Ethereal-dev: Re: [Ethereal-dev] Double-free tvb bug in HTTP dissector with gzi p decompressio

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jerry Talkington <jtalkington@xxxxxxxxxxxxxxxxxxxxx>
Date: Fri, 7 May 2004 05:37:42 -0700
On Fri, May 07, 2004 at 01:22:32PM +0200, Biot Olivier wrote:
> |-----Original Message-----
> |From: Jerry Talkington
> |
> |On Thu, May 06, 2004 at 11:51:36PM +0200, Olivier Biot wrote:
> |>
> |> Hi list,
> |> 
> |> If you open the attached capture with Ethereal, you can 
> |freely inspect
> |> it and see the dissected decompression. However, if you enter a
> |> display filter like "http" which matches the packet, Ethereal will
> |> crash in epan_dissect_free() at the very end of having filtered all
> |> packets (I tested this with a 9 MB capture). The crash does 
> |not happen
> |> if you disable the HTTP dissector.
> | 
> |Hmm, I wasn't able to get a crash on my Mac, but I was on my Linux box.
> |However, I didn't like the gtk2 interface, so I made distclean, reran
> |autogen.sh, configured and ran make, and the crash doesn't happen
> |anymore.
> |
> |I reran autogen.sh, configured with gtk2 again, and the crash still
> |doesn't appear.  Try rerunning autogen.sh.  In the meantime, I'll try
> |setting up a build environment on a Windows machine.
> 
> I can only say that the bug is still present, even after a thorough
> distclean and a complete remake of ethereal on cygwin.
> 
> This is wat I did:
> 
> # Remake the makefiles so make distclean doesn't remake the makefiles
> individually
> $ ./config.status
> $ make distclean
> # Refresh the checked out tree [status of ~5 hours ago]
> $ cvs -z9 update -Pd
> $ ./autogen.sh
> $ ./configure --with-extra-gcc-checks --enable-gtk2
> $ make
> 
> 3 hours later the compilation terminated on my laptop. I then open a debug
> session with the capture file I previously sent to the list:

Ok, I'm able to reproduce this.  If you have gzip enabled, but don't
have desegmentation enabled for HTTP or TCP, then the crash occurs.
I'll fix this tonight after work.

-- 
GPG public key:
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x9D5B8762