Skip to content

SPNEGO dissector bug

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2023-04-16-6966.pcap.gz

stderr:

Branch: master
Input file: /var/menagerie/menagerie/usrtp0dmzdc011Jun08WWWWa_00001_20080603111353
CI job name: ASan Menagerie Fuzz, ID: 4120688656
CI job URL: https://gitlab.com/wireshark/wireshark/-/jobs/4120688656
Return value: 0
Dissector bug: 0
Date and time: Sun Apr 16 08:58:03 UTC 2023

Commits in the last 48 hours:
f683421d8c cms: Remove blank line at EOF
cebd0d5088 Qt: Add missing spacer in I/O Graphs
4917e3a8e7 Set TCP/9389 (ADWS) as default MC-NMF port
d735db4f14 MPEG PES: Update a comment
516c3b2ca0 rdp: fix parsing of capability sets
d618630b44 MPEG: Handle MPEG_program_end_code
47bc2e62e3 LWM: fix error: unknown option [-Werror=pragmas]
8133caa16b GDT and Z3950: Fix encoding flag in template
fcc548c409 check_typed_item_calls.py: Substitute macros into item masks

Build host information:
Linux 5.19.0-38-generic #39~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Fri Mar 17 21:16:15 UTC 2 x86_64
Distributor ID:	Ubuntu
Description:	Ubuntu 22.04.2 LTS
Release:	22.04
Codename:	jammy

Command and args: /builds/wireshark/wireshark/_install/bin/tshark -2 --log-fatal-domains=UTF-8  -nVxr
Running as user "root" and group "root". This could be dangerous.
 ** (tshark:35346) 08:58:00.028281 [Epan WARNING] -- Dissector bug, protocol LANMAN, in packet 2952: epan/proto.c:5022: field lanman.level is not of type FT_STRING, FT_STRINGZ, FT_STRINGZPAD, FT_STRINGZTRUNC, or FT_UINT_STRING
 ** (tshark:35346) 08:58:03.014671 [(none) CRITICAL] wsutil/to_str.c:275 -- bytes_to_str_maxlen(): Zero length 'src_size' passed to bytes_to_str_maxlen()
 ** (tshark:35346) Aborting on fatal log level exception

fuzz-test.sh stderr:
Running as user "root" and group "root". This could be dangerous.
./tools/fuzz-test.sh: line 267: 35346 Aborted                 (core dumped) "$RUNNER" $COMMON_ARGS $ARGS "$TMP_DIR/$TMP_FILE" > /dev/null 2>> "$TMP_DIR/$ERR_FILE.$SUBSHELL_PID"

no debug trace

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information