Wireshark · Ethereal-dev: Re: [Ethereal-dev] Ethereal crashes when loading captured file with filter

[Guy Harris <guy@xxxxxxxxxxxx>]

On Dec 15, 2003, at 6:27 AM, Aschenneller, Daniel wrote:

> Program received signal SIGSEGV, Segmentation fault.
> 0x08317629 in alloc_field_info (tree=0x3f, hfindex=392369128, 
> tvb=0x29e3ee69, start=63, length=0xbfff8080) at proto.c:1981
> 1981 fi->start+=(tvb)?TVB_RAW_OFFSET(tvb):0;
> (gdb) backtrace
> #0 0x08317629 in alloc_field_info (tree=0x3f, hfindex=392369128, 
> tvb=0x29e3ee69, start=63, length=0xbfff8080)
> at proto.c:1981
> #1 0x08317587 in proto_tree_add_pi (tree=0x135e6ba8, hfindex=7196, 
> tvb=0x29e3ee69, start=63, length=0xbfff8080, pfi=0xbfff805c) at 
> proto.c:1885
> #2 0x08316a5f in proto_tree_add_string (tree=0x135e6ba8, hfindex=7196, 
> tvb=0x29e3ee69, start=63, length=2,
> value=0xbfffa0f0 
> "\201\212\200\217\201\213P9xYmMCoAUIAAA7PAAAAAgAAR6cAAAAA") at 
> proto.c:1310
> #3 0x08192f23 in dissect_mmse (tvb=0x29e3ee69, pinfo=0xbfffa0f0, 
> tree=0x27) at packet-mmse.c:405

The MMSE dissector is probably overflowing its on-the-stack buffer for 
strings.  I've checked in a change to make it dynamically allocate 
buffers for strings instead.

If you could send a capture that causes the crash, we could test the 
fix (or if you're willing to compile Ethereal from source, we could 
send you a patch).