Wireshark-bugs: [Wireshark-bugs] [Bug 13175] Runtime Error when try to merge .pcap files (Wiresh
Date: Sat, 26 Nov 2016 16:12:26 +0000

Comment # 7 on bug 13175 from
You were using Wireshark 2.2.2 x64, right?

If yes, both crashes have the same callstack:

ntdll!ZwWaitForMultipleObjects+0x14
KERNELBASE!WaitForMultipleObjectsEx+0xef
KERNELBASE!WaitForMultipleObjects+0xe
kernel32!BasepReportFault+0x58c
kernel32!BasepReportFault+0xa3
KERNELBASE!UnhandledExceptionFilter+0x23b
msvcrt!abort+0x96
libglib_2_0_0!g_assertion_message+0x155
libglib_2_0_0!g_assertion_message_expr+0x52
libwiretap!merge_files(int out_fd = 0n1000800256, char * out_filename =
0x00000000`00000000 "", int file_type = 0n4096, char ** in_filenames =
0x00000074`d02f9e98, unsigned int in_file_count = 2, int do_append = 0n0,
idb_merge_mode mode = IDB_MERGE_MODE_ALL_SAME (0n1), unsigned int snaplen = 0,
char * app_name = 0x00007ff7`a57b5458 "Wireshark", struct
merge_progress_callback_t * cb = 0x00000074`d02f9e18, int * err =
0x00000074`d02f9e60, char ** err_info = 0x00000074`d02f9e08, unsigned int *
err_fileno = 0x00000074`d02f9e00)+0xcb
[c:\buildbot\wireshark\wireshark-2.2-64\windows-2012r2-x64\build\wiretap\merge.c
@ 988]
Wireshark!cf_merge_files(char ** out_filenamep = 0x00000074`d02f9f90, int
in_file_count = 0n2, char ** in_filenames = 0x00000074`d02f9e98, int file_type
= 0n2, int do_append = 0n0)+0x157
[c:\buildbot\wireshark\wireshark-2.2-64\windows-2012r2-x64\build\file.c @ 1378]
Wireshark!MainWindow::mergeCaptureFile(void)+0x4f6
[c:\buildbot\wireshark\wireshark-2.2-64\windows-2012r2-x64\build\ui\qt\main_window.cpp
@ 1082]
Wireshark!MainWindow::qt_static_metacall(class QObject * _o =
0x0000024b`341b35e0, QMetaObject::Call _c = <Value unavailable error>, int _id
= <Value unavailable error>, void ** _a = 0x00000074`d02fa1f0)+0x7bf
[c:\buildbot\wireshark\wireshark-2.2-64\windows-2012r2-x64\build\cmbuild\ui\qt\moc_main_window.cpp
@ 1477]
Wireshark!MainWindow::qt_metacall(QMetaObject::Call _c = InvokeMetaMethod
(0n0), int _id = 0n88, void ** _a = 0x00000074`d02fa1f0)+0x53
[c:\buildbot\wireshark\wireshark-2.2-64\windows-2012r2-x64\build\cmbuild\ui\qt\moc_main_window.cpp
@ 1842]
Qt5Core!QMetaObject::activate+0x5ff
Qt5Widgets!QAction::activate+0x106
Qt5Widgets!QMenu::actionGeometry+0x448
Qt5Widgets!QMenu::actionGeometry+0x2c6
Qt5Widgets!QMenu::mouseReleaseEvent+0xb9
Qt5Widgets!QWidget::event+0xdc

And in Wireshark 2.2.2 source code, merge.c line 987 (lines seem to be off by
one when calling a sub function) contains:
    g_assert(out_fd > 0);
And line 988 (just in case):
    g_assert(in_file_count > 0);

So out_fd is equal to 0x3BA70000 (which is not a negative number) and
in_file_count is equal to 2...


You are receiving this mail because:
  • You are watching all bug changes.