Wireshark · Ethereal-dev: Re: [ethereal-dev] ethereal core-dump

[Gilbert Ramirez <gram@xxxxxxxxxx>]

On Fri, Sep 22, 2000 at 09:28:53AM -0500, Stuart Kemp wrote:
> Linux 2.2.14-15mdksmp
> GTK version 1.2.6
> ethereal 0.8.12, with GTK+ 1.2.6, with libpcap 0.4, with libz 1.1.3,
> without SNMP
> 
> Run as:  ./ethereal
>         Capturing with filter "not host XXXX"
> 
> 
> #0  tvb_decrement_usage_count (tvb=0x0, count=1) at tvbuff.c:250
> 250             if (tvb->usage_count <= count) {
> (gdb) p tvb
> $1 = (tvbuff_t *) 0x0
> (gdb) bt
> #0  tvb_decrement_usage_count (tvb=0x0, count=1) at tvbuff.c:250
> #1  0x80fbcfe in tvb_free (tvb=0x826fda8) at tvbuff.c:209
> #2  0x80fbc9e in tvb_free_void (tvb=0x826fda8) at tvbuff.c:186
> #3  0x80f0c4b in do_throw (except=0xbfffd3dc) at except.c:185
> #4  0x80f0e87 in except_throw (except_group=1, except_code=2, 
>     msg=0x819a320 "XCEPT_GROUP_ETHEREAL") at except.c:269
> #5  0x80fc188 in check_offset_length (tvb=0x826fd78, offset=14,
> length=160, 
>     offset_ptr=0x826fdbc, length_ptr=0x826fdc0) at tvbuff.c:428
> #6  0x80fc257 in tvb_set_subset (tvb=0x826fda8, backing=0x826fd78, 
>     backing_offset=14, backing_length=160, reported_length=160) at
> tvbuff.c:450
> #7  0x80fc2f4 in tvb_new_subset (backing=0x826fd78, backing_offset=14, 
>     backing_length=160, reported_length=160) at tvbuff.c:484
> #8  0x807be1a in dissect_eth (tvb=0x826fd78, pinfo=0x81ea3e0, tree=0x0)
>     at packet-eth.c:271

Thanks. Yeah, unfortunately this bug made it into 0.8.12 as was found
just after 0.8.12 was released. The patch is at:

http://ethereal.zing.org/lists/ethereal-dev/200009/msg00122.html

The bug is triggered if a bad ethernet frame is seen. If this bug
report becomes more common, I'll release a 0.8.13 soon.

--gilbert