Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 3578] New: fuzz testing crashes tshark at except.c:258

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3578

           Summary: fuzz testing crashes tshark at except.c:258
           Product: Wireshark
           Version: SVN
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: Major
          Priority: Low
         Component: TShark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: yamisoe@xxxxxxxxx


Created an attachment (id=3183)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=3183)
the fuzzed capture file

Build Information:
TShark 1.3.0 (SVN Rev 28819)

Copyright 1998-2009 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GLib 2.20.1, with libpcap 1.0.0, with libz 1.2.3.3, without POSIX
capabilities, without libpcre, without SMI, without c-ares, without ADNS, with
Lua 5.1, without Python, with GnuTLS 2.4.2, with Gcrypt 1.4.1, without
Kerberos,
without GeoIP.
NOTE: this build doesn't support the "matches" operator for Wireshark filter
syntax.

Running on Linux 2.6.28-11-generic, with libpcap version 1.0.0, GnuTLS 2.4.2,
Gcrypt 1.4.1.

Built using gcc 4.3.3.

--
bt is:

#0  except_pop () at except.c:258
#1  0xb682bd7d in dissect_eth_common (tvb=0x0, pinfo=0x90cf018,
parent_tree=0x90cfa88, 
    fcs_len=-1) at packet-eth.c:345
#2  0xb65ed8b5 in call_dissector_through_handle (handle=0x8b83b00,
tvb=0x90ad6b0, 
    pinfo=0x90cf018, tree=0x90cfa88) at packet.c:406
#3  0xb65ee07e in call_dissector_work (handle=0x8b83b00, tvb=0x90ad6b0, 
    pinfo_arg=0x90cf018, tree=0x90cfa88, add_proto_name=1) at packet.c:497
#4  0xb65ef289 in dissector_try_port_new (sub_dissectors=0x8ba9d10, port=1,
tvb=0x90ad6b0, 
    pinfo=0x90cf018, tree=0x90cfa88, add_proto_name=1) at packet.c:883
#5  0xb65ef2f1 in dissector_try_port (sub_dissectors=0x8ba9d10, port=1,
tvb=0x90ad6b0, 
    pinfo=0x90cf018, tree=0x90cfa88) at packet.c:909
#6  0xb6873758 in dissect_frame (tvb=0x90ad6b0, pinfo=0x90cf018,
parent_tree=0x90cfa88)
    at packet-frame.c:328
#7  0xb65ed8b5 in call_dissector_through_handle (handle=0x8ba9db8,
tvb=0x90ad6b0, 
    pinfo=0x90cf018, tree=0x90cfa88) at packet.c:406
#8  0xb65ee07e in call_dissector_work (handle=0x8ba9db8, tvb=0x90ad6b0, 
    pinfo_arg=0x90cf018, tree=0x90cfa88, add_proto_name=1) at packet.c:497
#9  0xb65ee21a in call_dissector (handle=0x8ba9db8, tvb=0x90ad6b0,
pinfo=0x90cf018, 
    tree=0x90cfa88) at packet.c:1813
#10 0xb65efe5e in dissect_packet (edt=0x90cf010, pseudo_header=0x9089f04,
pd=0x908a2f0 "", 
    fd=0xbf936b04, cinfo=0x0) at packet.c:337
#11 0xb65e5ffe in epan_dissect_run (edt=0x90cf010, pseudo_header=0x9089f04, 
    data=0x908a2f0 "", fd=0xbf936b04, cinfo=0x0) at epan.c:172
#12 0x08066489 in process_packet (cf=0x80784a0, offset=<value optimized out>, 
    whdr=0x9089ef0, pseudo_header=0x9089f04, pd=0x908a2f0 "",
filtering_tap_listeners=0, 
    tap_flags=<value optimized out>) at tshark.c:2474
#13 0x080690e1 in main (argc=3, argv=0xbf936e24) at tshark.c:2252


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.