Ethereal-users: [Ethereal-users] 10.0 dumps core on particular packet: XP and FreeBSD 4.9

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "McMahon, Chris" <CMcMahon@xxxxxxxxxxx>
Date: Thu, 18 Dec 2003 11:26:32 -0700

Hello... 
	I'm new to Ethereal, and I have a particular packet on my network
that is unviewable because any attempt to display the entire packet causes
Ethereal to crash.  
	The packet in question is sent to a multicast address with Protocol:
PGM; Info: ODATA sqn 0x718 (or whatever) gsi 000000000000 tsdulen 1400 (or
728 or 724)
	The core dump message in XP is: "file proto.c: line 1668: assertion
failed: ((guint)hfindex < gpa_hfinfo.len) 
	The core dump message in FreeBSD is: "** ERROR **: file proto.c:
line 446 (proto_registrar_get_nth: assertion failed: (hfindex >=0 && (guint)
hfindex < gpa_hfinfo -> len)"
	If I truncate the capture length to 68 bytes, Ethereal will display
those bytes without crashing.  It is the whole packet that causes the
problem.  If there's something illegal about this packet, I would very much
like to know it.  If the problem is with Ethereal, it would be good to find
a workaround.  
	And again, this occurs with Ethereal on both Windows XP and FreeBSD
4.9.   
-Chris