Project

General

Profile

Bug #43 » defcon-segv-7890-3-vg.log

valgrind memcheck output - Will Metcalf, 01/04/2010 04:49 PM

 
==1324== Memcheck, a memory error detector
==1324== Copyright (C) 2002-2009, and GNU GPL'd, by Julian Seward et al.
==1324== Using Valgrind-3.5.0-Debian and LibVEX; rerun with -h for copyright info
==1324== Command: src/suricata -c ../suricata117.yaml -r ./defconctf-segv-7890-3.pcap -l ./ -s /home/coz/downloads/current-all-blah.rules
==1324== Parent PID: 7255
==1324==
--1324--
--1324-- Valgrind options:
--1324-- --suppressions=/usr/lib/valgrind/debian-libc6-dbg.supp
--1324-- -v
--1324-- --log-file=defcon-segv-7890-3-vg.log
--1324-- Contents of /proc/version:
--1324-- Linux version 2.6.31-16-generic (buildd@crested) (gcc version 4.4.1 (Ubuntu 4.4.1-4ubuntu8) ) #53-Ubuntu SMP Tue Dec 8 04:02:15 UTC 2009
--1324-- Arch and hwcaps: AMD64, amd64-sse3-cx16
--1324-- Page sizes: currently 4096, max supported 4096
--1324-- Valgrind library directory: /usr/lib/valgrind
--1324-- Reading syms from /home/coz/downloads/suricatafuzz1/src/suricata (0x400000)
--1324-- Reading syms from /lib/ld-2.10.1.so (0x4000000)
--1324-- Reading debug info from /lib/ld-2.10.1.so ..
--1324-- .. CRC mismatch (computed 27e0048f wanted 447ba3bc)
--1324-- Reading debug info from /usr/lib/debug/lib/ld-2.10.1.so ..
--1324-- Reading syms from /usr/lib/valgrind/memcheck-amd64-linux (0x38000000)
--1324-- object doesn't have a dynamic symbol table
--1324-- Reading suppressions file: /usr/lib/valgrind/debian-libc6-dbg.supp
--1324-- Reading suppressions file: /usr/lib/valgrind/default.supp
--1324-- REDIR: 0x4017050 (strlen) redirected to 0x3803fa17 (vgPlain_amd64_linux_REDIR_FOR_strlen)
--1324-- Reading syms from /usr/lib/valgrind/vgpreload_core-amd64-linux.so (0x4a20000)
--1324-- Reading syms from /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so (0x4c22000)
==1324== WARNING: new redirection conflicts with existing -- ignoring it
--1324-- new: 0x04017050 (strlen ) R-> 0x04c26210 strlen
--1324-- REDIR: 0x4016ec0 (index) redirected to 0x4c25f60 (index)
--1324-- REDIR: 0x4016f40 (strcmp) redirected to 0x4c26510 (strcmp)
--1324-- Reading syms from /usr/lib/libhtp-0.1.so.1.0.2 (0x4e2a000)
--1324-- Reading syms from /usr/lib/libpcap.so.1.0.0 (0x503c000)
--1324-- Reading debug info from /usr/lib/libpcap.so.1.0.0 ..
--1324-- .. CRC mismatch (computed b8b37524 wanted ee19886b)
--1324-- object doesn't have a symbol table
--1324-- Reading syms from /usr/local/lib/libpfring.so (0x5271000)
--1324-- Reading syms from /usr/lib/libnet.so.1.5.0 (0x5475000)
--1324-- Reading debug info from /usr/lib/libnet.so.1.5.0 ..
--1324-- .. CRC mismatch (computed ab8a7182 wanted c0f36049)
--1324-- object doesn't have a symbol table
--1324-- Reading syms from /lib/libpthread-2.10.1.so (0x568e000)
--1324-- Reading debug info from /lib/libpthread-2.10.1.so ..
--1324-- .. CRC mismatch (computed 217e8639 wanted 7a12e000)
--1324-- Reading debug info from /usr/lib/debug/lib/libpthread-2.10.1.so ..
--1324-- Reading syms from /usr/lib/libyaml-0.so.1.1.0 (0x58aa000)
--1324-- Reading debug info from /usr/lib/libyaml-0.so.1.1.0 ..
--1324-- .. CRC mismatch (computed 07b76363 wanted 049c8cd2)
--1324-- object doesn't have a symbol table
--1324-- Reading syms from /lib/libpcre.so.3.12.1 (0x5acb000)
--1324-- Reading debug info from /lib/libpcre.so.3.12.1 ..
--1324-- .. CRC mismatch (computed 31e68816 wanted cdbf0e4e)
--1324-- object doesn't have a symbol table
--1324-- Reading syms from /lib/libc-2.10.1.so (0x5cf9000)
--1324-- Reading debug info from /lib/libc-2.10.1.so ..
--1324-- .. CRC mismatch (computed 9003397f wanted a4efd6e8)
--1324-- Reading debug info from /usr/lib/debug/lib/libc-2.10.1.so ..
--1324-- Reading syms from /lib/libz.so.1.2.3.3 (0x6068000)
--1324-- Reading debug info from /lib/libz.so.1.2.3.3 ..
--1324-- .. CRC mismatch (computed 3957eb9d wanted 90f25be3)
--1324-- object doesn't have a symbol table
--1324-- REDIR: 0x5d787e0 (rindex) redirected to 0x4c25dc0 (rindex)
--1324-- REDIR: 0x5d73780 (malloc) redirected to 0x4c250d1 (malloc)
--1324-- REDIR: 0x5d7a020 (memset) redirected to 0x4c27080 (memset)
--1324-- REDIR: 0x5d783b0 (strlen) redirected to 0x4c261d0 (strlen)
--1324-- REDIR: 0x5d7de90 (strchrnul) redirected to 0x4c27160 (strchrnul)
--1324-- REDIR: 0x5d7ab50 (mempcpy) redirected to 0x4c271b0 (mempcpy)
--1324-- REDIR: 0x5d7b4c0 (memcpy) redirected to 0x4c265e0 (memcpy)
--1324-- REDIR: 0x5d77da0 (index) redirected to 0x4c25e60 (index)
--1324-- REDIR: 0x5d72d70 (calloc) redirected to 0x4c243c9 (calloc)
--1324-- REDIR: 0xffffffffff600000 (???) redirected to 0x3803fa03 (vgPlain_amd64_linux_REDIR_FOR_vgettimeofday)
--1324-- REDIR: 0x5d736a0 (free) redirected to 0x4c24ce1 (free)
--1324-- REDIR: 0x5d77e60 (strcpy) redirected to 0x4c26230 (strcpy)
--1324-- REDIR: 0x5d77e20 (strcmp) redirected to 0x4c264c0 (strcmp)
--1324-- REDIR: 0x5d744c0 (realloc) redirected to 0x4c25182 (realloc)
--1324-- REDIR: 0x5d79e60 (memmove) redirected to 0x4c270f0 (memmove)
--1324-- REDIR: 0x5d784e0 (strncat) redirected to 0x4c26080 (strncat)
--1324-- REDIR: 0x5d77be0 (strcat) redirected to 0x4c25fa0 (strcat)
--1324-- REDIR: 0x5d79950 (bcmp) redirected to 0x4c26d70 (bcmp)
--1324-- REDIR: 0xffffffffff600400 (???) redirected to 0x3803fa0d (vgPlain_amd64_linux_REDIR_FOR_vtime)
--1324-- REDIR: 0x5d798d0 (memchr) redirected to 0x4c265b0 (memchr)
--1324-- REDIR: 0x5d78660 (strncpy) redirected to 0x4c26300 (strncpy)
--1324-- REDIR: 0x5d78580 (strncmp) redirected to 0x4c26450 (strncmp)
==1324== Thread 4:
==1324== Invalid write of size 1
==1324== at 0x4C26724: memcpy (mc_replace_strmem.c:482)
==1324== by 0x48182C: StreamTcpReassembleHandleSegmentUpdateACK (stream-tcp-reassemble.c:1407)
==1324== by 0x481BA6: StreamTcpReassembleHandleSegment (stream-tcp-reassemble.c:1506)
==1324== by 0x47CE06: StreamTcpPacketStateCloseWait (stream-tcp.c:2076)
==1324== by 0x47D42B: StreamTcpPacket (stream-tcp.c:2283)
==1324== by 0x47D548: StreamTcp (stream-tcp.c:2322)
==1324== by 0x46FF42: TmThreadsSlot1 (tm-threads.c:325)
==1324== by 0x5694A03: start_thread (pthread_create.c:300)
==1324== by 0x5DD87BC: clone (clone.S:112)
==1324== Address 0x5c6849b0 is 0 bytes after a block of size 592 alloc'd
==1324== at 0x4C25153: malloc (vg_replace_malloc.c:195)
==1324== by 0x4787E1: StreamMsgAlloc (stream.c:26)
==1324== by 0x463861: PoolInit (util-pool.c:55)
==1324== by 0x478B72: StreamMsgQueuesInit (stream.c:145)
==1324== by 0x47DF4F: StreamTcpReassembleInit (stream-tcp-reassemble.c:116)
==1324== by 0x479142: StreamTcpInitConfig (stream-tcp.c:254)
==1324== by 0x40508C: main (suricata.c:676)
==1324==
==1324== Invalid write of size 1
==1324== at 0x4C2672C: memcpy (mc_replace_strmem.c:482)
==1324== by 0x48182C: StreamTcpReassembleHandleSegmentUpdateACK (stream-tcp-reassemble.c:1407)
==1324== by 0x481BA6: StreamTcpReassembleHandleSegment (stream-tcp-reassemble.c:1506)
==1324== by 0x47CE06: StreamTcpPacketStateCloseWait (stream-tcp.c:2076)
==1324== by 0x47D42B: StreamTcpPacket (stream-tcp.c:2283)
==1324== by 0x47D548: StreamTcp (stream-tcp.c:2322)
==1324== by 0x46FF42: TmThreadsSlot1 (tm-threads.c:325)
==1324== by 0x5694A03: start_thread (pthread_create.c:300)
==1324== by 0x5DD87BC: clone (clone.S:112)
==1324== Address 0x5c6849b1 is 1 bytes after a block of size 592 alloc'd
==1324== at 0x4C25153: malloc (vg_replace_malloc.c:195)
==1324== by 0x4787E1: StreamMsgAlloc (stream.c:26)
==1324== by 0x463861: PoolInit (util-pool.c:55)
==1324== by 0x478B72: StreamMsgQueuesInit (stream.c:145)
==1324== by 0x47DF4F: StreamTcpReassembleInit (stream-tcp-reassemble.c:116)
==1324== by 0x479142: StreamTcpInitConfig (stream-tcp.c:254)
==1324== by 0x40508C: main (suricata.c:676)
==1324==
==1324== Invalid write of size 1
==1324== at 0x4C26735: memcpy (mc_replace_strmem.c:482)
==1324== by 0x48182C: StreamTcpReassembleHandleSegmentUpdateACK (stream-tcp-reassemble.c:1407)
==1324== by 0x481BA6: StreamTcpReassembleHandleSegment (stream-tcp-reassemble.c:1506)
==1324== by 0x47CE06: StreamTcpPacketStateCloseWait (stream-tcp.c:2076)
==1324== by 0x47D42B: StreamTcpPacket (stream-tcp.c:2283)
==1324== by 0x47D548: StreamTcp (stream-tcp.c:2322)
==1324== by 0x46FF42: TmThreadsSlot1 (tm-threads.c:325)
==1324== by 0x5694A03: start_thread (pthread_create.c:300)
==1324== by 0x5DD87BC: clone (clone.S:112)
==1324== Address 0x5c6849b2 is 2 bytes after a block of size 592 alloc'd
==1324== at 0x4C25153: malloc (vg_replace_malloc.c:195)
==1324== by 0x4787E1: StreamMsgAlloc (stream.c:26)
==1324== by 0x463861: PoolInit (util-pool.c:55)
==1324== by 0x478B72: StreamMsgQueuesInit (stream.c:145)
==1324== by 0x47DF4F: StreamTcpReassembleInit (stream-tcp-reassemble.c:116)
==1324== by 0x479142: StreamTcpInitConfig (stream-tcp.c:254)
==1324== by 0x40508C: main (suricata.c:676)
==1324==
==1324== Invalid write of size 1
==1324== at 0x4C2673E: memcpy (mc_replace_strmem.c:482)
==1324== by 0x48182C: StreamTcpReassembleHandleSegmentUpdateACK (stream-tcp-reassemble.c:1407)
==1324== by 0x481BA6: StreamTcpReassembleHandleSegment (stream-tcp-reassemble.c:1506)
==1324== by 0x47CE06: StreamTcpPacketStateCloseWait (stream-tcp.c:2076)
==1324== by 0x47D42B: StreamTcpPacket (stream-tcp.c:2283)
==1324== by 0x47D548: StreamTcp (stream-tcp.c:2322)
==1324== by 0x46FF42: TmThreadsSlot1 (tm-threads.c:325)
==1324== by 0x5694A03: start_thread (pthread_create.c:300)
==1324== by 0x5DD87BC: clone (clone.S:112)
==1324== Address 0x5c6849b3 is 3 bytes after a block of size 592 alloc'd
==1324== at 0x4C25153: malloc (vg_replace_malloc.c:195)
==1324== by 0x4787E1: StreamMsgAlloc (stream.c:26)
==1324== by 0x463861: PoolInit (util-pool.c:55)
==1324== by 0x478B72: StreamMsgQueuesInit (stream.c:145)
==1324== by 0x47DF4F: StreamTcpReassembleInit (stream-tcp-reassemble.c:116)
==1324== by 0x479142: StreamTcpInitConfig (stream-tcp.c:254)
==1324== by 0x40508C: main (suricata.c:676)
==1324==
==1324== Invalid read of size 1
==1324== at 0x4C26720: memcpy (mc_replace_strmem.c:482)
==1324== by 0x48182C: StreamTcpReassembleHandleSegmentUpdateACK (stream-tcp-reassemble.c:1407)
==1324== by 0x481BA6: StreamTcpReassembleHandleSegment (stream-tcp-reassemble.c:1506)
==1324== by 0x47CE06: StreamTcpPacketStateCloseWait (stream-tcp.c:2076)
==1324== by 0x47D42B: StreamTcpPacket (stream-tcp.c:2283)
==1324== by 0x47D548: StreamTcp (stream-tcp.c:2322)
==1324== by 0x46FF42: TmThreadsSlot1 (tm-threads.c:325)
==1324== by 0x5694A03: start_thread (pthread_create.c:300)
==1324== by 0x5DD87BC: clone (clone.S:112)
==1324== Address 0x5cffda7f is 0 bytes after a block of size 65,535 alloc'd
==1324== at 0x4C25153: malloc (vg_replace_malloc.c:195)
==1324== by 0x47DECF: TcpSegmentPoolAlloc (stream-tcp-reassemble.c:69)
==1324== by 0x463861: PoolInit (util-pool.c:55)
==1324== by 0x47DFB0: StreamTcpReassembleInit (stream-tcp-reassemble.c:123)
==1324== by 0x479142: StreamTcpInitConfig (stream-tcp.c:254)
==1324== by 0x40508C: main (suricata.c:676)
==1324==
==1324== Invalid read of size 1
==1324== at 0x4C26727: memcpy (mc_replace_strmem.c:482)
==1324== by 0x48182C: StreamTcpReassembleHandleSegmentUpdateACK (stream-tcp-reassemble.c:1407)
==1324== by 0x481BA6: StreamTcpReassembleHandleSegment (stream-tcp-reassemble.c:1506)
==1324== by 0x47CE06: StreamTcpPacketStateCloseWait (stream-tcp.c:2076)
==1324== by 0x47D42B: StreamTcpPacket (stream-tcp.c:2283)
==1324== by 0x47D548: StreamTcp (stream-tcp.c:2322)
==1324== by 0x46FF42: TmThreadsSlot1 (tm-threads.c:325)
==1324== by 0x5694A03: start_thread (pthread_create.c:300)
==1324== by 0x5DD87BC: clone (clone.S:112)
==1324== Address 0x5cffda80 is 1 bytes after a block of size 65,535 alloc'd
==1324== at 0x4C25153: malloc (vg_replace_malloc.c:195)
==1324== by 0x47DECF: TcpSegmentPoolAlloc (stream-tcp-reassemble.c:69)
==1324== by 0x463861: PoolInit (util-pool.c:55)
==1324== by 0x47DFB0: StreamTcpReassembleInit (stream-tcp-reassemble.c:123)
==1324== by 0x479142: StreamTcpInitConfig (stream-tcp.c:254)
==1324== by 0x40508C: main (suricata.c:676)
==1324==
==1324== Invalid read of size 1
==1324== at 0x4C26730: memcpy (mc_replace_strmem.c:482)
==1324== by 0x48182C: StreamTcpReassembleHandleSegmentUpdateACK (stream-tcp-reassemble.c:1407)
==1324== by 0x481BA6: StreamTcpReassembleHandleSegment (stream-tcp-reassemble.c:1506)
==1324== by 0x47CE06: StreamTcpPacketStateCloseWait (stream-tcp.c:2076)
==1324== by 0x47D42B: StreamTcpPacket (stream-tcp.c:2283)
==1324== by 0x47D548: StreamTcp (stream-tcp.c:2322)
==1324== by 0x46FF42: TmThreadsSlot1 (tm-threads.c:325)
==1324== by 0x5694A03: start_thread (pthread_create.c:300)
==1324== by 0x5DD87BC: clone (clone.S:112)
==1324== Address 0x5cffda81 is 2 bytes after a block of size 65,535 alloc'd
==1324== at 0x4C25153: malloc (vg_replace_malloc.c:195)
==1324== by 0x47DECF: TcpSegmentPoolAlloc (stream-tcp-reassemble.c:69)
==1324== by 0x463861: PoolInit (util-pool.c:55)
==1324== by 0x47DFB0: StreamTcpReassembleInit (stream-tcp-reassemble.c:123)
==1324== by 0x479142: StreamTcpInitConfig (stream-tcp.c:254)
==1324== by 0x40508C: main (suricata.c:676)
==1324==
==1324== Invalid read of size 1
==1324== at 0x4C26739: memcpy (mc_replace_strmem.c:482)
==1324== by 0x48182C: StreamTcpReassembleHandleSegmentUpdateACK (stream-tcp-reassemble.c:1407)
==1324== by 0x481BA6: StreamTcpReassembleHandleSegment (stream-tcp-reassemble.c:1506)
==1324== by 0x47CE06: StreamTcpPacketStateCloseWait (stream-tcp.c:2076)
==1324== by 0x47D42B: StreamTcpPacket (stream-tcp.c:2283)
==1324== by 0x47D548: StreamTcp (stream-tcp.c:2322)
==1324== by 0x46FF42: TmThreadsSlot1 (tm-threads.c:325)
==1324== by 0x5694A03: start_thread (pthread_create.c:300)
==1324== by 0x5DD87BC: clone (clone.S:112)
==1324== Address 0x5cffda82 is 3 bytes after a block of size 65,535 alloc'd
==1324== at 0x4C25153: malloc (vg_replace_malloc.c:195)
==1324== by 0x47DECF: TcpSegmentPoolAlloc (stream-tcp-reassemble.c:69)
==1324== by 0x463861: PoolInit (util-pool.c:55)
==1324== by 0x47DFB0: StreamTcpReassembleInit (stream-tcp-reassemble.c:123)
==1324== by 0x479142: StreamTcpInitConfig (stream-tcp.c:254)
==1324== by 0x40508C: main (suricata.c:676)
==1324==
==1324== Conditional jump or move depends on uninitialised value(s)
==1324== at 0x48188F: StreamTcpReassembleHandleSegmentUpdateACK (stream-tcp-reassemble.c:1418)
==1324== by 0x481BA6: StreamTcpReassembleHandleSegment (stream-tcp-reassemble.c:1506)
==1324== by 0x47CE06: StreamTcpPacketStateCloseWait (stream-tcp.c:2076)
==1324== by 0x47D42B: StreamTcpPacket (stream-tcp.c:2283)
==1324== by 0x47D548: StreamTcp (stream-tcp.c:2322)
==1324== by 0x46FF42: TmThreadsSlot1 (tm-threads.c:325)
==1324== by 0x5694A03: start_thread (pthread_create.c:300)
==1324== by 0x5DD87BC: clone (clone.S:112)
==1324==
==1324== Conditional jump or move depends on uninitialised value(s)
==1324== at 0x47894E: StreamMsgDequeue (stream.c:77)
==1324== by 0x478AB5: StreamMsgGetFromQueue (stream.c:121)
==1324== by 0x481B06: StreamTcpReassembleProcessAppLayer (stream-tcp-reassemble.c:1482)
==1324== by 0x47D4AE: StreamTcpPacket (stream-tcp.c:2304)
==1324== by 0x47D548: StreamTcp (stream-tcp.c:2322)
==1324== by 0x46FF42: TmThreadsSlot1 (tm-threads.c:325)
==1324== by 0x5694A03: start_thread (pthread_create.c:300)
==1324== by 0x5DD87BC: clone (clone.S:112)
==1324==
==1324== Thread 5:
==1324== Conditional jump or move depends on uninitialised value(s)
==1324== at 0x428930: ThresholdHashAdd (detect-engine-threshold.c:193)
==1324== by 0x429115: PacketAlertThreshold (detect-engine-threshold.c:295)
==1324== by 0x4285C2: PacketAlertHandle (detect-engine-threshold.c:58)
==1324== by 0x41B226: SigMatchSignatures (detect.c:885)
==1324== by 0x41B36C: Detect (detect.c:943)
==1324== by 0x46FF42: TmThreadsSlot1 (tm-threads.c:325)
==1324== by 0x5694A03: start_thread (pthread_create.c:300)
==1324== by 0x5DD87BC: clone (clone.S:112)
==1324==
==1324== Conditional jump or move depends on uninitialised value(s)
==1324== at 0x4289C5: ThresholdHashAdd (detect-engine-threshold.c:202)
==1324== by 0x429115: PacketAlertThreshold (detect-engine-threshold.c:295)
==1324== by 0x4285C2: PacketAlertHandle (detect-engine-threshold.c:58)
==1324== by 0x41B226: SigMatchSignatures (detect.c:885)
==1324== by 0x41B36C: Detect (detect.c:943)
==1324== by 0x46FF42: TmThreadsSlot1 (tm-threads.c:325)
==1324== by 0x5694A03: start_thread (pthread_create.c:300)
==1324== by 0x5DD87BC: clone (clone.S:112)
==1324==
--1324-- Reading syms from /lib/libgcc_s.so.1 (0x5fd5f000)
--1324-- Reading debug info from /lib/libgcc_s.so.1 ..
--1324-- .. CRC mismatch (computed f5b57570 wanted af9258d5)
--1324-- object doesn't have a symbol table
--1324-- VALGRIND INTERNAL ERROR: Valgrind received a signal 11 (SIGSEGV) - exiting
--1324-- si_code=80; Faulting address: 0x0; sp: 0x40328fe60

valgrind: the 'impossible' happened:
Killed by fatal signal
==1324== at 0x38036DF5: vgPlain_arena_free (m_mallocfree.c:245)

sched status:
running_tid=1

Thread 1: status = VgTs_Runnable
==1324== at 0x4C24D68: free (vg_replace_malloc.c:325)
==1324== by 0x458F30: B2gDestroyCtx (util-mpm-b2g.c:1012)
==1324== by 0x432350: PatternMatchDestroyGroup (detect-engine-mpm.c:110)
==1324== by 0x4306C9: SigGroupHeadFree (detect-engine-siggroup.c:130)
==1324== by 0x42D548: DetectPortFree (detect-engine-port.c:83)
==1324== by 0x42D6A7: DetectPortCleanupList (detect-engine-port.c:169)
==1324== by 0x42D583: DetectPortFree (detect-engine-port.c:88)
==1324== by 0x42D6A7: DetectPortCleanupList (detect-engine-port.c:169)
==1324== by 0x425A2E: DetectAddressFree (detect-engine-address.c:111)
==1324== by 0x425E4C: DetectAddressCleanupList (detect-engine-address.c:260)
==1324== by 0x428053: DetectAddressHeadCleanup (detect-engine-address.c:1279)
==1324== by 0x42809C: DetectAddressHeadFree (detect-engine-address.c:1296)
==1324== by 0x4259F1: DetectAddressFree (detect-engine-address.c:103)
==1324== by 0x425E4C: DetectAddressCleanupList (detect-engine-address.c:260)
==1324== by 0x428053: DetectAddressHeadCleanup (detect-engine-address.c:1279)
==1324== by 0x42809C: DetectAddressHeadFree (detect-engine-address.c:1296)
==1324== by 0x420C64: SigAddressCleanupStage1 (detect.c:2573)
==1324== by 0x421F8F: SigGroupCleanup (detect.c:2940)
==1324== by 0x405575: main (suricata.c:754)


Note: see also the FAQ in the source distribution.
It contains workarounds to several common problems.
In particular, if Valgrind aborted or crashed after
identifying problems in your program, there's a good chance
that fixing those problems will prevent Valgrind aborting or
crashing, especially if it happened in m_mallocfree.c.

If that doesn't help, please report this bug to: www.valgrind.org

In the bug report, send all the above text, the valgrind
version, and what OS and version you are using. Thanks.

(2-2/3)