Quite revealing this!
Of course I have to remember to run this as root, so here it is (again):
[root@test1 src]# LD_LIBRARY_PATH=/home/me/src/libmnl-1.0.1/src/.libs
libtool --mode=execute valgrind --track-origins=yes -v
/home/me/src/ipset-6.5/src/ipset restore < ipset-6.5-segfault.ips
==10624== Memcheck, a memory error detector
==10624== Copyright (C) 2002-2009, and GNU GPL'd, by Julian Seward et al.
==10624== Using Valgrind-3.5.0 and LibVEX; rerun with -h for copyright info
==10624== Command: /home/me/src/ipset-6.5/src/ipset restore
==10624==
--10624-- Valgrind options:
--10624-- --track-origins=yes
--10624-- -v
--10624-- Contents of /proc/version:
--10624-- Linux version 2.6.35.13-91.fc13.x86_64 (me@xxxxxxxxxxxx)
(gcc version 4.4.5 20101112 (Red Hat 4.4.5-2) (GCC) ) #1 SMP Sat May 21
02:33:34 BST 2011
--10624-- Arch and hwcaps: AMD64, amd64-sse3-cx16
--10624-- Page sizes: currently 4096, max supported 4096
--10624-- Valgrind library directory: /usr/lib64/valgrind
--10624-- Reading syms from /home/me/src/ipset-6.5/src/ipset (0x400000)
--10624-- Reading syms from /usr/lib64/valgrind/memcheck-amd64-linux
(0x38000000)
--10624-- object doesn't have a dynamic symbol table
--10624-- Reading syms from /lib64/ld-2.12.2.so (0x3c86600000)
--10624-- Reading suppressions file: /usr/lib64/valgrind/default.supp
--10624-- REDIR: 0x3c86617350 (strlen) redirected to 0x3803f6f7
(vgPlain_amd64_linux_REDIR_FOR_strlen)
--10624-- Reading syms from
/usr/lib64/valgrind/vgpreload_core-amd64-linux.so (0x4801000)
--10624-- Reading syms from
/usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so (0x4a02000)
==10624== WARNING: new redirection conflicts with existing -- ignoring it
--10624-- new: 0x3c86617350 (strlen ) R-> 0x04a06340 strlen
--10624-- REDIR: 0x3c866171c0 (index) redirected to 0x4a05f80 (index)
--10624-- REDIR: 0x3c86617240 (strcmp) redirected to 0x4a06900 (strcmp)
--10624-- Reading syms from
/home/me/src/libmnl-1.0.1/src/.libs/libmnl.so.0.0.1 (0x4c0a000)
--10624-- Reading syms from /lib64/libc-2.12.2.so (0x3c86a00000)
--10624-- REDIR: 0x3c86a815a0 (__GI_strrchr) redirected to 0x4a05e00
(__GI_strrchr)
--10624-- REDIR: 0x3c86a7fab0 (strlen) redirected to 0x480155c
(_vgnU_ifunc_wrapper)
==10624== WARNING: new redirection conflicts with existing -- ignoring it
--10624-- new: 0x3c86a7fae0 (__GI_strlen ) R-> 0x04a062e0 strlen
--10624-- REDIR: 0x3c86a7fae0 (__GI_strlen) redirected to 0x4a06300
(__GI_strlen)
--10624-- REDIR: 0x3c86a7e070 (strcmp) redirected to 0x480155c
(_vgnU_ifunc_wrapper)
--10624-- REDIR: 0x3c86b26cc0 (__strcmp_ssse3) redirected to 0x4a06860
(strcmp)
--10624-- REDIR: 0x3c86a79180 (calloc) redirected to 0x4a043d3 (calloc)
--10624-- REDIR: 0x3c86a7fcb0 (strncmp) redirected to 0x480155c
(_vgnU_ifunc_wrapper)
--10624-- REDIR: 0x3c86b27f20 (__strncmp_ssse3) redirected to 0x4a067a0
(strncmp)
--10624-- REDIR: 0x3c86a81cb0 (memchr) redirected to 0x4a069a0 (memchr)
--10624-- REDIR: 0x3c86a83730 (memcpy) redirected to 0x4a069d0 (memcpy)
--10624-- REDIR: 0x3c86a81540 (strncpy) redirected to 0x480155c
(_vgnU_ifunc_wrapper)
--10624-- REDIR: 0x3c86b24140 (???) redirected to 0x4a06500 (strncpy)
--10624-- REDIR: 0xffffffffff600400 (???) redirected to 0x3803f6ed
(vgPlain_amd64_linux_REDIR_FOR_vtime)
--10624-- REDIR: 0x3c86a82320 (memset) redirected to 0x4a07540 (memset)
==10624== Syscall param socketcall.sendto(msg) points to uninitialised
byte(s)
==10624== at 0x3C86AE1973: __sendto_nocancel (in /lib64/libc-2.12.2.so)
==10624== by 0x4C0BBAB: mnl_socket_sendto (socket.c:183)
==10624== by 0x40CAFA: ipset_mnl_query (mnl.c:95)
==10624== by 0x40AE28: build_send_private_msg (session.c:1567)
==10624== by 0x40B897: ipset_cmd (session.c:1843)
==10624== by 0x40C0FB: create_type_get (types.c:239)
==10624== by 0x40C5D1: ipset_type_get (types.c:382)
==10624== by 0x4065BA: ipset_parse_typename (parse.c:1389)
==10624== by 0x40306E: parse_commandline (ipset.c:618)
==10624== by 0x402204: restore (ipset.c:197)
==10624== by 0x4031DF: parse_commandline (ipset.c:667)
==10624== by 0x403485: main (ipset.c:742)
==10624== Address 0x7ff000199 is on thread 1's stack
==10624== Uninitialised value was created by a stack allocation
==10624== at 0x40ABE7: build_send_private_msg (session.c:1526)
==10624==
--10624-- REDIR: 0x3c86a79540 (malloc) redirected to 0x4a050db (malloc)
--10624-- REDIR: 0x3c86a7dfc0 (index) redirected to 0x480155c
(_vgnU_ifunc_wrapper)
==10624== WARNING: new redirection conflicts with existing -- ignoring it
--10624-- new: 0x3c86a7dff0 (__GI_strchr ) R-> 0x04a05e90 index
--10624-- REDIR: 0x3c86a7dff0 (__GI_strchr) redirected to 0x4a05ec0
(__GI_strchr)
--10624-- REDIR: 0x3c86a7a2c0 (free) redirected to 0x4a04ceb (free)
--10624-- REDIR: 0x3c86a7f500 (strcpy) redirected to 0x480155c
(_vgnU_ifunc_wrapper)
--10624-- REDIR: 0x3c86b23720 (???) redirected to 0x4a06360 (strcpy)
--10624-- REDIR: 0x3c86a84bb0 (strchrnul) redirected to 0x4a07620
(strchrnul)
--10624-- REDIR: 0x3c86a82e50 (mempcpy) redirected to 0x4a07690 (mempcpy)
--10624-- REDIR: 0x3c86a7de00 (strcat) redirected to 0x4a05fb0 (strcat)
ipset v6.5: Error in line 3: Internal protocol error
==10624==
==10624== HEAP SUMMARY:
==10624== in use at exit: 0 bytes in 0 blocks
==10624== total heap usage: 11 allocs, 11 frees, 13,910 bytes allocated
==10624==
==10624== All heap blocks were freed -- no leaks are possible
==10624==
==10624== ERROR SUMMARY: 3 errors from 1 contexts (suppressed: 6 from 6)
==10624==
==10624== 3 errors in context 1 of 1:
==10624== Syscall param socketcall.sendto(msg) points to uninitialised
byte(s)
==10624== at 0x3C86AE1973: __sendto_nocancel (in /lib64/libc-2.12.2.so)
==10624== by 0x4C0BBAB: mnl_socket_sendto (socket.c:183)
==10624== by 0x40CAFA: ipset_mnl_query (mnl.c:95)
==10624== by 0x40AE28: build_send_private_msg (session.c:1567)
==10624== by 0x40B897: ipset_cmd (session.c:1843)
==10624== by 0x40C0FB: create_type_get (types.c:239)
==10624== by 0x40C5D1: ipset_type_get (types.c:382)
==10624== by 0x4065BA: ipset_parse_typename (parse.c:1389)
==10624== by 0x40306E: parse_commandline (ipset.c:618)
==10624== by 0x402204: restore (ipset.c:197)
==10624== by 0x4031DF: parse_commandline (ipset.c:667)
==10624== by 0x403485: main (ipset.c:742)
==10624== Address 0x7ff000199 is on thread 1's stack
==10624== Uninitialised value was created by a stack allocation
==10624== at 0x40ABE7: build_send_private_msg (session.c:1526)
==10624==
--10624--
--10624-- used_suppression: 4 dl-hack3-cond-1
--10624-- used_suppression: 2 glibc-2.5.x-on-SUSE-10.2-(PPC)-2a
==10624==
==10624== ERROR SUMMARY: 3 errors from 1 contexts (suppressed: 6 from 6)
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
