Wireshark-bugs: [Wireshark-bugs] [Bug 2316] New: Dissector bug, protocol SNMP: proto.c:2983: fai
Date: Fri, 29 Feb 2008 22:12:54 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2316

           Summary: Dissector bug, protocol SNMP: proto.c:2983: failed
                    assertion "(guint)hfindex < gpa_hfinfo.len"
           Product: Wireshark
           Version: 0.99.8
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: TShark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: kabbalah74-unsec@xxxxxxxxx


Build Information:
TShark 0.99.8

Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GLib 2.14.6, with libpcap 0.9.7, with libz 1.2.3, without
libpcre,
with SMI 0.4.5, without ADNS, without Lua, with GnuTLS 1.6.3, with Gcrypt
1.2.4,
with MIT Kerberos.
NOTE: this build doesn't support the "matches" operator for Wireshark filter
syntax.

Running on Linux 2.6.23.14-107.fc8, with libpcap version 0.9.7.

Built using gcc 4.1.2 20070925 (Red Hat 4.1.2-33).

--
I get the above mentioned error every time tshark encounters an SNMP reply that
has OIDs with 64-bit counters in it. Please check with the capture file I
provided, the first packet is the SNMP request, the second one is the reply,
the errors occurs while trying to parse the second packet.
I can reproduce this bug on my Fedora Core 8 i386 32bit linux machine at will,
however a 64bit CentOS 4 linux machine can parse such packets without any
problems.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.