Wireshark-bugs: [Wireshark-bugs] [Bug 11740] New: Pointers to deallocated memory when redissecti
Date: Fri, 20 Nov 2015 18:38:40 +0000
Bug ID 11740
Summary Pointers to deallocated memory when redissecting
Product Wireshark
Version 2.0.0
Hardware All
OS All
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter stig@bjorlykke.org

Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
In rescan_packets() when ‘redissect’ we call epan_free() which deallocates
memory in wmem_file_scope.  If having a selected packet (cf->edt) this have an
array of all data blocks allocated with p_get_proto_data(), which sometimes are
using wmem_file_scope.  We will then have an array of pointers to deallocated
memory until the array is rebuilt.

In packet_list_clear() we (may) have code accessing this memory (look in bug
11719 for some discussion about the first attempt to fix this), and this will
give an use-of-deallocated-memory error.


You are receiving this mail because:
  • You are watching all bug changes.