Attachment 1782 Details for Bug 3588 – Run of 3.0.21c under valgrind, exhibiting crash condition

Run of 3.0.21c under valgrind, exhibiting crash condition

smbclient-vg2.32352 (text/plain), 11.82 KB, created by bloch on 2006-03-10 05:02:04 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: bloch

Created: 2006-03-10 05:02:04 UTC

Size: 11.82 KB

patch

obsolete

>==32352== Memcheck, a memory error detector.
>==32352== Copyright (C) 2002-2005, and GNU GPL'd, by Julian Seward et al.
>==32352== Using LibVEX rev 1471, a library for dynamic binary translation.
>==32352== Copyright (C) 2004-2005, and GNU GPL'd, by OpenWorks LLP.
>==32352== Using valgrind-3.1.0-Debian, a dynamic binary instrumentation framework.
>==32352== Copyright (C) 2000-2005, and GNU GPL'd, by Julian Seward et al.
>==32352== For more details, rerun with: -v
>==32352== 
>==32352== My PID = 32352, parent PID = 8428.  Prog and args are:
>==32352==    smbclient
>==32352==    //10.99.90.28/share
>==32352==    -U
>==32352==    adam
>==32352== 
>==32352== Conditional jump or move depends on uninitialised value(s)
>==32352==    at 0x4009363: (within /lib/ld-2.3.6.so)
>==32352==    by 0x40027A7: (within /lib/ld-2.3.6.so)
>==32352==    by 0x400FA40: (within /lib/ld-2.3.6.so)
>==32352==    by 0x40039CA: (within /lib/ld-2.3.6.so)
>==32352==    by 0x40007C6: (within /lib/ld-2.3.6.so)
>==32352== 
>==32352== Conditional jump or move depends on uninitialised value(s)
>==32352==    at 0x4009000: (within /lib/ld-2.3.6.so)
>==32352==    by 0x40027A7: (within /lib/ld-2.3.6.so)
>==32352==    by 0x400FA40: (within /lib/ld-2.3.6.so)
>==32352==    by 0x40039CA: (within /lib/ld-2.3.6.so)
>==32352==    by 0x40007C6: (within /lib/ld-2.3.6.so)
>==32352== 
>==32352== Conditional jump or move depends on uninitialised value(s)
>==32352==    at 0x4009577: (within /lib/ld-2.3.6.so)
>==32352==    by 0x40027A7: (within /lib/ld-2.3.6.so)
>==32352==    by 0x400FA40: (within /lib/ld-2.3.6.so)
>==32352==    by 0x40039CA: (within /lib/ld-2.3.6.so)
>==32352==    by 0x40007C6: (within /lib/ld-2.3.6.so)
>==32352== 
>==32352== Conditional jump or move depends on uninitialised value(s)
>==32352==    at 0x4008EF1: (within /lib/ld-2.3.6.so)
>==32352==    by 0x400280B: (within /lib/ld-2.3.6.so)
>==32352==    by 0x400FA40: (within /lib/ld-2.3.6.so)
>==32352==    by 0x40039CA: (within /lib/ld-2.3.6.so)
>==32352==    by 0x40007C6: (within /lib/ld-2.3.6.so)
>==32352== 
>==32352== Conditional jump or move depends on uninitialised value(s)
>==32352==    at 0x4008EFD: (within /lib/ld-2.3.6.so)
>==32352==    by 0x400280B: (within /lib/ld-2.3.6.so)
>==32352==    by 0x400FA40: (within /lib/ld-2.3.6.so)
>==32352==    by 0x40039CA: (within /lib/ld-2.3.6.so)
>==32352==    by 0x40007C6: (within /lib/ld-2.3.6.so)
>==32352== 
>==32352== Conditional jump or move depends on uninitialised value(s)
>==32352==    at 0x4009000: (within /lib/ld-2.3.6.so)
>==32352==    by 0x400280B: (within /lib/ld-2.3.6.so)
>==32352==    by 0x400FA40: (within /lib/ld-2.3.6.so)
>==32352==    by 0x40039CA: (within /lib/ld-2.3.6.so)
>==32352==    by 0x40007C6: (within /lib/ld-2.3.6.so)
>==32352== 
>==32352== Invalid read of size 4
>==32352==    at 0x4011E88: (within /lib/ld-2.3.6.so)
>==32352==    by 0x4006B1E: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FC08F: dl_open_worker (dl-open.c:259)
>==32352==    by 0x400BAAE: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FCA3A: _dl_open (dl-open.c:577)
>==32352==    by 0x42FE02C: do_dlopen (dl-libc.c:80)
>==32352==    by 0x400BAAE: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FDFE2: dlerror_run (dl-libc.c:42)
>==32352==    by 0x42FE0F5: __libc_dlopen_mode (dl-libc.c:153)
>==32352==    by 0x4225DAA: __gconv_find_shlib (gconv_dl.c:117)
>==32352==    by 0x421DEDD: find_derivation (gconv_db.c:257)
>==32352==    by 0x421E667: __gconv_find_transform (gconv_db.c:723)
>==32352==  Address 0x44DB888 is 48 bytes inside a block of size 49 alloc'd
>==32352==    at 0x401D422: malloc (vg_replace_malloc.c:149)
>==32352==    by 0x4225E7C: __gconv_find_shlib (gconv_dl.c:89)
>==32352==    by 0x421DEDD: find_derivation (gconv_db.c:257)
>==32352==    by 0x421E667: __gconv_find_transform (gconv_db.c:723)
>==32352==    by 0x421D079: __gconv_open (gconv_open.c:172)
>==32352==    by 0x421CCF3: iconv_open (iconv_open.c:54)
>==32352==    by 0x80CEE9B: smb_iconv_open (in /usr/bin/smbclient)
>==32352==    by 0x80AA2E4: init_iconv (in /usr/bin/smbclient)
>==32352==    by 0x8074E84: lp_load (in /usr/bin/smbclient)
>==32352==    by 0x80665FD: main (in /usr/bin/smbclient)
>==32352== 
>==32352== Invalid read of size 4
>==32352==    at 0x4011FD0: (within /lib/ld-2.3.6.so)
>==32352==    by 0x4006B1E: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FC08F: dl_open_worker (dl-open.c:259)
>==32352==    by 0x400BAAE: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FCA3A: _dl_open (dl-open.c:577)
>==32352==    by 0x42FE02C: do_dlopen (dl-libc.c:80)
>==32352==    by 0x400BAAE: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FDFE2: dlerror_run (dl-libc.c:42)
>==32352==    by 0x42FE0F5: __libc_dlopen_mode (dl-libc.c:153)
>==32352==    by 0x4225DAA: __gconv_find_shlib (gconv_dl.c:117)
>==32352==    by 0x421DEDD: find_derivation (gconv_db.c:257)
>==32352==    by 0x421E667: __gconv_find_transform (gconv_db.c:723)
>==32352==  Address 0x44DB888 is 48 bytes inside a block of size 49 alloc'd
>==32352==    at 0x401D422: malloc (vg_replace_malloc.c:149)
>==32352==    by 0x4225E7C: __gconv_find_shlib (gconv_dl.c:89)
>==32352==    by 0x421DEDD: find_derivation (gconv_db.c:257)
>==32352==    by 0x421E667: __gconv_find_transform (gconv_db.c:723)
>==32352==    by 0x421D079: __gconv_open (gconv_open.c:172)
>==32352==    by 0x421CCF3: iconv_open (iconv_open.c:54)
>==32352==    by 0x80CEE9B: smb_iconv_open (in /usr/bin/smbclient)
>==32352==    by 0x80AA2E4: init_iconv (in /usr/bin/smbclient)
>==32352==    by 0x8074E84: lp_load (in /usr/bin/smbclient)
>==32352==    by 0x80665FD: main (in /usr/bin/smbclient)
>==32352== 
>==32352== Invalid read of size 4
>==32352==    at 0x4011FD0: (within /lib/ld-2.3.6.so)
>==32352==    by 0x4004E59: (within /lib/ld-2.3.6.so)
>==32352==    by 0x4006BA5: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FC08F: dl_open_worker (dl-open.c:259)
>==32352==    by 0x400BAAE: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FCA3A: _dl_open (dl-open.c:577)
>==32352==    by 0x42FE02C: do_dlopen (dl-libc.c:80)
>==32352==    by 0x400BAAE: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FDFE2: dlerror_run (dl-libc.c:42)
>==32352==    by 0x42FE0F5: __libc_dlopen_mode (dl-libc.c:153)
>==32352==    by 0x4225DAA: __gconv_find_shlib (gconv_dl.c:117)
>==32352==    by 0x421DEDD: find_derivation (gconv_db.c:257)
>==32352==  Address 0x44DB888 is 48 bytes inside a block of size 49 alloc'd
>==32352==    at 0x401D422: malloc (vg_replace_malloc.c:149)
>==32352==    by 0x4225E7C: __gconv_find_shlib (gconv_dl.c:89)
>==32352==    by 0x421DEDD: find_derivation (gconv_db.c:257)
>==32352==    by 0x421E667: __gconv_find_transform (gconv_db.c:723)
>==32352==    by 0x421D079: __gconv_open (gconv_open.c:172)
>==32352==    by 0x421CCF3: iconv_open (iconv_open.c:54)
>==32352==    by 0x80CEE9B: smb_iconv_open (in /usr/bin/smbclient)
>==32352==    by 0x80AA2E4: init_iconv (in /usr/bin/smbclient)
>==32352==    by 0x8074E84: lp_load (in /usr/bin/smbclient)
>==32352==    by 0x80665FD: main (in /usr/bin/smbclient)
>==32352== 
>==32352== Conditional jump or move depends on uninitialised value(s)
>==32352==    at 0x4009363: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FC39B: dl_open_worker (dl-open.c:343)
>==32352==    by 0x400BAAE: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FCA3A: _dl_open (dl-open.c:577)
>==32352==    by 0x42FE02C: do_dlopen (dl-libc.c:80)
>==32352==    by 0x400BAAE: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FDFE2: dlerror_run (dl-libc.c:42)
>==32352==    by 0x42FE0F5: __libc_dlopen_mode (dl-libc.c:153)
>==32352==    by 0x4225DAA: __gconv_find_shlib (gconv_dl.c:117)
>==32352==    by 0x421DEDD: find_derivation (gconv_db.c:257)
>==32352==    by 0x421E667: __gconv_find_transform (gconv_db.c:723)
>==32352==    by 0x421D079: __gconv_open (gconv_open.c:172)
>==32352== 
>==32352== Conditional jump or move depends on uninitialised value(s)
>==32352==    at 0x4009000: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FC39B: dl_open_worker (dl-open.c:343)
>==32352==    by 0x400BAAE: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FCA3A: _dl_open (dl-open.c:577)
>==32352==    by 0x42FE02C: do_dlopen (dl-libc.c:80)
>==32352==    by 0x400BAAE: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FDFE2: dlerror_run (dl-libc.c:42)
>==32352==    by 0x42FE0F5: __libc_dlopen_mode (dl-libc.c:153)
>==32352==    by 0x4225DAA: __gconv_find_shlib (gconv_dl.c:117)
>==32352==    by 0x421DEDD: find_derivation (gconv_db.c:257)
>==32352==    by 0x421E667: __gconv_find_transform (gconv_db.c:723)
>==32352==    by 0x421D079: __gconv_open (gconv_open.c:172)
>==32352== 
>==32352== Invalid read of size 4
>==32352==    at 0x4011FD0: (within /lib/ld-2.3.6.so)
>==32352==    by 0x400B9F9: (within /lib/ld-2.3.6.so)
>==32352==    by 0x400859E: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FE09B: do_dlsym (dl-libc.c:88)
>==32352==    by 0x400BAAE: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FDFE2: dlerror_run (dl-libc.c:42)
>==32352==    by 0x42FE155: __libc_dlsym (dl-libc.c:200)
>==32352==    by 0x4225DFD: __gconv_find_shlib (gconv_dl.c:131)
>==32352==    by 0x421DEDD: find_derivation (gconv_db.c:257)
>==32352==    by 0x421E667: __gconv_find_transform (gconv_db.c:723)
>==32352==    by 0x421D079: __gconv_open (gconv_open.c:172)
>==32352==    by 0x421CCF3: iconv_open (iconv_open.c:54)
>==32352==  Address 0x44DB918 is 24 bytes inside a block of size 25 alloc'd
>==32352==    at 0x401D422: malloc (vg_replace_malloc.c:149)
>==32352==    by 0x4004115: (within /lib/ld-2.3.6.so)
>==32352==    by 0x4006B1E: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FC08F: dl_open_worker (dl-open.c:259)
>==32352==    by 0x400BAAE: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FCA3A: _dl_open (dl-open.c:577)
>==32352==    by 0x42FE02C: do_dlopen (dl-libc.c:80)
>==32352==    by 0x400BAAE: (within /lib/ld-2.3.6.so)
>==32352==    by 0x42FDFE2: dlerror_run (dl-libc.c:42)
>==32352==    by 0x42FE0F5: __libc_dlopen_mode (dl-libc.c:153)
>==32352==    by 0x4225DAA: __gconv_find_shlib (gconv_dl.c:117)
>==32352==    by 0x421DEDD: find_derivation (gconv_db.c:257)
>==32352== 
>==32352== Invalid write of size 1
>==32352==    at 0x80ABD6E: pull_ucs2 (in /usr/bin/smbclient)
>==32352==    by 0x80B6E52: string_replace (in /usr/bin/smbclient)
>==32352==    by 0x8063255: (within /usr/bin/smbclient)
>==32352==    by 0x80670BB: main (in /usr/bin/smbclient)
>==32352==  Address 0x1284E0AC is 0 bytes after a block of size 172 alloc'd
>==32352==    at 0x401E98D: realloc (vg_replace_malloc.c:306)
>==32352==    by 0x4264FA1: vasprintf (vasprintf.c:83)
>==32352==    by 0x424C9CD: asprintf (asprintf.c:37)
>==32352==    by 0x8063234: (within /usr/bin/smbclient)
>==32352==    by 0x80670BB: main (in /usr/bin/smbclient)
>==32352== 
>==32352== ERROR SUMMARY: 70 errors from 13 contexts (suppressed: 0 from 0)
>==32352== malloc/free: in use at exit: 318,764 bytes in 419 blocks.
>==32352== malloc/free: 16,268,416 allocs, 16,267,997 frees, 1,481,812,008 bytes allocated.
>==32352== For counts of detected errors, rerun with: -v
>==32352== searching for pointers to 419 not-freed blocks.
>==32352== checked 826,480 bytes.
>==32352== 
>==32352== 
>==32352== 5 bytes in 1 blocks are definitely lost in loss record 2 of 24
>==32352==    at 0x401E98D: realloc (vg_replace_malloc.c:306)
>==32352==    by 0x40FA525: (within /lib/libpopt.so.0.0.0)
>==32352==    by 0x40FAAC7: poptGetNextOpt (in /lib/libpopt.so.0.0.0)
>==32352==    by 0x80664ED: main (in /usr/bin/smbclient)
>==32352== 
>==32352== 
>==32352== 32 bytes in 4 blocks are definitely lost in loss record 7 of 24
>==32352==    at 0x401D422: malloc (vg_replace_malloc.c:149)
>==32352==    by 0x404EA31: xmalloc (xmalloc.c:60)
>==32352==    by 0x4035E1F: readline_internal_teardown (readline.c:404)
>==32352==    by 0x4036EFD: readline (readline.c:540)
>==32352==    by 0x80DCC53: smb_readline (in /usr/bin/smbclient)
>==32352==    by 0x8067040: main (in /usr/bin/smbclient)
>==32352== 
>==32352== LEAK SUMMARY:
>==32352==    definitely lost: 37 bytes in 5 blocks.
>==32352==      possibly lost: 0 bytes in 0 blocks.
>==32352==    still reachable: 318,727 bytes in 414 blocks.
>==32352==         suppressed: 0 bytes in 0 blocks.
>==32352== Reachable blocks (those to which a pointer was found) are not shown.
>==32352== To see them, rerun with: --show-reachable=yes

Actions: View

Attachments on bug 3588: 1782