122 Star 1 Fork 32

src-openEuler / wireshark

 / 详情

【fuzz】wireshark--sanitizer memory MemorySanitizer: use-of-uninitialized-value

已验收
缺陷
创建于  
2022-03-04 15:22

环境信息】
x86
【测试版本】
Name: wireshark
Version: 3.6.0

【注意事项】
受影响版本排查(受影响/不受影响)
1、master
2、openEuler-20.03-LTS-SP3
3、openEuler-20.03-LTS-SP1
4、openEuler-20.03-LTS-SP2
5、openEuler-20.03-LTS
6、openEuler-21.03
7、openEuler-20.03-LTS-Next
8、openEuler-21.09
9、openEuler-22.03-LTS
10、openEuler-22.03-LTS-Next
11、openEuler-20.09
一、【测试步骤】
1、编译
python3 infra/helper.py build_fuzzers --sanitizer memory wireshark
2、执行
(1) python3 infra/helper.py run_fuzzer wireshark fuzzshark_ip
(2) python3 infra/helper.py run_fuzzer wireshark fuzzshark_ip_proto-ospf
(3) python3 infra/helper.py run_fuzzer wireshark fuzzshark_ip_proto-udp
(4) python3 infra/helper.py run_fuzzer wireshark fuzzshark_media_type-json
(5) python3 infra/helper.py run_fuzzer wireshark fuzzshark_tcp_port-bgp
(6) python3 infra/helper.py run_fuzzer wireshark fuzzshark_udp_port-dhcp
(7) python3 infra/helper.py run_fuzzer wireshark fuzzshark_ip_proto-udp
【报错信息】
==15==WARNING: MemorySanitizer: use-of-uninitialized-value
#0 0x6720d77 in end_string /src/wireshark/ui/version_info.c:100:17
#1 0x6720d77 in get_compiled_version_info /src/wireshark/ui/version_info.c:190:2
#2 0x671fc5a in ws_init_version_info /src/wireshark/ui/version_info.c:66:18
#3 0x5239fb in fuzz_init /src/wireshark/fuzz/fuzzshark.c:266:2
#4 0x5239fb in LLVMFuzzerInitialize /src/wireshark/fuzz/fuzzshark.c:394:8
#5 0x44a1e7 in fuzzer::FuzzerDriver(int*, char***, int ()(unsigned char const, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:613:5
#6 0x474672 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:19:10
#7 0x7f22099ab82f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
#8 0x4205a8 in _start (/out/fuzzshark_ip+0x4205a8)

Uninitialized value was created by a heap allocation
#0 0x4cddf5 in posix_memalign /src/llvm-project/compiler-rt/lib/msan/msan_interceptors.cpp:170:3
#1 0x67dd2f5 in slab_allocator_alloc_chunk (/out/fuzzshark_ip+0x67dd2f5)

SUMMARY: MemorySanitizer: use-of-uninitialized-value /src/wireshark/ui/version_info.c:100:17 in end_string
Unique heap origins: 21
Stack depot allocated bytes: 1000
Unique origin histories: 6
History depot allocated bytes: 144
【预期结果】
运行无异常

【实际结果】
MemorySanitizer: use-of-uninitialized-value

评论 (1)

wangxiaoya 创建了缺陷
wangxiaoya 修改了标题
wangxiaoya 修改了标题
wangxiaoya 计划开始日期设置为2022-03-04
wangxiaoya 计划截止日期设置为2022-03-10
wangxiaoya 修改了描述
wangxiaoya 关联仓库设置为src-openEuler/wireshark
wangxiaoya 负责人设置为small_leek
wangxiaoya 修改了描述
展开全部操作日志

wireshark/ui/version_info.c第100行如下:point在使用前已赋值,str在传参给end_string函数前也有赋值,所以为非问题

99	point = str->len;
100	if (point == 0 || str->str[point - 1] != '\n')
	
lyn 任务状态待办的 修改为已完成
DisNight 添加了
 
sig/Application
标签
wangxiaoya 任务状态已完成 修改为已验收

登录 后才可以发表评论

状态
负责人
项目
里程碑
Pull Requests
关联的 Pull Requests 被合并后可能会关闭此 issue
分支
开始日期   -   截止日期
-
置顶选项
优先级
预计工期 (小时)
参与者(2)
1
https://gitee.com/src-openeuler/wireshark.git
git@gitee.com:src-openeuler/wireshark.git
src-openeuler
wireshark
wireshark

搜索帮助