan WARNING] -- Dissector bug, protocol IEEE1609dot2, in packet 42444: Invalid length 0 passed to proto_tree_add_item_ret_uint64
 ** (tshark:10816) 18:18:41.720655 [Epan WARNING] -- Dissector bug, protocol COSE, in packet 43318: epan/tvbuff_composite.c:220: failed assertion "member->length"
 ** (tshark:10816) 18:18:42.212426 [Epan WARNING] -- Dissector bug, protocol CDP, in packet 44724: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:42.770807 [Epan WARNING] -- Dissector bug, protocol COSE, in packet 45864: epan/tvbuff.c:760: failed assertion "tvb && tvb->initialized"
 ** (tshark:10816) 18:18:42.814095 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 45980: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:43.319526 [Epan WARNING] -- Dissector bug, protocol WSP, in packet 47489: epan/tvbuff.c:907: failed assertion "tvb && tvb->initialized"
 ** (tshark:10816) 18:18:43.368279 [Epan WARNING] -- Dissector bug, protocol GSM RLC MAC, in packet 47642: epan/tvbuff.c:405: failed assertion "datalen>0"
 ** (tshark:10816) 18:18:43.598402 [Epan WARNING] -- Dissector bug, protocol MPTCP, in packet 48293: epan/dissectors/packet-tcp.c:4851: failed assertion "DISSECTOR_ASSERT_NOT_REACHED"
 ** (tshark:10816) 18:18:45.423377 [Epan WARNING] -- Dissector bug, protocol DHCPv6, in packet 404: epan/tvbuff.c:4518: failed assertion "len > 0"
 ** (tshark:10816) 18:18:46.660751 [Epan WARNING] -- Dissector bug, protocol QUIC, in packet 881: epan/dissectors/packet-quic.c:3646: failed assertion "quic_packet"
 ** (tshark:10816) 18:18:48.903432 [Epan WARNING] -- Dissector bug, protocol QUIC, in packet 1634: epan/dissectors/packet-quic.c:3646: failed assertion "quic_packet"
 ** (tshark:10816) 18:18:49.218939 [Epan WARNING] -- Dissector bug, protocol PPP MP, in packet 1770: epan/proto.c:5971: failed assertion "tvb != ((void*)0) || *length == 0"
=================================================================
==10816==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x607000c32608 at pc 0x7fe02a5de83d bp 0x7fffc81a8f70 sp 0x7fffc81a8f68
READ of size 4 at 0x607000c32608 thread T0
    #0 0x7fe02a5de83c in wmem_array_get_count /builds/wireshark/wireshark/wsutil/wmem/wmem_array.c:158:19
    #1 0x7fe032dbadd1 in process_rdma_list /builds/wireshark/wireshark/epan/dissectors/packet-rpcrdma.c:992:46
    #2 0x7fe032db9d8d in process_rdma_lists /builds/wireshark/wireshark/epan/dissectors/packet-rpcrdma.c:1200:15
    #3 0x7fe032db7015 in dissect_rpcrdma /builds/wireshark/wireshark/epan/dissectors/packet-rpcrdma.c:1460:24
    #4 0x7fe032db5f55 in dissect_rpcrdma_ib_heur /builds/wireshark/wireshark/epan/dissectors/packet-rpcrdma.c:1650:5
    #5 0x7fe034765878 in dissector_try_heuristic /builds/wireshark/wireshark/epan/packet.c:2864:9
    #6 0x7fe0324bf8c3 in parse_PAYLOAD /builds/wireshark/wireshark/epan/dissectors/packet-infiniband.c:2737:17
    #7 0x7fe0324bcb51 in dissect_infiniband_common /builds/wireshark/wireshark/epan/dissectors/packet-infiniband.c:2106:17
    #8 0x7fe0324b8d8d in dissect_rroce /builds/wireshark/wireshark/epan/dissectors/packet-infiniband.c:1709:5
    #9 0x7fe03476a0fa in call_dissector_through_handle /builds/wireshark/wireshark/epan/packet.c:757:9
    #10 0x7fe03475fa83 in call_dissector_work /builds/wireshark/wireshark/epan/packet.c:850:9
    #11 0x7fe03475f413 in dissector_try_uint_new /builds/wireshark/wireshark/epan/packet.c:1450:8
    #12 0x7fe03475fe22 in dissector_try_uint /builds/wireshark/wireshark/epan/packet.c:1474:9
    #13 0x7fe033342a3c in decode_udp_ports /builds/wireshark/wireshark/epan/dissectors/packet-udp.c:705:7
    #14 0x7fe03334af6c in dissect /builds/wireshark/wireshark/epan/dissectors/packet-udp.c:1267:5
    #15 0x7fe03334579d in dissect_udp /builds/wireshark/wireshark/epan/dissectors/packet-udp.c:1273:3
    #16 0x7fe03476a0fa in call_dissector_through_handle /builds/wireshark/wireshark/epan/packet.c:757:9
    #17 0x7fe03475fa83 in call_dissector_work /builds/wireshark/wireshark/epan/packet.c:850:9
    #18 0x7fe03475f413 in dissector_try_uint_new /builds/wireshark/wireshark/epan/packet.c:1450:8
    #19 0x7fe0324d502e in ip_try_dissect /builds/wireshark/wireshark/epan/dissectors/packet-ip.c:1817:7
    #20 0x7fe0324da312 in dissect_ip_v4 /builds/wireshark/wireshark/epan/dissectors/packet-ip.c:2307:10
    #21 0x7fe03476a0fa in call_dissector_through_handle /builds/wireshark/wireshark/epan/packet.c:757:9
    #22 0x7fe03475fa83 in call_dissector_work /builds/wireshark/wireshark/epan/packet.c:850:9
    #23 0x7fe03475f413 in dissector_try_uint_new /builds/wireshark/wireshark/epan/packet.c:1450:8
    #24 0x7fe03475fe22 in dissector_try_uint /builds/wireshark/wireshark/epan/packet.c:1474:9
    #25 0x7fe0320b7133 in dissect_ethertype /builds/wireshark/wireshark/epan/dissectors/packet-ethertype.c:296:21
    #26 0x7fe03476a0fa in call_dissector_through_handle /builds/wireshark/wireshark/epan/packet.c:757:9
    #27 0x7fe03475fa83 in call_dissector_work /builds/wireshark/wireshark/epan/packet.c:850:9
    #28 0x7fe034766cb0 in call_dissector_only /builds/wireshark/wireshark/epan/packet.c:3270:8
    #29 0x7fe03475bed4 in call_dissector_with_data /builds/wireshark/wireshark/epan/packet.c:3283:8
    #30 0x7fe0320b3f10 in dissect_eth_common /builds/wireshark/wireshark/epan/dissectors/packet-eth.c:576:5
    #31 0x7fe0320b2a77 in dissect_eth /builds/wireshark/wireshark/epan/dissectors/packet-eth.c:882:5
    #32 0x7fe03476a0fa in call_dissector_through_handle /builds/wireshark/wireshark/epan/packet.c:757:9
    #33 0x7fe03475fa83 in call_dissector_work /builds/wireshark/wireshark/epan/packet.c:850:9
    #34 0x7fe034766cb0 in call_dissector_only /builds/wireshark/wireshark/epan/packet.c:3270:8
    #35 0x7fe03214082e in dissect_frame /builds/wireshark/wireshark/epan/dissectors/packet-frame.c:935:6
    #36 0x7fe03476a0fa in call_dissector_through_handle /builds/wireshark/wireshark/epan/packet.c:757:9
    #37 0x7fe03475fa83 in call_dissector_work /builds/wireshark/wireshark/epan/packet.c:850:9
    #38 0x7fe034766cb0 in call_dissector_only /builds/wireshark/wireshark/epan/packet.c:3270:8
    #39 0x7fe03475bed4 in call_dissector_with_data /builds/wireshark/wireshark/epan/packet.c:3283:8
    #40 0x7fe03475b6b0 in dissect_record /builds/wireshark/wireshark/epan/packet.c:624:3
    #41 0x7fe03472f1e8 in epan_dissect_run_with_taps /builds/wireshark/wireshark/epan/epan.c:629:2
    #42 0x5585c29ce815 in process_packet_second_pass /builds/wireshark/wireshark/tshark.c:3260:5
    #43 0x5585c29ccc6d in process_cap_file_second_pass /builds/wireshark/wireshark/tshark.c:3402:9
    #44 0x5585c29c70c7 in process_cap_file /builds/wireshark/wireshark/tshark.c:3672:28
    #45 0x5585c29c10ee in main /builds/wireshark/wireshark/tshark.c:2112:16
    #46 0x7fe02a233d8f  (/lib/x86_64-linux-gnu/libc.so.6+0x29d8f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d)
    #47 0x7fe02a233e3f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x29e3f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d)
    #48 0x5585c28da4f4 in _start (/builds/wireshark/wireshark/_install/bin/tshark+0x4b4f4) (BuildId: 740719e4ee7412ee453be63eba43d9a7c64370b2)

0x607000c32608 is located 88 bytes to the right of 80-byte region [0x607000c32560,0x607000c325b0)
allocated by thread T0 here:
    #0 0x5585c295ff1e in malloc (/builds/wireshark/wireshark/_install/bin/tshark+0xd0f1e) (BuildId: 740719e4ee7412ee453be63eba43d9a7c64370b2)
    #1 0x7fe02a4e7738 in g_malloc (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x5e738) (BuildId: 137458a0f7846a084270bf5bb03df075a578db6d)
    #2 0x7fe02a5e777f in wmem_strict_alloc /builds/wireshark/wireshark/wsutil/wmem/wmem_allocator_strict.c:81:46
    #3 0x7fe02a5dea7d in wmem_alloc /builds/wireshark/wireshark/wsutil/wmem/wmem_core.c:44:12
    #4 0x7fe02a5deaac in wmem_alloc0 /builds/wireshark/wireshark/wsutil/wmem/wmem_core.c:52:11
    #5 0x7fe02a5f0a59 in wmem_tree_new /builds/wireshark/wireshark/wsutil/wmem/wmem_tree.c:201:12
    #6 0x7fe03471c161 in conversation_add_proto_data /builds/wireshark/wireshark/epan/conversation.c:1305:21
    #7 0x7fe0333415d8 in get_udp_conversation_data /builds/wireshark/wireshark/epan/dissectors/packet-udp.c:275:5
    #8 0x7fe03334a1c1 in dissect /builds/wireshark/wireshark/epan/dissectors/packet-udp.c:1209:10
    #9 0x7fe03334579d in dissect_udp /builds/wireshark/wireshark/epan/dissectors/packet-udp.c:1273:3
    #10 0x7fe03476a0fa in call_dissector_through_handle /builds/wireshark/wireshark/epan/packet.c:757:9
    #11 0x7fe03475fa83 in call_dissector_work /builds/wireshark/wireshark/epan/packet.c:850:9
    #12 0x7fe03475f413 in dissector_try_uint_new /builds/wireshark/wireshark/epan/packet.c:1450:8
    #13 0x7fe0324d502e in ip_try_dissect /builds/wireshark/wireshark/epan/dissectors/packet-ip.c:1817:7
    #14 0x7fe0324da312 in dissect_ip_v4 /builds/wireshark/wireshark/epan/dissectors/packet-ip.c:2307:10
    #15 0x7fe03476a0fa in call_dissector_through_handle /builds/wireshark/wireshark/epan/packet.c:757:9
    #16 0x7fe03475fa83 in call_dissector_work /builds/wireshark/wireshark/epan/packet.c:850:9
    #17 0x7fe03475f413 in dissector_try_uint_new /builds/wireshark/wireshark/epan/packet.c:1450:8
    #18 0x7fe03475fe22 in dissector_try_uint /builds/wireshark/wireshark/epan/packet.c:1474:9
    #19 0x7fe0320b7133 in dissect_ethertype /builds/wireshark/wireshark/epan/dissectors/packet-ethertype.c:296:21
    #20 0x7fe03476a0fa in call_dissector_through_handle /builds/wireshark/wireshark/epan/packet.c:757:9
    #21 0x7fe03475fa83 in call_dissector_work /builds/wireshark/wireshark/epan/packet.c:850:9
    #22 0x7fe034766cb0 in call_dissector_only /builds/wireshark/wireshark/epan/packet.c:3270:8
    #23 0x7fe03475bed4 in call_dissector_with_data /builds/wireshark/wireshark/epan/packet.c:3283:8
    #24 0x7fe0320b3f10 in dissect_eth_common /builds/wireshark/wireshark/epan/dissectors/packet-eth.c:576:5
    #25 0x7fe0320b2a77 in dissect_eth /builds/wireshark/wireshark/epan/dissectors/packet-eth.c:882:5
    #26 0x7fe03476a0fa in call_dissector_through_handle /builds/wireshark/wireshark/epan/packet.c:757:9
    #27 0x7fe03475fa83 in call_dissector_work /builds/wireshark/wireshark/epan/packet.c:850:9
    #28 0x7fe034766cb0 in call_dissector_only /builds/wireshark/wireshark/epan/packet.c:3270:8
    #29 0x7fe03214082e in dissect_frame /builds/wireshark/wireshark/epan/dissectors/packet-frame.c:935:6

SUMMARY: AddressSanitizer: heap-buffer-overflow /builds/wireshark/wireshark/wsutil/wmem/wmem_array.c:158:19 in wmem_array_get_count
Shadow bytes around the buggy address:
  0x0c0e8017e470: fa fa fa fa 00 00 00 00 00 00 00 00 00 fa fa fa
  0x0c0e8017e480: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c0e8017e490: fa fa fa fa fa fa fa fa fa fa fa fa fa fa 00 00
  0x0c0e8017e4a0: 00 00 00 00 00 00 00 fa fa fa fa fa 00 00 00 00
  0x0c0e8017e4b0: 00 00 00 00 00 00 fa fa fa fa fa fa fa fa fa fa
=>0x0c0e8017e4c0: fa[fa]fa fa fa fa fa fa 00 00 00 00 00 00 00 00
  0x0c0e8017e4d0: 00 00 fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c0e8017e4e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c0e8017e4f0: fa fa 00 00 00 00 00 00 00 00 00 fa fa fa fa fa
  0x0c0e8017e500: 00 00 00 00 00 00 00 00 00 fa fa fa fa fa 00 00
  0x0c0e8017e510: 00 00 00 00 00 00 00 00 fa fa fa fa 00 00 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
==10816==ABORTING

fuzz-test.sh stderr:
Running as user "root" and group "root". This could be dangerous.

no debug trace

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking