Wireshark · Ethereal-dev: [Ethereal-dev] Buildbot crash output

[Buildbot <buildbot-do-not-reply@xxxxxxxxxxxx>]

Problems have been found with the following capture file(s):

http://www.ethereal.com/distribution/buildbot-builds/randpkt/editcap.42a728e5.pcap


Error information:
Core was generated by `lt-tethereal'.
Program terminated with signal 11, Segmentation fault.
#0  tvb_length_remaining (tvb=0x4100000000, offset=0) at tvbuff.c:583
583		g_assert(tvb->initialized);
#0  tvb_length_remaining (tvb=0x4100000000, offset=0) at tvbuff.c:583
	abs_offset = 0
	abs_length = 2621440000
	__PRETTY_FUNCTION__ = "tvb_length_remaining"
#1  0x2000000040e99aa0 in dissect_tcap_OrigTransactionID (implicit_tag=0, 
    tvb=0x2000000000394608, offset=6, pinfo=0x20000000002e1a10, 
    tree=0x20000000003c9020, hf_index=22333) at packet-tcap.c:1314
	parameter_tvb = (tvbuff_t *) 0x4100000000
	len = 0 '\0'
	i = 8 '\b'
#2  0x2000000040e99c60 in dissect_otid (pinfo=0x20000000002e1a10, 
    tree=0x20000000003c9020, tvb=0x2000000000394608, offset=0)
    at packet-tcap.c:1328
No locals.
#3  0x200000004087fe50 in dissect_ber_sequence (implicit_tag=6, 
    pinfo=0x20000000002e1a10, parent_tree=0x9fffffffffffc96c, 
    tvb=0x20000000003945b0, offset=2, seq=0x200000004168f080, hf_id=-13999, 
    ett_id=1091806960) at packet-ber.c:894
	len = 4
	hoffset = 0
	count = 6
	class = 1 '\001'
	pc = 1
	tag = 8
	eoffset = 6
	class = 0 '\0'
	pc = -2100232192
	ind = 0
	ind_field = 0
	tag = 65516
	len = 65
	tree = (proto_tree *) 0x20000000003c9020
	end_offset = 65
	next_tvb = (tvbuff_t *) 0x2000000000394608
#4  0x2000000040e99d30 in dissect_tcap_Begin (implicit_tag=1, 
    tvb=0x20000000003945b0, offset=0, pinfo=0x20000000002e1a10, 
    tree=0x20000000003c9050, hf_index=22320) at packet-tcap.c:1342
No locals.
#5  0x2000000040e99d90 in dissect_begin_impl (pinfo=0x20000000002e1a10, 
    tree=0x20000000003c9050, tvb=0x20000000003945b0, offset=0)
    at packet-tcap.c:1348
No locals.
#6  0x2000000040880400 in dissect_ber_choice (pinfo=0x20000000002e1a10, 
    parent_tree=0x20000000003c9050, tvb=0x2000000000394558, offset=-13944, 
    choice=0x200000004168fda8, hf_id=-1, ett_id=6368) at packet-ber.c:1053
	class = 1 '\001'
	pc = 1
	ind = 0
	tag = 2
	len = 65
	ch = (const ber_choice_t *) 0x200000004168fda8
	tree = (proto_tree *) 0x20000000003c9050
	end_offset = 67
	start_offset = 2
	count = 6
	hoffset = 2
	hfinfo = (header_field_info *) 0x6
	reported_length = 65
	length = 3753392
#7  0x2000000040e9ca10 in dissect_tcap_MessageType (implicit_tag=0, 
    tvb=0x2000000000394558, offset=0, pinfo=0x20000000002e1a10, 
    tree=0x20000000003c9050, hf_index=-1) at packet-tcap.c:2139
No locals.
#8  0x2000000040e9cbf0 in dissect_tcap (tvb=0x2000000000394558, 
    pinfo=0x20000000002e1a10, parent_tree=0x20000000003926c0)
    at packet-tcap.c:2201
	tree = (proto_tree *) 0x20000000003c9050
#9  0x2000000040747850 in call_dissector_through_handle (
    handle=0x2000000000315380, tvb=0x2000000000394558, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0) at packet.c:395
	saved_proto = 0x200000004122cd80 "TCAP"
	ret = 6
#10 0x2000000040748480 in call_dissector_work (handle=0x2000000000315380, 
    tvb=0x2000000000394558, pinfo_arg=0x20000000002e1a10, 
    tree=0x20000000003926c0) at packet.c:570
	pinfo = (packet_info * volatile) 0x20000000002e1a10
	saved_proto = 0x200000004113b250 "SCCP"
	saved_can_desegment = 0
	ret = 1852138871
	save_writable = 1
	save_dl_src = {type = 1074634752, len = 536870912, 
  data = 0x20000000400da200 "z¸PÕ"}
	save_dl_dst = {type = 1074635776, len = 536870912, 
  data = 0x20000000400da200 "z¸PÕ"}
	save_net_src = {type = 1074635776, len = 536870912, 
  data = 0x20646e6120736575 <Address 0x20646e6120736575 out of bounds>}
	save_net_dst = {type = 1327497327, len = 544425033, 
  data = 0x6974726170206f74 <Address 0x6974726170206f74 out of bounds>}
	save_src = {type = 942765411, len = 1701650546, 
  data = 0x636570732d616964 <Address 0x636570732d616964 out of bounds>}
	save_dst = {type = 1667825769, len = 1112100128, 
  data = 0x2020202020200a73 <Address 0x2020202020200a73 out of bounds>}
	saved_layer_names_len = 21
#11 0x2000000040748e10 in dissector_try_port (
    sub_dissectors=0x20000000001a8cc0, port=6, tvb=0x2000000000394558, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0) at packet.c:845
	dtbl_entry = (dtbl_entry_t *) 0x6
	handle = (struct dissector_handle *) 0x2000000000315380
	saved_match_port = 3
#12 0x2000000040dbbf30 in dissect_sccp_data_param (tvb=0x2000000000394558, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0) at packet-sccp.c:1205
No locals.
#13 0x2000000040dbcb80 in dissect_sccp_parameter (tvb=0x2000000000394348, 
    pinfo=0x20000000002e1a10, sccp_tree=0x2000000000392360, 
    tree=0x20000000003926c0, parameter_type=15 '\017', offset=22, 
    parameter_length=67) at packet-sccp.c:1415
	parameter_tvb = (tvbuff_t *) 0x6
#14 0x2000000040dbcf70 in dissect_sccp_variable_parameter (
    tvb=0x2000000000394348, pinfo=0x20000000002e1a10, 
    sccp_tree=0x2000000000392360, tree=0x20000000003926c0, 
    parameter_type=15 '\017', offset=21) at packet-sccp.c:1502
	parameter_length = 67
	length_length = 1 '\001'
#15 0x2000000040dbdc60 in dissect_sccp_message (tvb=0x2000000000394348, 
    pinfo=0x20000000002e1a10, sccp_tree=0x2000000000392360, 
    tree=0x20000000003926c0) at packet-sccp.c:1712
	message_type = 5 '\005'
	variable_pointer1 = 5
	variable_pointer2 = 8
	variable_pointer3 = 21
	optional_pointer = 0
	offset = 1
#16 0x2000000040dbf2c0 in dissect_sccp (tvb=0x2000000000394348, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0) at packet-sccp.c:1977
	sccp_tree = (proto_tree *) 0x2000000000392360
	mtp3_addr_p = (const mtp3_addr_pc_t *) 0x4100000004
#17 0x2000000040747850 in call_dissector_through_handle (
    handle=0x20000000001a8c80, tvb=0x2000000000394348, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0) at packet.c:395
	saved_proto = 0x200000004113b250 "SCCP"
	ret = 6
#18 0x2000000040748480 in call_dissector_work (handle=0x20000000001a8c80, 
    tvb=0x2000000000394348, pinfo_arg=0x20000000002e1a10, 
    tree=0x20000000003926c0) at packet.c:570
	pinfo = (packet_info * volatile) 0x20000000002e1a10
	saved_proto = 0x200000004113c0c0 "M3UA"
	saved_can_desegment = 0
	ret = 538976266
	save_writable = 1
	save_dl_src = {type = 538976288, len = 538976288, 
  data = 0x6563697665642020 <Address 0x6563697665642020 out of bounds>}
	save_dl_dst = {type = 1074634752, len = 536870912, 
  data = 0x20000000400da200 "z¸PÕ"}
	save_net_src = {type = 1074635776, len = 536870912, 
  data = 0x646e416574616572 <Address 0x646e416574616572 out of bounds>}
	save_net_dst = {type = 959996247, len = 1998597159, 
  data = 0x2073692068636968 <Address 0x2073692068636968 out of bounds>}
	save_src = {type = 829423731, len = 1684367724, 
  data = 0x616d206120796220 <Address 0x616d206120796220 out of bounds>}
	save_dst = {type = 1701249134, len = 1953391981, 
  data = 0x202020202020200a <Address 0x202020202020200a out of bounds>}
	saved_layer_names_len = 16
#19 0x2000000040748e10 in dissector_try_port (
    sub_dissectors=0x20000000000a7fa0, port=3, tvb=0x2000000000394348, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0) at packet.c:845
	dtbl_entry = (dtbl_entry_t *) 0x6
	handle = (struct dissector_handle *) 0x20000000001a8c80
	saved_match_port = 3
#20 0x2000000040c44660 in dissect_protocol_data_parameter (
    parameter_tvb=0x20000000003942f0, pinfo=0x20000000002e1a10, 
    tree=0x20000000003926c0, parameter_tree=0x2000000000392510, 
    parameter_item=0x2000000000392510) at packet-m3ua.c:1120
	ulp_length = 89
	payload_tvb = (tvbuff_t *) 0x2000000000394348
	item = (proto_item *) 0x2000000000394348
#21 0x2000000040c46850 in dissect_parameter (parameter_tvb=0x20000000003942f0, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0, 
    m3ua_tree=0x2000000000393200) at packet-m3ua.c:1789
	tag = 528
	length = 105
	padding_length = 3
	parameter_item = (proto_item *) 0x2000000000392510
	parameter_tree = (proto_tree *) 0x2000000000392510
#22 0x2000000040c46b30 in dissect_parameters (
    parameters_tvb=0x2000000000394240, pinfo=0x20000000002e1a10, 
    tree=0x20000000003926c0, m3ua_tree=0x2000000000393200)
    at packet-m3ua.c:1834
	offset = 8
	length = 6
	total_length = 108
	remaining_length = 108
	parameter_tvb = (tvbuff_t *) 0x6
#23 0x2000000040c46cc0 in dissect_message (message_tvb=0x2000000000394240, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0, 
    m3ua_tree=0x2000000000393200) at packet-m3ua.c:1858
	common_header_tvb = (tvbuff_t *) 0x20000000003941e8
	parameters_tvb = (tvbuff_t *) 0x2000000000394240
#24 0x2000000040c46f20 in dissect_m3ua (message_tvb=0x2000000000394190, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0) at packet-m3ua.c:1895
	m3ua_tree = (proto_tree *) 0x6
#25 0x2000000040747850 in call_dissector_through_handle (
    handle=0x20000000002e8f40, tvb=0x2000000000394190, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0) at packet.c:395
	saved_proto = 0x200000004113c0c0 "M3UA"
	ret = 6
#26 0x2000000040748480 in call_dissector_work (handle=0x20000000002e8f40, 
    tvb=0x2000000000394190, pinfo_arg=0x20000000002e1a10, 
    tree=0x20000000003926c0) at packet.c:570
	pinfo = (packet_info * volatile) 0x20000000002e1a10
	saved_proto = 0x2000000040f74cf8 "SCTP"
	saved_can_desegment = 0
	ret = 0
	save_writable = 0
	save_dl_src = {type = 4275044352, len = -2147483648, 
  data = 0x9fffffffffffcf10 ""}
	save_dl_dst = {type = 2600000000, len = 0, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	save_net_src = {type = AT_NONE, len = -2147483648, 
  data = 0x3536323637320001 <Address 0x3536323637320001 out of bounds>}
	save_net_dst = {type = 875704631, len = -2147483648, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	save_src = {type = 1431634005, len = 1431655765, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	save_dst = {type = 892338226, len = -2147483648, 
  data = 0x313030350001003e <Address 0x313030350001003e out of bounds>}
	saved_layer_names_len = 11
#27 0x2000000040748e10 in dissector_try_port (
    sub_dissectors=0x20000000001a8d60, port=3, tvb=0x2000000000394190, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0) at packet.c:845
	dtbl_entry = (dtbl_entry_t *) 0x6
	handle = (struct dissector_handle *) 0x20000000002e8f40
	saved_match_port = 132
#28 0x2000000040dd4360 in dissect_payload (payload_tvb=0x2000000000394190, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0, ppi=3)
    at packet-sctp.c:1288
	low_port = 3
	high_port = 3
#29 0x2000000040dd4ab0 in dissect_data_chunk (chunk_tvb=0x2000000000394138, 
    chunk_length=140, pinfo=0x20000000002e1a10, tree=0x20000000003926c0, 
    chunk_tree=0x2000000000392fc0, chunk_item=0x2000000000392fc0, 
    flags_item=0x20000000003930b0) at packet-sctp.c:1416
	number_of_ppid = 1098033144
	payload_proto_id = 3
	flags_tree = (proto_tree *) 0x1
	e_bit = 202 'Ê'
	b_bit = 1 '\001'
#30 0x2000000040dd6b10 in dissect_sctp_chunk (chunk_tvb=0x2000000000394138, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0, 
    sctp_tree=0x2000000000392fc0, useinfo=1) at packet-sctp.c:1944
	type = 0 '\0'
	length = 140
	padding_length = 0
	result = 0
	flags_item = (proto_item *) 0x20000000003930b0
	chunk_item = (proto_item *) 0x2000000000392fc0
	chunk_tree = (proto_tree *) 0x2000000000392fc0
	type_tree = (proto_tree *) 0x2000000000392ff0
#31 0x2000000040dd7120 in dissect_sctp_chunks (tvb=0x20000000003940e0, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0, 
    sctp_item=0x2000000000392e40, sctp_tree=0x2000000000392e40, 
    encapsulated=140) at packet-sctp.c:2047
	chunk_tvb = (tvbuff_t *) 0x6
	length = 6
	total_length = 140
	remaining_length = 140
	last_offset = 0
	offset = 12
	sctp_item_length_set = 0
#32 0x2000000040dd7e10 in dissect_sctp_packet (tvb=0x20000000003940e0, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0, encapsulated=0)
    at packet-sctp.c:2177
	checksum = 2905
	calculated_crc32c = 1342292892
	calculated_adler32 = 0
	length = 3747392
	crc32c_correct = 0
	adler32_correct = 0
	sctp_item = (proto_item *) 0x2000000000392e40
	sctp_tree = (proto_tree *) 0x2000000000392e40
#33 0x2000000040dd8110 in dissect_sctp (tvb=0x20000000003940e0, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0) at packet-sctp.c:2216
	number_of_ppid = 1098033144
#34 0x2000000040747850 in call_dissector_through_handle (
    handle=0x20000000002f48a0, tvb=0x20000000003940e0, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0) at packet.c:395
	saved_proto = 0x2000000040f74cf8 "SCTP"
	ret = 6
#35 0x2000000040748480 in call_dissector_work (handle=0x20000000002f48a0, 
    tvb=0x20000000003940e0, pinfo_arg=0x20000000002e1a10, 
    tree=0x20000000003926c0) at packet.c:570
	pinfo = (packet_info * volatile) 0x20000000002e1a10
	saved_proto = 0x2000000040fb3728 "IP"
	saved_can_desegment = 0
	ret = 120
	save_writable = 536870912
	save_dl_src = {type = 874538348, len = 1700929647, 
  data = 0x65696669646f6d20 <Address 0x65696669646f6d20 out of bounds>}
	save_dl_dst = {type = 4294901888, len = -1610612737, 
  data = 0x1400000030 <Address 0x1400000030 out of bounds>}
	save_net_src = {type = 1074718208, len = 536870912, 
  data = 0x6120202020202020 <Address 0x6120202020202020 out of bounds>}
	save_net_dst = {type = 1074718208, len = 536870912, 
  data = 0x6568746568772072 <Address 0x6568746568772072 out of bounds>}
	save_src = {type = 1074659328, len = 536870912, 
  data = 0x326175747065636e <Address 0x326175747065636e out of bounds>}
	save_dst = {type = 909392183, len = -1, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	saved_layer_names_len = 6
#36 0x2000000040748e10 in dissector_try_port (
    sub_dissectors=0x20000000000a7a80, port=132, tvb=0x20000000003940e0, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0) at packet.c:845
	dtbl_entry = (dtbl_entry_t *) 0x6
	handle = (struct dissector_handle *) 0x20000000002f48a0
	saved_match_port = 2048
#37 0x2000000040bb7320 in dissect_ip (tvb=0x2000000000394088, 
    pinfo=0x20000000002e1a10, parent_tree=0x20000000003926c0)
    at packet-ip.c:1133
	ip_tree = (proto_tree *) 0x2000000000392990
	field_tree = (proto_tree *) 0x20000000002e1aec
	ti = (proto_item *) 0x2000000000392990
	tf = (proto_item *) 0x84
	addr = 2652874944
	offset = 20
	hlen = 20
	optlen = 3021552
	flags = 0
	nxt = 132 '\204'
	ipsum = 0
	ipfd_head = (fragment_data *) 0x0
	next_tvb = (tvbuff_t *) 0x20000000003940e0
	update_col_info = 1
	save_fragmented = 0
	eip_arr = {{ip_v_hl = 0 '\0', ip_tos = 0 '\0', ip_len = 0, ip_id = 0, 
    ip_off = 0, ip_ttl = 0 '\0', ip_p = 0 '\0', ip_sum = 0, ip_src = {
      type = AT_NONE, len = 0, data = 0x0}, ip_dst = {type = AT_NONE, len = 0, 
      data = 0x0}}, {ip_v_hl = 69 'E', ip_tos = 16 '\020', ip_len = 140, 
    ip_id = 24747, ip_off = 16384, ip_ttl = 0 '\0', ip_p = 6 '\006', 
    ip_sum = 9287, ip_src = {type = AT_IPv4, len = 4, 
      data = 0x200000000033181a "ˬ\037\231ˬ\037\236\vY\vY"}, ip_dst = {
      type = AT_IPv4, len = 4, data = 0x200000000033181e "ˬ\037\236\vY\vY"}}, 
  {ip_v_hl = 69 'E', ip_tos = 0 '\0', ip_len = 172, ip_id = 0, ip_off = 16384, 
    ip_ttl = 0 '\0', ip_p = 132 '\204', ip_sum = 31046, ip_src = {
      type = AT_IPv4, len = 4, 
      data = 0x200000000033181a "ˬ\037\231ˬ\037\236\vY\vY"}, ip_dst = {
      type = AT_IPv4, len = 4, data = 0x200000000033181e "ˬ\037\236\vY\vY"}}, 
  {ip_v_hl = 0 '\0', ip_tos = 0 '\0', ip_len = 0, ip_id = 0, ip_off = 0, 
    ip_ttl = 0 '\0', ip_p = 0 '\0', ip_sum = 0, ip_src = {type = AT_NONE, 
      len = 0, data = 0x0}, ip_dst = {type = AT_NONE, len = 0, data = 0x0}}}
	eip_current = 2
	iph = (e_ip *) 0x2000000041769b80
	src_addr = (const guchar *) 0x20000000003940e0 "\001"
	dst_addr = (const guchar *) 0x20000000003940e0 "\001"
	src32 = 3232243609
	dst32 = 3232243614
	tree = (proto_tree *) 0x20000000003926c0
	item = (proto_item *) 0x6
#38 0x2000000040747850 in call_dissector_through_handle (
    handle=0x20000000000a7aa0, tvb=0x2000000000394088, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0) at packet.c:395
	saved_proto = 0x2000000040fb3728 "IP"
	ret = 6
#39 0x2000000040748480 in call_dissector_work (handle=0x20000000000a7aa0, 
    tvb=0x2000000000394088, pinfo_arg=0x20000000002e1a10, 
    tree=0x20000000003926c0) at packet.c:570
	pinfo = (packet_info * volatile) 0x20000000002e1a10
	saved_proto = 0x2000000040f84df0 "Ethernet"
	saved_can_desegment = 0
	ret = 140
	save_writable = -1673527296
	save_dl_src = {type = AT_NONE, len = -1879048192, 
  data = 0xffec <Address 0xffec out of bounds>}
	save_dl_dst = {type = 4294967295, len = 2147483647, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	save_net_src = {type = 3291504, len = 536870912, 
  data = 0x18124 <Address 0x18124 out of bounds>}
	save_net_dst = {type = 1129513018, len = 1414547794, 
  data = 0x72000067004e4f49 <Address 0x72000067004e4f49 out of bounds>}
	save_src = {type = 1415839869, len = 1936744818, 
  data = 0x736500 <Address 0x736500 out of bounds>}
	save_dst = {type = AT_NONE, len = 0, 
  data = 0x41af3b7b <Address 0x41af3b7b out of bounds>}
	saved_layer_names_len = 3
#40 0x2000000040748e10 in dissector_try_port (
    sub_dissectors=0x20000000000a6d60, port=2048, tvb=0x2000000000394088, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0) at packet.c:845
	dtbl_entry = (dtbl_entry_t *) 0x6
	handle = (struct dissector_handle *) 0x20000000000a7aa0
	saved_match_port = 1
#41 0x2000000040a26920 in ethertype (etype=2048, tvb=0x2000000000394030, 
    offset_after_etype=14, pinfo=0x20000000002e1a10, tree=0x20000000003926c0, 
    fh_tree=0x2000000000392870, etype_id=5743, trailer_id=5745, fcs_len=-1)
    at packet-ethertype.c:186
	except_sn = {except_down = 0x9fffffffffffe200, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffd970, except_cleanup = 0x9fffffffffffd970}}
	except_ch = {except_id = 0x200000004106d370, except_size = 1, 
  except_obj = {except_id = {except_group = 7021802451748087892, 
      except_code = 7954890900032266352}, 
    except_message = 0x74206e6568772074 <Address 0x74206e6568772074 out of bounds>, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, <invalid float value>, 
        <invalid float value>, 0, -inf, <invalid float value>, 0, 0, 
        <invalid float value>, 0, 0, 0, 0, -0, 0, <invalid float value>, 
        -nan(0x4928824398483892), -inf, <invalid float value>, 0, 
        <invalid float value>, inf, inf, -0, -0, <invalid float value>, 
        <invalid float value>, 0, 0, 0, 0}}}}
	exc = (except_t *) 0x200000004172a7f8
	catch_spec = {{except_group = 1, except_code = 0}}
	description = 0x6 <Address 0x6 out of bounds>
	next_tvb = (tvbuff_t *) 0x2000000000394088
	length_before = 172
	dissector_found = 0
	saved_proto = 0x2000000040f84df0 "Ethernet"
#42 0x2000000040a22500 in dissect_eth_common (tvb=0x2000000000394030, 
    pinfo=0x20000000002e1a10, parent_tree=0x20000000003926c0, fcs_len=-1)
    at packet-eth.c:311
	ehdr = (eth_hdr * volatile) 0x2000000041765738
	is_802_2 = 1734439968
	fh_tree = (proto_tree * volatile) 0x2000000000392870
	src_addr = 0x2000000000331806 ""
	dst_addr = 0x2000000000331800 ""
	ehdrs = {{dst = {type = AT_NONE, len = 0, data = 0x0}, src = {
      type = AT_NONE, len = 0, data = 0x0}, type = 0}, {dst = {
      type = AT_ETHER, len = 6, data = 0x2000000000331800 ""}, src = {
      type = AT_ETHER, len = 6, data = 0x2000000000331806 ""}, type = 2048}, {
    dst = {type = AT_ETHER, len = 6, data = 0x2000000000331800 ""}, src = {
      type = AT_ETHER, len = 6, data = 0x2000000000331806 ""}, type = 2048}, {
    dst = {type = AT_NONE, len = 0, data = 0x0}, src = {type = AT_NONE, 
      len = 0, data = 0x0}, type = 0}}
	ehdr_num = 2
	tree = (proto_tree * volatile) 0x20000000003926c0
#43 0x2000000040a22850 in dissect_eth_maybefcs (tvb=0x2000000000394030, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0) at packet-eth.c:407
No locals.
#44 0x2000000040747850 in call_dissector_through_handle (
    handle=0x200000000027db00, tvb=0x2000000000394030, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0) at packet.c:395
	saved_proto = 0x2000000040f84df0 "Ethernet"
	ret = 6
#45 0x2000000040748480 in call_dissector_work (handle=0x200000000027db00, 
    tvb=0x2000000000394030, pinfo_arg=0x20000000002e1a10, 
    tree=0x20000000003926c0) at packet.c:570
	pinfo = (packet_info * volatile) 0x20000000002e1a10
	saved_proto = 0x20000000410602d8 "Frame"
	saved_can_desegment = 0
	ret = 154
	save_writable = 0
	save_dl_src = {type = 4294958816, len = -1610612737, data = 0x0}
	save_dl_dst = {type = 1108732176, len = 536870912, 
  data = 0x1 <Address 0x1 out of bounds>}
	save_net_src = {type = 4294959041, len = -1610612737, 
  data = 0x3 <Address 0x3 out of bounds>}
	save_net_dst = {type = 1074634752, len = 536870912, 
  data = 0x20000000400da200 "z¸PÕ"}
	save_src = {type = 909652224, len = 536870912, 
  data = 0x20000000400da600 "z¸PÕ"}
	save_dst = {type = 909652224, len = 536870912, 
  data = 0x20000000400daa00 "z¸PÕ"}
	saved_layer_names_len = 0
#46 0x2000000040748e10 in dissector_try_port (
    sub_dissectors=0x20000000000a7040, port=1, tvb=0x2000000000394030, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0) at packet.c:845
	dtbl_entry = (dtbl_entry_t *) 0x6
	handle = (struct dissector_handle *) 0x200000000027db00
	saved_match_port = 0
#47 0x2000000040a60450 in dissect_frame (tvb=0x2000000000394030, 
    pinfo=0x20000000002e1a10, parent_tree=0x20000000003926c0)
    at packet-frame.c:222
	except_sn = {except_down = 0x9fffffffffffe790, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffe220, except_cleanup = 0x9fffffffffffe220}}
	except_ch = {except_id = 0x2000000041083aa0, except_size = 1, 
  except_obj = {except_id = {except_group = 2305843010288328704, 
      except_code = 2305843010288329216}, 
    except_message = 0x20000000400da400 "z¸PÕ", except_dyndata = 0x0}, 
  except_jmp = {{buf = {0, 0, <invalid float value>, <invalid float value>, 0, 
        -inf, <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, 
        -0, 0, <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 
        <invalid float value>, 0, <invalid float value>}}}}
	exc = (except_t *) 0x4100000004
	catch_spec = {{except_group = 1, except_code = 0}}
	fh_tree = (proto_tree *) 0x2000000000392690
	ti = (proto_item * volatile) 0x2000000000392840
	ts = {secs = 0, nsecs = 1271000}
	cap_len = 186
	pkt_len = 186
	tree = (proto_tree *) 0x20000000003926c0
	item = (proto_item *) 0x6
#48 0x2000000040747850 in call_dissector_through_handle (
    handle=0x20000000000a7060, tvb=0x2000000000394030, 
    pinfo=0x20000000002e1a10, tree=0x20000000003926c0) at packet.c:395
	saved_proto = 0x20000000410602d8 "Frame"
	ret = 6
#49 0x2000000040748480 in call_dissector_work (handle=0x20000000000a7060, 
    tvb=0x2000000000394030, pinfo_arg=0x20000000002e1a10, 
    tree=0x20000000003926c0) at packet.c:570
	pinfo = (packet_info * volatile) 0x20000000002e1a10
	saved_proto = 0x2000000040f74f28 "<Missing Protocol Name>"
	saved_can_desegment = 0
	ret = 154
	save_writable = 536870912
	save_dl_src = {type = 1769209856, len = 537554543, 
  data = 0x3039363120202020 <Address 0x3039363120202020 out of bounds>}
	save_dl_dst = {type = 808464440, len = 1667851374, 
  data = 0x6168742073657461 <Address 0x6168742073657461 out of bounds>}
	save_net_src = {type = 909652416, len = -1610612737, data = 0x0}
	save_net_dst = {type = 1090846888, len = 536870912, 
  data = 0x6 <Address 0x6 out of bounds>}
	save_src = {type = AT_NONE, len = 0, data = 0x0}
	save_dst = {type = AT_NONE, len = 0, data = 0x0}
	saved_layer_names_len = 0
#50 0x200000004074b480 in call_dissector (handle=0x20000000000a7060, 
    tvb=0x2000000000394030, pinfo=0x20000000002e1a10, tree=0x20000000003926c0)
    at packet.c:1713
	ret = 6
	__PRETTY_FUNCTION__ = "call_dissector"
#51 0x2000000040747510 in dissect_packet (edt=0x20000000002e1a00, 
    pseudo_header=0x20000000002e0e48, pd=0x2000000000331800 "", 
    fd=0x9fffffffffffea10, cinfo=0x0) at packet.c:334
	except_sn = {except_down = 0x0, except_type = XCEPT_CATCHER, 
  except_info = {except_catcher = 0x9fffffffffffe7b0, 
    except_cleanup = 0x9fffffffffffe7b0}}
	except_ch = {except_id = 0x2000000040f750f8, except_size = 1, 
  except_obj = {except_id = {except_group = 2305843010288328704, 
      except_code = 2305843010288329216}, 
    except_message = 0x20000000400da400 "z¸PÕ", except_dyndata = 0x0}, 
  except_jmp = {{buf = {0, 0, <invalid float value>, <invalid float value>, 0, 
        -inf, <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, 
        -0, 0, <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 
        <invalid float value>, 0, <invalid float value>}}}}
	exc = (except_t *) 0x200000004172a7f8
	catch_spec = {{except_group = 1, except_code = 0}}
	__PRETTY_FUNCTION__ = "dissect_packet"
#52 0x2000000040741b10 in epan_dissect_run (edt=0x20000000002e1a00, 
    pseudo_header=0x20000000002e0e48, data=0x2000000000331800 "", 
    fd=0x9fffffffffffea10, cinfo=0x0) at epan.c:153
No locals.
#53 0x2000000000036da0 in process_packet (cf=0x200000000008fa78, pdh=0x0, 
    offset=2305843009216715264, whdr=0x20000000002e0e28, 
    pseudo_header=0x20000000002e0e48, pd=0x2000000000331800 "", 
    err=0x9fffffffffffea70) at tethereal.c:2338
	fdata = {next = 0x0, prev = 0x0, pfd = 0x0, num = 2, pkt_len = 186, 
  cap_len = 186, cum_bytes = 340, rel_secs = 0, rel_usecs = 1271, 
  abs_secs = 1080226902, abs_usecs = 18179, del_secs = 0, del_usecs = 1271, 
  file_off = 210, lnk_t = 1, flags = {passed_dfilter = 0, encoding = 0, 
    visited = 0, marked = 0, ref_time = 0}, color_filter = 0x9c40000000000000}
	create_proto_tree = 3021312
	edt = (epan_dissect_t *) 0x20000000002e1a00
	passed = 6
#54 0x20000000000362b0 in load_cap_file (cf=0x200000000008fa78, save_file=0x0, 
    out_file_type=588488) at tethereal.c:2151
	linktype = 3018280
	snapshot_length = 3018280
	pdh = (wtap_dumper *) 0x0
	err = -132746816
	err_info = (gchar *) 0x1003e <Address 0x1003e out of bounds>
	data_offset = 210
#55 0x20000000000331f0 in main (argc=6, argv=0x28) at tethereal.c:1334
	opt = 6
	i = 6
	arg_error = 654288
	gpf_path = 0x0
	pf_path = 0x0
	gdp_path = 0x0
	dp_path = 0x0
	gpf_open_errno = 0
	gpf_read_errno = -2147483648
	pf_open_errno = 0
	pf_read_errno = -2147483648
	gdp_open_errno = 65598
	gdp_read_errno = 0
	dp_open_errno = 65516
	dp_read_errno = 0
	err = 2147483647
	capture_filter_specified = 654296
	if_list = (GList *) 0x20000000003669a8
	if_entry = (GList *) 0x200000000009fbd0
	if_info = (if_info_t *) 0x1
	adapter_index = 1
	p = 0x20000000400d6170 "@Ù\005"
	err_str = "\000¤\r@\000\000\000 \000¦\r@\000\000\000 \000¨\r@\000\000\000 \000ª\r@\000\000\000 \000¬\r@\000\000\000 \000®\r@\000\000\000 \000°\r@\000\000\000 \000²\r@\000\000\000 \000´\r@\000\000\000 \000¶\r@\000\000\000 \000¸\r@\000\000\000 \000º\r@\000\000\000 \000¼\r@\000\000\000 \000¾\r@\000\000\000 \000à\016@\000\000\000 \000â\016@\000\000\000 \000ä\016@\000\000\000 \000æ\016@\000\000\000 \000\000\000\000\000\000\000\000\026]\001\000\000\000\000\000\000Úø\232\000\000\000\000>\000\001\000\000\000\000\000\200êÿÿÿÿÿ\237\025\000\000\000\024\000\000\000\000æ\016@\000\000\000 "...
	cant_get_if_list_errstr = (gchar *) 0x1 <Address 0x1 out of bounds>
	list_link_layer_types = 0
	quiet = 0
	save_file = (gchar *) 0x0
	out_file_type = 2
	cf_name = (
    gchar *) 0x2000000000366840 "/home/buildbot/ethereal/random/editcap.out"
	rfilter = (gchar *) 0x0
	start_capture = 0
	if_text = (gchar *) 0x6 <Address 0x6 out of bounds>
	lt_list = (GList *) 0x200000000009fbd0
	lt_entry = (GList *) 0x20000000003669a8
	data_link_info = (data_link_info_t *) 0x1
	fcode = {bf_len = 4026531840, bf_insns = 0x10003}
	rfcode = (dfilter_t *) 0x0
	prefs = (e_prefs *) 0x20000000417743c0
	__PRETTY_FUNCTION__ = "main"


(no stderr output)


Bug 235 posted.