Wireshark · Ethereal-dev: [Ethereal-dev] Buildbot crash output

[Buildbot <buildbot-do-not-reply@xxxxxxxxxxxx>]

Problems have been found with the following capture file(s):

http://www.ethereal.com/distribution/buildbot-builds/randpkt/editcap.4331dd15.pcap


Error information:
Core was generated by `lt-tethereal'.
Program terminated with signal 11, Segmentation fault.
#0  tvb_reported_length (tvb=0x0) at tvbuff.c:688
688		g_assert(tvb->initialized);
#0  tvb_reported_length (tvb=0x0) at tvbuff.c:688
	__PRETTY_FUNCTION__ = "tvb_reported_length"
#1  0x2000000041020fc0 in dissect_spnego_T_responseToken (implicit_tag=6, 
    tvb=0x200000000066d2f0, offset=6, pinfo=0x20000000005f7a10, 
    tree=0x2000000001afd080, hf_index=28043) at packet-spnego.c:403
	responseToken_tvb = (tvbuff_t *) 0x0
#2  0x20000000410210b0 in dissect_responseToken (pinfo=0x20000000005f7a10, 
    tree=0x2000000001afd080, tvb=0x200000000066d2f0, offset=0)
    at packet-spnego.c:413
No locals.
#3  0x20000000409deb60 in dissect_ber_sequence (implicit_tag=79, 
    pinfo=0x20000000005f7a10, parent_tree=0x9fffffffffffbe7c, 
    tvb=0x200000000066d298, offset=5, seq=0x20000000419e2c90, hf_id=-16799, 
    ett_id=-16768) at packet-ber.c:1089
	len = 74
	hoffset = 5
	count = 6
	class = 2 '\002'
	pc = 1
	tag = 2
	eoffset = 79
	class = 0 '\0'
	pc = 1
	ind = 0
	ind_field = 0
	tag = 16
	len = 192
	tree = (proto_tree *) 0x2000000001afd080
	end_offset = 195
	s_offset = 0
	length_remaining = 6
	next_tvb = (tvbuff_t *) 0x200000000066d2f0
#4  0x2000000041021270 in dissect_spnego_NegTokenTarg (implicit_tag=0, 
    tvb=0x200000000066d298, offset=0, pinfo=0x20000000005f7a10, 
    tree=0x2000000001afd0b0, hf_index=28034) at packet-spnego.c:454
No locals.
#5  0x20000000410212d0 in dissect_negTokenTarg (pinfo=0x20000000005f7a10, 
    tree=0x2000000001afd0b0, tvb=0x200000000066d298, offset=0)
    at packet-spnego.c:460
No locals.
#6  0x20000000409e0000 in dissect_ber_choice (pinfo=0x20000000005f7a10, 
    parent_tree=0x2000000001afd0b0, tvb=0x200000000066d240, offset=1100885280, 
    choice=0x20000000419e2d08, hf_id=-1, ett_id=8594, branch_taken=0x0)
    at packet-ber.c:1532
	class = 2 '\002'
	pc = 1
	ind = 0
	tag = 1
	len = 195
	ch = (const ber_choice_t *) 0x20000000419e2d20
	tree = (proto_tree *) 0x2000000001afd0b0
	end_offset = 198
	start_offset = 3
	count = 6
	hoffset = 3
	hfinfo = (header_field_info *) 0x6
	length = 6738584
	length_remaining = 6
	next_tvb = (tvbuff_t *) 0x200000000066d298
	first_pass = 1
#7  0x2000000041021340 in dissect_spnego_NegotiationToken (implicit_tag=0, 
    tvb=0x200000000066d240, offset=0, pinfo=0x20000000005f7a10, 
    tree=0x2000000001afd0b0, hf_index=-1) at packet-spnego.c:478
No locals.
#8  0x20000000410235d0 in dissect_spnego (tvb=0x200000000066d240, 
    pinfo=0x20000000005f7a10, parent_tree=0x2000000001afd050)
    at packet-spnego.c:1447
	offset = 0
	conversation = (conversation_t *) 0x6
#9  0x20000000408850e0 in call_dissector_through_handle (
    handle=0x200000000063fe40, tvb=0x200000000066d240, 
    pinfo=0x20000000005f7a10, tree=0x2000000001afd050) at packet.c:382
	saved_proto = 0x20000000412b3f18 "SPNEGO"
	ret = 6
#10 0x2000000040885ef0 in call_dissector_work (handle=0x200000000063fe40, 
    tvb=0x200000000066d240, pinfo_arg=0x20000000005f7a10, 
    tree=0x2000000001afd050) at packet.c:557
	pinfo = (packet_info * volatile) 0x20000000005f7a10
	saved_proto = 0x2000000041328c38 "GSS-API"
	saved_can_desegment = 0
	ret = 9611535
	save_writable = 0
	save_dl_src = {type = 7637265, len = -262768366, 
  data = 0xf038591400566913 <Address 0xf038591400566913 out of bounds>}
	save_dl_dst = {type = 3688725, len = -266716906, 
  data = 0x70372218001a2917 <Address 0x70372218001a2917 out of bounds>}
	save_net_src = {type = 16517145, len = 1880687130, 
  data = 0x70fbe11b8018f21a <Address 0x70fbe11b8018f21a out of bounds>}
	save_net_dst = {type = 2163921180, len = 1893581085, 
  data = 0x70bfa11f80dcb11e <Address 0x70bfa11f80dcb11e out of bounds>}
	save_src = {type = 1013280, len = 1889632545, 
  data = 0xf0bd6a2300f15522 <Address 0xf0bd6a2300f15522 out of bounds>}
	save_dst = {type = 13841700, len = -257996251, 
  data = 0xf0812a2700b51526 <Address 0xf0812a2700b51526 out of bounds>}
	saved_layer_names_len = 27
	__PRETTY_FUNCTION__ = "call_dissector_work"
#11 0x2000000040888ef0 in call_dissector (handle=0x200000000063fe40, 
    tvb=0x200000000066d240, pinfo=0x20000000005f7a10, tree=0x2000000001afd050)
    at packet.c:1700
	ret = 6
	__PRETTY_FUNCTION__ = "call_dissector"
#12 0x2000000040c75980 in dissect_gssapi_work (tvb=0x200000000066d1e8, 
    pinfo=0x20000000005f7a10, tree=0x2000000001afd020, is_verifier=0)
    at packet-gssapi.c:226
	oid_tvb = (tvbuff_t *) 0x6
	except_sn = {except_down = 0x9fffffffffffc920, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffc310, except_cleanup = 0x9fffffffffffc310}}
	except_ch = {except_id = 0x2000000041328b40, except_size = 1, 
  except_obj = {except_id = {except_group = 2305843010307525440, 
      except_code = 1}, 
    except_message = 0x64656c626173007d <Address 0x64656c626173007d out of bounds>, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, <invalid float value>, 
        <invalid float value>, 0, -2.2181357563247605549440132145046215e+130, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 0, 
        <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 
        <invalid float value>, 0, <invalid float value>}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	item = (proto_item *) 0x2000000001afd050
	subtree = (proto_tree *) 0x2000000001afd050
	return_offset = 0
	value = (gssapi_oid_value *) 0x2000000000636980
	handle = 0x200000000063fe40
	conversation = (conversation_t * volatile) 0x200000000110c848
	len = 6
	offset = 3
	oid_start_offset = 1101767232
	class = 2 '\002'
	pc = 1
	ind_field = 0
	tag = 1
	len1 = 195
	oid = "HÈ\020\001\000\000\000 \001\000\000\000\000\000\000\0001.3.6.1.5.5.2", '\0' <repeats 35 times>, "00\0004", '\0' <repeats 187 times>
	__PRETTY_FUNCTION__ = "dissect_gssapi_work"
#13 0x2000000040c762f0 in dissect_gssapi (tvb=0x200000000066d1e8, 
    pinfo=0x20000000005f7a10, tree=0x2000000001afd020) at packet-gssapi.c:333
No locals.
#14 0x20000000408850e0 in call_dissector_through_handle (
    handle=0x20000000000a9560, tvb=0x200000000066d1e8, 
    pinfo=0x20000000005f7a10, tree=0x2000000001afd020) at packet.c:382
	saved_proto = 0x2000000041328c38 "GSS-API"
	ret = 6
#15 0x2000000040885ef0 in call_dissector_work (handle=0x20000000000a9560, 
    tvb=0x200000000066d1e8, pinfo_arg=0x20000000005f7a10, 
    tree=0x2000000001afd020) at packet.c:557
	pinfo = (packet_info * volatile) 0x20000000005f7a10
	saved_proto = 0x2000000041366f38 "SMB"
	saved_can_desegment = 0
	ret = 1101381472
	save_writable = 2
	save_dl_src = {type = 6257168, len = 536870912, 
  data = 0x65 <Address 0x65 out of bounds>}
	save_dl_dst = {type = 3407997, len = 1802398028, 
  data = 0x504f4f4c617400 <Address 0x504f4f4c617400 out of bounds>}
	save_net_src = {type = 7370095, len = 1818586734, 
  data = 0x6c656e6e00 <Address 0x6c656e6e00 out of bounds>}
	save_net_dst = {type = 1702194273, len = 1701994528, 
  data = 0x303030386e4f6461 <Address 0x303030386e4f6461 out of bounds>}
	save_src = {type = 878981168, len = 537552232, 
  data = 0x3030303820202020 <Address 0x3030303820202020 out of bounds>}
	save_dst = {type = 1684406374, len = -1610612737, 
  data = 0x9fffffffffffc634 "\001"}
	saved_layer_names_len = 19
	__PRETTY_FUNCTION__ = "call_dissector_work"
#16 0x2000000040888ef0 in call_dissector (handle=0x20000000000a9560, 
    tvb=0x200000000066d1e8, pinfo=0x20000000005f7a10, tree=0x2000000001afd020)
    at packet.c:1700
	ret = 6
	__PRETTY_FUNCTION__ = "call_dissector"
#17 0x2000000040fde040 in dissect_session_setup_andx_request (
    tvb=0x200000000066d190, pinfo=0x20000000005f7a10, tree=0x2000000001afca20, 
    offset=59, smb_tree=0x2000000001afc480) at packet-smb.c:5847
	blob_tvb = (tvbuff_t *) 0x200000000066d1e8
	blob_tree = (proto_tree *) 0x2000000001afd020
	blob_item = (proto_item *) 0x6
	wc = 32 ' '
	cmd = 255 'ÿ'
	bc = 271
	andxoffset = 330
	si = (smb_info_t *) 0x2000000041aed430
	an_len = 115
	an = 0xc6 <Address 0xc6 out of bounds>
	dn_len = 0
	dn = 0x2000000001afd020 "PЯ\001"
	pwlen = 0
	sbloblen = 198
	sbloblen_short = 53736
	apwlen = 0
	upwlen = 0
	unicodeflag = 6738408
#18 0x20000000410003e0 in dissect_smb_command (tvb=0x200000000066d190, 
    pinfo=0x20000000005f7a10, offset=32, smb_tree=0x2000000001afc480, 
    cmd=115 's', first_pdu=1) at packet-smb.c:14155
	cmd_item = (proto_item *) 0x2000000001afca20
	cmd_tree = (proto_tree *) 0x6
	dissector = (int (*)(tvbuff_t *, packet_info *, proto_tree *, int, 
    proto_tree *)) 0x4
	si = (smb_info_t *) 0x2000000041aed430
#19 0x2000000041002490 in dissect_smb (tvb=0x200000000066d190, 
    pinfo=0x20000000005f7a10, parent_tree=0x200000000110c848)
    at packet-smb.c:15222
	offset = 32
	tree = (proto_tree *) 0x2000000001afc480
	htree = (proto_tree *) 0x2000000001afc450
	tmp_item = (proto_item *) 0x6
	flags2 = 51207
	si_arr = {{cmd = 0 '\0', tid = 0, pid = 0, uid = 0, mid = 0, 
    unicode = 0, request = 0, unidir = 0, info_level = 0, info_count = 0, 
    sip = 0x0, ct = 0x0}, {cmd = 114 'r', tid = 0, pid = 65279, uid = 0, 
    mid = 0, unicode = 1, request = 0, unidir = 0, info_level = -1, 
    info_count = -1, sip = 0x0, ct = 0x200000000110c940}, {cmd = 115 's', 
    tid = 0, pid = 65279, uid = 2048, mid = 128, unicode = 1, request = 1, 
    unidir = 0, info_level = -1, info_count = -1, sip = 0x200000000110cab8, 
    ct = 0x200000000110c940}, {cmd = 0 '\0', tid = 0, pid = 0, uid = 0, 
    mid = 0, unicode = 0, request = 0, unidir = 0, info_level = 0, 
    info_count = 0, sip = 0x0, ct = 0x0} <repeats 17 times>}
	si_counter = 2
	si = (smb_info_t *) 0x2000000041aed448
	sip = (smb_saved_info_t *) 0x200000000110cab8
	key = {frame = 0, pid_mid = 16}
	new_key = (smb_saved_info_key_t *) 0x6
	nt_status = 0
	errclass = 0 '\0'
	errcode = 0
	pid_mid = 4278124672
	conversation = (conversation_t *) 0x200000000110c848
	t = {secs = 4294967299, nsecs = 330}
	deltat = {secs = 17179869184, nsecs = 1298}
#20 0x2000000041002750 in dissect_smb_heur (tvb=0x200000000066d190, 
    pinfo=0x20000000005f7a10, parent_tree=0x2000000001b0ab70)
    at packet-smb.c:15271
No locals.
#21 0x20000000408884d0 in dissector_try_heuristic (
    sub_dissectors=0x2000000000609100, tvb=0x200000000066d190, 
    pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70) at packet.c:1522
	status = 0
	saved_proto = 0x20000000413cd428 "NBSS"
	entry = (GSList *) 0x2000000000609100
	dtbl_entry = (heur_dtbl_entry_t *) 0x2000000000610440
	saved_can_desegment = 0
	saved_layer_names_len = 15
#22 0x2000000040e70f80 in dissect_netbios_payload (tvb=0x200000000066d190, 
    pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70) at packet-netbios.c:1081
No locals.
#23 0x2000000040e1ccb0 in dissect_nbss_packet (tvb=0x200000000066d138, 
    offset=4, pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70, is_cifs=0)
    at packet-nbns.c:1609
	except_sn = {except_down = 0x9fffffffffffced0, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffc940, except_cleanup = 0x9fffffffffffc940}}
	except_ch = {except_id = 0x20000000413cd920, except_size = 1, 
  except_obj = {except_id = {except_group = 7020655973389855849, 
      except_code = 8245860438737250624}, 
    except_message = 0x20000000400da000 "z¸PÕ", except_dyndata = 0x0}, 
  except_jmp = {{buf = {0, 0, <invalid float value>, <invalid float value>, 0, 
        -inf, <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, 
        -0, 0, <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 
        <invalid float value>, 0, -inf}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	nbss_tree = (proto_tree *) 0x2000000001afc360
	ti = (proto_item *) 0x2000000001afc360
	field_tree = (proto_tree *) 0x0
	msg_type = 0 '\0'
	flags = 0 '\0'
	length = 330
	length_remaining = 0
	len = 0
	name = 0x20000000006fa208 ""
	name_type = -2147483648
	reported_len = 6
	next_tvb = (tvbuff_t *) 0x200000000066d190
	saved_proto = 0x20000000413cd428 "NBSS"
	__PRETTY_FUNCTION__ = "dissect_nbss_packet"
#24 0x2000000040e1d380 in dissect_nbss (tvb=0x200000000066d138, 
    pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70) at packet-nbns.c:1793
	tcpinfo = (struct tcpinfo *) 0x0
	offset = 0
	max_data = 6257176
	msg_type = 0 '\0'
	flags = 0 '\0'
	length = 1101381472
	len = 6
	is_cifs = 0
#25 0x20000000408850e0 in call_dissector_through_handle (
    handle=0x20000000006007c0, tvb=0x200000000066d138, 
    pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70) at packet.c:382
	saved_proto = 0x20000000413cd428 "NBSS"
	ret = 6
#26 0x2000000040885ef0 in call_dissector_work (handle=0x20000000006007c0, 
    tvb=0x200000000066d138, pinfo_arg=0x20000000005f7a10, 
    tree=0x2000000001b0ab70) at packet.c:557
	pinfo = (packet_info * volatile) 0x20000000005f7a10
	saved_proto = 0x20000000414332e8 "TCP"
	saved_can_desegment = 0
	ret = 190
	save_writable = 536870912
	save_dl_src = {type = 538976288, len = 1634890784, 
  data = 0x6f697373696d736e <Address 0x6f697373696d736e out of bounds>}
	save_dl_dst = {type = 1970479214, len = 1701999714, 
  data = 0x2e7344494f2065 <Address 0x2e7344494f2065 out of bounds>}
	save_net_src = {type = 1998614127, len = 1768452969, 
  data = 0x7263206f7420676e <Address 0x7263206f7420676e out of bounds>}
	save_net_dst = {type = 1702125925, len = 1847615776, 
  data = 0x6174736e69207765 <Address 0x6174736e69207765 out of bounds>}
	save_src = {type = 543515502, len = 1629513327, 
  data = 0x202020202020200a <Address 0x202020202020200a out of bounds>}
	save_dst = {type = 538976288, len = 538976288, 
  data = 0x7065636e6f632020 <Address 0x7065636e6f632020 out of bounds>}
	saved_layer_names_len = 10
	__PRETTY_FUNCTION__ = "call_dissector_work"
#27 0x2000000040886880 in dissector_try_port (
    sub_dissectors=0x200000000047e720, port=139, tvb=0x200000000066d138, 
    pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70) at packet.c:832
	dtbl_entry = (dtbl_entry_t *) 0x6
	handle = (struct dissector_handle *) 0x20000000006007c0
	saved_match_port = 6
#28 0x2000000041051a30 in decode_tcp_ports (tvb=0x200000000066d138, offset=20, 
    pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70, src_port=4824, 
    dst_port=4824) at packet-tcp.c:2545
	next_tvb = (tvbuff_t *) 0x200000000066d138
	low_port = 139
	high_port = 4824
#29 0x2000000041051f60 in process_tcp_payload (tvb=0x200000000066d0e0, 
    offset=20, pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70, 
    tcp_tree=0x2000000001b0b170, src_port=4824, dst_port=139, seq=202, 
    nxtseq=536, is_tcp_segment=1) at packet-tcp.c:2592
	except_sn = {except_down = 0x9fffffffffffd8f0, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffcef0, except_cleanup = 0x9fffffffffffcef0}}
	except_ch = {except_id = 0x20000000414ab9e8, except_size = 1, 
  except_obj = {except_id = {except_group = 11529215046068457580, 
      except_code = 1097152689516}, 
    except_message = 0x74657220ffff0208 <Address 0x74657220ffff0208 out of bounds>, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, <invalid float value>, 
        <invalid float value>, 0, -inf, <invalid float value>, 0, 0, 
        <invalid float value>, 0, 0, 0, 0, -0, 0, <invalid float value>, 
        -nan(0x4928824398483892), -inf, <invalid float value>, 0, 
        <invalid float value>, inf, inf, -0, -0, <invalid float value>, 
        <invalid float value>, 0, 0, 0, 0}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	__PRETTY_FUNCTION__ = "process_tcp_payload"
#30 0x2000000041052490 in dissect_tcp_payload (tvb=0x200000000066d0e0, 
    pinfo=0x20000000005f7a10, offset=20, seq=202, nxtseq=536, sport=4824, 
    dport=139, tree=0x2000000001b0ab70, tcp_tree=0x2000000001b0b170)
    at packet-tcp.c:2665
	save_fragmented = 0
#31 0x2000000041054d10 in dissect_tcp (tvb=0x200000000066d0e0, 
    pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70) at packet-tcp.c:3118
	th_sum = 334
	th_urp = 7648
	tcp_tree = (proto_tree *) 0x2000000001b0b170
	field_tree = (proto_tree *) 0x14e
	ti = (proto_item *) 0x2000000001b0b170
	tf = (proto_item *) 0x6
	offset = 20
	flags = "PSH, ACK", '\0' <repeats 55 times>
	fstr = {0x20000000412c8028 "FIN", 0x2000000041434ab0 "SYN", 
  0x200000004143ab98 "RST", 0x20000000414aa308 "PSH", 
  0x20000000412d0338 "ACK", 0x20000000414aa310 "URG", 
  0x2000000041465c10 "ECN", 0x20000000414659a8 "CWR"}
	fpos = 8
	i = 1101864416
	bpos = 1101708712
	optlen = 1101864416
	nxtseq = 536
	reported_len = 354
	cksum_vec = {{ptr = 0x200000000066c81a "CT\017}\200Î\003À\022Ø", 
    len = 4}, {ptr = 0x200000000066c81e "\200Î\003À\022Ø", len = 4}, {
    ptr = 0x9fffffffffffd260 "", len = 4}, {ptr = 0x200000000066c822 "\022Ø", 
    len = 354}}
	phdr = {1644234240, 544370534}
	computed_cksum = 6
	real_window = 15802
	length_remaining = 334
	desegment_ok = 1082968304
	tcpinfo = {seq = 202, nxtseq = 536, is_reassembled = 0, urgent = 0, 
  urgent_pointer = 8224}
	tcphstruct = {{th_seq = 0, th_ack = 0, th_have_seglen = 0, 
    th_seglen = 0, th_win = 0, th_sport = 0, th_dport = 0, th_hlen = 0 '\0', 
    th_flags = 0 '\0', ip_src = {type = AT_NONE, len = 0, data = 0x0}, 
    ip_dst = {type = AT_NONE, len = 0, data = 0x0}}, {th_seq = 0, th_ack = 0, 
    th_have_seglen = 1, th_seglen = 190, th_win = 64031, th_sport = 139, 
    th_dport = 4824, th_hlen = 20 '\024', th_flags = 24 '\030', ip_src = {
      type = AT_IPv4, len = 4, 
      data = 0x200000000066c81a "CT\017}\200Î\003À\022Ø"}, ip_dst = {
      type = AT_IPv4, len = 4, data = 0x200000000066c81e "\200Î\003À\022Ø"}}, {
    th_seq = 202, th_ack = 754, th_have_seglen = 1, th_seglen = 334, 
    th_win = 15802, th_sport = 4824, th_dport = 139, th_hlen = 20 '\024', 
    th_flags = 24 '\030', ip_src = {type = AT_IPv4, len = 4, 
      data = 0x200000000066c81a "CT\017}\200Î\003À\022Ø"}, ip_dst = {
      type = AT_IPv4, len = 4, data = 0x200000000066c81e "\200Î\003À\022Ø"}}, {
    th_seq = 0, th_ack = 0, th_have_seglen = 0, th_seglen = 0, th_win = 0, 
    th_sport = 0, th_dport = 0, th_hlen = 0 '\0', th_flags = 0 '\0', ip_src = {
      type = AT_NONE, len = 0, data = 0x0}, ip_dst = {type = AT_NONE, len = 0, 
      data = 0x0}}}
	tcph = (struct tcpheader *) 0x2000000041aedac0
	tcph_count = 2
	tf_syn = (proto_item *) 0x2000000001afc1b0
	tf_fin = (proto_item *) 0x2000000001afc1e0
	tf_rst = (proto_item *) 0x2000000001afc180
#32 0x20000000408850e0 in call_dissector_through_handle (
    handle=0x200000000064c680, tvb=0x200000000066d0e0, 
    pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70) at packet.c:382
	saved_proto = 0x20000000414332e8 "TCP"
	ret = 6
#33 0x2000000040885ef0 in call_dissector_work (handle=0x200000000064c680, 
    tvb=0x200000000066d0e0, pinfo_arg=0x20000000005f7a10, 
    tree=0x2000000001b0ab70) at packet.c:557
	pinfo = (packet_info * volatile) 0x20000000005f7a10
	saved_proto = 0x2000000041214f68 "IP"
	saved_can_desegment = 0
	ret = 210
	save_writable = 536870912
	save_dl_src = {type = 1635123301, len = 1936029036, 
  data = 0x7461687420666f20 <Address 0x7461687420666f20 out of bounds>}
	save_dl_dst = {type = 1650553888, len = 1931961708, 
  data = 0x202020202020200a <Address 0x202020202020200a out of bounds>}
	save_net_src = {type = 538976288, len = 538976288, 
  data = 0x7065636e6f632020 <Address 0x7065636e6f632020 out of bounds>}
	save_net_dst = {type = 1818326388, len = 2003792416, 
  data = 0x6261206572612073 <Address 0x6261206572612073 out of bounds>}
	save_src = {type = 1948254316, len = 1700929647, 
  data = 0x65696669646f6d20 <Address 0x65696669646f6d20 out of bounds>}
	save_dst = {type = 828793907, len = -1610612737, 
  data = 0x1400000030 <Address 0x1400000030 out of bounds>}
	saved_layer_names_len = 6
	__PRETTY_FUNCTION__ = "call_dissector_work"
#34 0x2000000040886880 in dissector_try_port (
    sub_dissectors=0x20000000000a9ce0, port=6, tvb=0x200000000066d0e0, 
    pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70) at packet.c:832
	dtbl_entry = (dtbl_entry_t *) 0x6
	handle = (struct dissector_handle *) 0x200000000064c680
	saved_match_port = 2048
#35 0x2000000040d353c0 in dissect_ip (tvb=0x200000000066d088, 
    pinfo=0x20000000005f7a10, parent_tree=0x2000000001b0ab70)
    at packet-ip.c:1174
	ip_tree = (proto_tree *) 0x2000000001b0ac60
	field_tree = (proto_tree *) 0x20000000005f7aec
	ti = (proto_item *) 0x2000000001b0ac60
	tf = (proto_item *) 0x6
	addr = 3221474944
	offset = 20
	hlen = 20
	optlen = 6257392
	flags = 0
	nxt = 6 '\006'
	ipsum = 0
	ipfd_head = (fragment_data *) 0x0
	next_tvb = (tvbuff_t *) 0x200000000066d0e0
	update_col_info = 1
	save_fragmented = 0
	eip_arr = {{ip_v_hl = 0 '\0', ip_tos = 0 '\0', ip_len = 0, ip_id = 0, 
    ip_off = 0, ip_ttl = 0 '\0', ip_p = 0 '\0', ip_sum = 0, ip_src = {
      type = AT_NONE, len = 0, data = 0x0}, ip_dst = {type = AT_NONE, len = 0, 
      data = 0x0}}, {ip_v_hl = 69 'E', ip_tos = 0 '\0', ip_len = 230, 
    ip_id = 10420, ip_off = 16384, ip_ttl = 0 '\0', ip_p = 6 '\006', 
    ip_sum = 64766, ip_src = {type = AT_IPv4, len = 4, 
      data = 0x200000000066c81a "CT\017}\200Î\003À\022Ø"}, ip_dst = {
      type = AT_IPv4, len = 4, data = 0x200000000066c81e "\200Î\003À\022Ø"}}, {
    ip_v_hl = 69 'E', ip_tos = 0 '\0', ip_len = 374, ip_id = 62001, 
    ip_off = 16384, ip_ttl = 0 '\0', ip_p = 6 '\006', ip_sum = 15857, 
    ip_src = {type = AT_IPv4, len = 4, 
      data = 0x200000000066c81a "CT\017}\200Î\003À\022Ø"}, ip_dst = {
      type = AT_IPv4, len = 4, data = 0x200000000066c81e "\200Î\003À\022Ø"}}, {
    ip_v_hl = 0 '\0', ip_tos = 0 '\0', ip_len = 0, ip_id = 0, ip_off = 0, 
    ip_ttl = 0 '\0', ip_p = 0 '\0', ip_sum = 0, ip_src = {type = AT_NONE, 
      len = 0, data = 0x0}, ip_dst = {type = AT_NONE, len = 0, data = 0x0}}}
	eip_current = 2
	iph = (e_ip *) 0x2000000041ae5c00
	src_addr = (const guchar *) 0x200000000066d0e0 "\001"
	dst_addr = (const guchar *) 0x200000000066d0e0 "\001"
	src32 = 1129582461
	dst32 = 2160985024
	tree = (proto_tree *) 0x2000000001b0ab70
	item = (proto_item *) 0x6
	checksum_tree = (proto_tree *) 0x20000000005f7aec
#36 0x20000000408850e0 in call_dissector_through_handle (
    handle=0x20000000000a9d00, tvb=0x200000000066d088, 
    pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70) at packet.c:382
	saved_proto = 0x2000000041214f68 "IP"
	ret = 6
#37 0x2000000040885ef0 in call_dissector_work (handle=0x20000000000a9d00, 
    tvb=0x200000000066d088, pinfo_arg=0x20000000005f7a10, 
    tree=0x2000000001b0ab70) at packet.c:557
	pinfo = (packet_info * volatile) 0x20000000005f7a10
	saved_proto = 0x20000000412bc728 "Ethernet"
	saved_can_desegment = 0
	ret = 230
	save_writable = -1673527296
	save_dl_src = {type = 1299185789, len = 1866678857, 
  data = 0x65636e61696c706d <Address 0x65636e61696c706d out of bounds>}
	save_dl_dst = {type = 3435921523, len = 214748364, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	save_net_src = {type = 3368026110, len = -858993460, 
  data = 0x1003a <Address 0x1003a out of bounds>}
	save_net_dst = {type = AT_NONE, len = -1577058288, 
  data = 0x10018 <Address 0x10018 out of bounds>}
	save_src = {type = AT_NONE, len = -1879048192, 
  data = 0xffec <Address 0xffec out of bounds>}
	save_dst = {type = 4294967295, len = 2147483647, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	saved_layer_names_len = 3
	__PRETTY_FUNCTION__ = "call_dissector_work"
#38 0x2000000040886880 in dissector_try_port (
    sub_dissectors=0x20000000000a8e60, port=2048, tvb=0x200000000066d088, 
    pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70) at packet.c:832
	dtbl_entry = (dtbl_entry_t *) 0x6
	handle = (struct dissector_handle *) 0x20000000000a9d00
	saved_match_port = 1
#39 0x2000000040b96d10 in ethertype (etype=2048, tvb=0x200000000066d030, 
    offset_after_etype=14, pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70, 
    fh_tree=0x2000000001b0ab40, etype_id=6447, trailer_id=6449, fcs_len=-1)
    at packet-ethertype.c:187
	except_sn = {except_down = 0x9fffffffffffe1c0, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffd910, except_cleanup = 0x9fffffffffffd910}}
	except_ch = {except_id = 0x20000000412d57c8, except_size = 1, 
  except_obj = {except_id = {except_group = 7309940803695376244, 
      except_code = 7809639177543117101}, 
    except_message = 0x736e6f6974617a69 <Address 0x736e6f6974617a69 out of bounds>, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, <invalid float value>, 
        <invalid float value>, 0, -inf, <invalid float value>, 0, 0, 
        <invalid float value>, 0, 0, 0, 0, -0, 0, <invalid float value>, 
        -nan(0x4928824398483892), -inf, <invalid float value>, 0, 
        <invalid float value>, inf, inf, -0, -0, <invalid float value>, 
        <invalid float value>, 0, 0, 0, 0}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	description = 0x6 <Address 0x6 out of bounds>
	next_tvb = (tvbuff_t *) 0x200000000066d088
	length_before = 374
	dissector_found = 0
	saved_proto = 0x20000000412bc728 "Ethernet"
	__PRETTY_FUNCTION__ = "ethertype"
#40 0x2000000040b928e0 in dissect_eth_common (tvb=0x200000000066d030, 
    pinfo=0x20000000005f7a10, parent_tree=0x2000000001b0ab70, fcs_len=-1)
    at packet-eth.c:311
	ehdr = (eth_hdr * volatile) 0x2000000041ae18b0
	is_802_2 = 1970037110
	fh_tree = (proto_tree * volatile) 0x2000000001b0ab40
	src_addr = (const guint8 *) 0x200000000066c806 ""
	dst_addr = (const guint8 *) 0x200000000066c800 ""
	ehdrs = {{dst = {type = AT_NONE, len = 0, data = 0x0}, src = {
      type = AT_NONE, len = 0, data = 0x0}, type = 0}, {dst = {
      type = AT_ETHER, len = 6, data = 0x200000000066c800 ""}, src = {
      type = AT_ETHER, len = 6, data = 0x200000000066c806 ""}, type = 2048}, {
    dst = {type = AT_ETHER, len = 6, data = 0x200000000066c800 ""}, src = {
      type = AT_ETHER, len = 6, data = 0x200000000066c806 ""}, type = 2048}, {
    dst = {type = AT_NONE, len = 0, data = 0x0}, src = {type = AT_NONE, 
      len = 0, data = 0x0}, type = 0}}
	ehdr_num = 2
	tree = (proto_tree * volatile) 0x2000000001b0ab70
#41 0x2000000040b92c30 in dissect_eth_maybefcs (tvb=0x200000000066d030, 
    pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70) at packet-eth.c:407
No locals.
#42 0x20000000408850e0 in call_dissector_through_handle (
    handle=0x20000000005f8460, tvb=0x200000000066d030, 
    pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70) at packet.c:382
	saved_proto = 0x20000000412bc728 "Ethernet"
	ret = 6
#43 0x2000000040885ef0 in call_dissector_work (handle=0x20000000005f8460, 
    tvb=0x200000000066d030, pinfo_arg=0x20000000005f7a10, 
    tree=0x2000000001b0ab70) at packet.c:557
	pinfo = (packet_info * volatile) 0x20000000005f7a10
	saved_proto = 0x20000000412c6e00 "Frame"
	saved_can_desegment = 0
	ret = 244
	save_writable = 0
	save_dl_src = {type = 538976288, len = 538976288, 
  data = 0x7473655466692020 <Address 0x7473655466692020 out of bounds>}
	save_dl_dst = {type = 1701707776, len = 540876914, 
  data = 0x612d50492d796d27 <Address 0x612d50492d796d27 out of bounds>}
	save_net_src = {type = 1701995620, len = 690451315, 
  data = 0x4c494146203d3d20 <Address 0x4c494146203d3d20 out of bounds>}
	save_net_dst = {type = 4294901760, len = -1610612737, data = 0x0}
	save_src = {type = 943207184, len = 536870912, 
  data = 0x1 <Address 0x1 out of bounds>}
	save_dst = {type = 943207392, len = -1610612737, data = 0x0}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#44 0x2000000040886880 in dissector_try_port (
    sub_dissectors=0x20000000000a9160, port=1, tvb=0x200000000066d030, 
    pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70) at packet.c:832
	dtbl_entry = (dtbl_entry_t *) 0x6
	handle = (struct dissector_handle *) 0x20000000005f8460
	saved_match_port = 0
#45 0x2000000040bd3640 in dissect_frame (tvb=0x200000000066d030, 
    pinfo=0x20000000005f7a10, parent_tree=0x2000000001b0ab70)
    at packet-frame.c:234
	except_sn = {except_down = 0x9fffffffffffe760, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffe1e0, except_cleanup = 0x9fffffffffffe1e0}}
	except_ch = {except_id = 0x20000000412ed5f8, except_size = 1, 
  except_obj = {except_id = {except_group = 2314885530818453536, 
      except_code = 2314885530818453536}, 
    except_message = 0x2020202020202020 <Address 0x2020202020202020 out of bounds>, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, <invalid float value>, 
        <invalid float value>, 0, -inf, <invalid float value>, 0, 0, 
        <invalid float value>, 0, 0, 0, 0, -0, 0, <invalid float value>, 
        -nan(0x4928824398483892), -inf, <invalid float value>, 0, 
        <invalid float value>, inf, inf, -0, -0, <invalid float value>, 
        <invalid float value>, 0, 0, 0, 0}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	fh_tree = (proto_tree *) 0x2000000001b0aae0
	ti = (proto_item * volatile) 0x2000000001b0aa50
	ts = {secs = 0, nsecs = 128469000}
	cap_len = 388
	pkt_len = 388
	tree = (proto_tree *) 0x2000000001b0ab70
	item = (proto_item *) 0x6
#46 0x20000000408850e0 in call_dissector_through_handle (
    handle=0x20000000000a9180, tvb=0x200000000066d030, 
    pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70) at packet.c:382
	saved_proto = 0x20000000412c6e00 "Frame"
	ret = 6
#47 0x2000000040885ef0 in call_dissector_work (handle=0x20000000000a9180, 
    tvb=0x200000000066d030, pinfo_arg=0x20000000005f7a10, 
    tree=0x2000000001b0ab70) at packet.c:557
	pinfo = (packet_info * volatile) 0x20000000005f7a10
	saved_proto = 0x2000000041143540 "<Missing Protocol Name>"
	saved_can_desegment = 0
	ret = 1093353240
	save_writable = 536870912
	save_dl_src = {type = AT_FC, len = 0, 
  data = 0x200000004250a690 "\202á°\001"}
	save_dl_dst = {type = 943207168, len = 0, 
  data = 0x2000000000013a50 "\v\b"}
	save_net_src = {type = 943207296, len = -1610612737, data = 0x0}
	save_net_dst = {type = 1162739795, len = 536891207, 
  data = 0x23 <Address 0x23 out of bounds>}
	save_src = {type = AT_NONE, len = 0, data = 0x0}
	save_dst = {type = 4294960304, len = -1610612737, 
  data = 0x1 <Address 0x1 out of bounds>}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#48 0x2000000040888ef0 in call_dissector (handle=0x20000000000a9180, 
    tvb=0x200000000066d030, pinfo=0x20000000005f7a10, tree=0x2000000001b0ab70)
    at packet.c:1700
	ret = 6
	__PRETTY_FUNCTION__ = "call_dissector"
#49 0x2000000040884cb0 in dissect_packet (edt=0x20000000005f7a00, 
    pseudo_header=0x20000000005f7a10, pd=0x200000000066c800 "", 
    fd=0x9fffffffffffe9e0, cinfo=0x0) at packet.c:321
	except_sn = {except_down = 0x0, except_type = XCEPT_CATCHER, 
  except_info = {except_catcher = 0x9fffffffffffe780, 
    except_cleanup = 0x9fffffffffffe780}}
	except_ch = {except_id = 0x2000000041143730, except_size = 1, 
  except_obj = {except_id = {except_group = 2305843010288328704, 
      except_code = 2305843010288329216}, 
    except_message = 0x20000000400da400 "z¸PÕ", except_dyndata = 0x0}, 
  except_jmp = {{buf = {0, 0, <invalid float value>, <invalid float value>, 0, 
        -inf, <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, 
        -0, 0, <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 
        <invalid float value>, 0, <invalid float value>}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	__PRETTY_FUNCTION__ = "dissect_packet"
#50 0x200000004087ebc0 in epan_dissect_run (edt=0x20000000005f7a00, 
    pseudo_header=0x20000000005f7448, data=0x200000000066c800 "", 
    fd=0x9fffffffffffe9e0, cinfo=0x0) at epan.c:158
No locals.
#51 0x20000000000379d0 in process_packet (cf=0x2000000000090aa8, pdh=0x0, 
    offset=2305843009219951104, whdr=0x20000000005f7428, 
    pseudo_header=0x20000000005f7448, pd=0x200000000066c800 "", 
    err=0x9fffffffffffea50) at tethereal.c:2352
	fdata = {next = 0x0, prev = 0x0, pfd = 0x2000000000635fa0, num = 2, 
  pkt_len = 388, cap_len = 388, cum_bytes = 632, abs_ts = {secs = 1042092400, 
    nsecs = 158905000}, rel_ts = {secs = 0, nsecs = 128469000}, del_ts = {
    secs = 0, nsecs = 128469000}, file_off = 300, lnk_t = 1, flags = {
    passed_dfilter = 0, encoding = 0, visited = 0, marked = 0, ref_time = 0}, 
  color_filter = 0x1000c}
	create_proto_tree = 6257152
	edt = (epan_dissect_t *) 0x20000000005f7a00
	passed = 6
#52 0x2000000000036f20 in load_cap_file (cf=0x2000000000090aa8, save_file=0x0, 
    out_file_type=592640) at tethereal.c:2172
	linktype = 6255656
	snapshot_length = 6255656
	pdh = (wtap_dumper *) 0x0
	err = 1462964150
	err_info = (gchar *) 0x1003e <Address 0x1003e out of bounds>
	data_offset = 300
#53 0x2000000000033ea0 in main (argc=6, argv=0x28) at tethereal.c:1356
	opt = 6
	i = 6
	arg_error = 658440
	gpf_path = 0x0
	pf_path = 0x0
	gdp_path = 0x0
	dp_path = 0x0
	gpf_open_errno = 0
	gpf_read_errno = -2147483648
	pf_open_errno = 0
	pf_read_errno = -2147483648
	gdp_open_errno = 65598
	gdp_read_errno = 0
	dp_open_errno = 65516
	dp_read_errno = 0
	err = 2147483647
	capture_filter_specified = 658448
	if_list = (GList *) 0x20000000006e8168
	if_entry = (GList *) 0x20000000000a0c08
	if_info = (if_info_t *) 0x1
	adapter_index = 1
	p = 0x20000000400d6170 "`å\005"
	err_str = "\000¤\r@\000\000\000 \000¦\r@\000\000\000 \000¨\r@\000\000\000 \000ª\r@\000\000\000 \000¬\r@\000\000\000 \000®\r@\000\000\000 \000°\r@\000\000\000 \000²\r@\000\000\000 \000´\r@\000\000\000 \000¶\r@\000\000\000 \000¸\r@\000\000\000 \000º\r@\000\000\000 \000¼\r@\000\000\000 \000¾\r@\000\000\000 \000à\016@\000\000\000 \000â\016@\000\000\000 \000ä\016@\000\000\000 \000æ\016@\000\000\000 \000\000\000\000\000\000\000\000\026]\001\000\000\000\000\000\000Úø\232\000\000\000\000>\000\001\000\000\000\000\000`êÿÿÿÿÿ\237\025\000\000\000\024\000\000\000\000æ\016@\000\000\000 "...
	cant_get_if_list_errstr = (gchar *) 0x1 <Address 0x1 out of bounds>
	list_link_layer_types = 0
	quiet = 0
	save_file = (gchar *) 0x0
	out_file_type = 2
	cf_name = (
    gchar *) 0x2000000000636c80 "/home/buildbot/ethereal/random/editcap.out"
	rfilter = (gchar *) 0x0
	start_capture = 0
	if_text = (gchar *) 0x6 <Address 0x6 out of bounds>
	lt_list = (GList *) 0x20000000000a0c08
	lt_entry = (GList *) 0x20000000006e8168
	data_link_info = (data_link_info_t *) 0x1
	fcode = {bf_len = 4026531840, bf_insns = 0x10003}
	rfcode = (dfilter_t *) 0x0
	prefs = (e_prefs *) 0x2000000041aefbe8
	__PRETTY_FUNCTION__ = "main"


(no stderr output)


Bug 472 posted.