Ethereal-users: Re: [ethereal-users] Core dump in ethereal 0.7.0

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Thu, 5 Aug 1999 11:25:08 -0500
On Thu, Aug 05, 1999 at 11:07:16AM -0500, Joe Clarke wrote:
> 
> 
> On FreeBSD 3.2-RELEASE, I've just compiled the latest ethereal, and it
> compiled smoothly.  I used the default wiretap build.  It launches
> cleanly, and the capture begins just fine.  However, when I stop the
> capture, and go to Tools->Follow Stream, I get an immediate assertion and
> core dump.  The assertion is:
> 
> ** ERROR **: file dfilter.c: line 270 (check_logical): should not be
> reached
> aborting...
> ()()Abort (core dumped)
> 
> I did some debug with gdb and ddd, and found that it looked like the
> check_logical was being fed a null dnode.  The values for the token were
> astronomically high (which led me to believe somewhere there was a null
> pointer).  This seems to happen only when I follow an anonymous TCP
> stream.  If I follow a TELNET stream, I get an error dialog saying it
> cannot parse the filter string.  Any ideas?  Thanks.

In file.c, on line 82, before the return, can you add this line:

printf("%s\n", buf);

Then run your test again. I want to see what the display filter
the TCP Follow code creates when the code that should not be reached
is reached.

thank,s

--gilbert