Wireshark · Ethereal-dev: [Ethereal-dev] Buildbot crash output

[Buildbot <buildbot-do-not-reply@xxxxxxxxxxxx>]

Problems have been found with the following capture file(s):

http://www.ethereal.com/distribution/buildbot-builds/randpkt/editcap.42f80a24.pcap


Error information:
Core was generated by `lt-tethereal'.
Program terminated with signal 11, Segmentation fault.
#0  dissect_iap_result (tvb=0x20000000005dd8e0, pinfo=0x2000000000585610, 
    root=0x2000000000682ed0) at packet-irda.c:732
732	            iap_conv = iap_conv->pnext;
#0  dissect_iap_result (tvb=0x20000000005dd8e0, pinfo=0x2000000000585610, 
    root=0x2000000000682ed0) at packet-irda.c:732
	offset = 0
	len = 11
	n = 0
	list_len = 0
	op = 4 '\004'
	retcode = 0 '\0'
	type = 79 'O'
	attr_len = 4
	buf = "\b\002ÿÿ\000\000\000\000pÞÿÿÿÿÿ\237\a\000\000\000\000\000\000\0000Ýÿÿÿÿÿ\237", '\0' <repeats 208 times>, "\001\000\000\000\000\000\000\000Ð[h\000\000\000\000 ¶", '\0' <repeats 15 times>, "I P, N(R)=5, N(S)=3\000\000\000\000\000\000\000\000"
	src = 225 'á'
	srcaddr = {type = AT_NONE, len = 1, data = 0x9fffffffffffde10 "á"}
	destaddr = {type = AT_NONE, len = 1, data = 0x20000000005856a8 "à"}
	conv = (conversation_t *) 0x20000000005d7e48
	cur_iap_conv = (iap_conversation_t *) 0x0
	iap_conv = (iap_conversation_t *) 0x726f74617265704f
	num = 68
#1  0x2000000044145140 in dissect_irlmp (tvb=0x20000000005dd8e0, 
    pinfo=0x2000000000585610, root=0x2000000000682ed0) at packet-irda.c:1205
	offset = 2
	dlsap = 25 '\031'
	slsap = 0 '\0'
	cbit = 0 '\0'
	opcode = 0 '\0'
#2  0x2000000044148c70 in dissect_irlap (tvb=0x20000000005dd830, 
    pinfo=0x2000000000585610, root=0x2000000000682ed0) at packet-irda.c:1816
	offset = 2
	a = 224 'à'
	c = 0 '\0'
	is_response = 1
	addr = "0x70\000\000@\234\f"
	ti = (proto_item *) 0x2000000000682f30
	tree = (proto_tree *) 0x2000000000683110
	i_tree = (proto_tree *) 0x0
	saddr = 224
	daddr = 224
	ca = 16 '\020'
#3  0x20000000441495a0 in dissect_irda (tvb=0x20000000005dd830, 
    pinfo=0x2000000000585610, root=0x2000000000682ed0) at packet-irda.c:1933
No locals.
#4  0x200000004082df50 in call_dissector_through_handle (
    handle=0x200000000054efc0, tvb=0x20000000005dd830, 
    pinfo=0x2000000000585610, tree=0x2000000000682ed0) at packet.c:395
	saved_proto = 0x200000004414c330 "IrLAP"
	ret = 6127176
#5  0x200000004082ed60 in call_dissector_work (handle=0x200000000054efc0, 
    tvb=0x20000000005dd830, pinfo_arg=0x2000000000585610, 
    tree=0x2000000000682ed0) at packet.c:570
	pinfo = (packet_info * volatile) 0x2000000000585610
	saved_proto = 0x200000004121dbf8 "Frame"
	saved_can_desegment = 0
	ret = 2
	save_writable = 0
	save_dl_src = {type = 1701707776, len = 540876914, 
  data = 0x612d50492d796d27 <Address 0x612d50492d796d27 out of bounds>}
	save_dl_dst = {type = 1701995620, len = 690451315, 
  data = 0x4c494146203d3d20 <Address 0x4c494146203d3d20 out of bounds>}
	save_net_src = {type = 4294958784, len = -1610612737, data = 0x0}
	save_net_dst = {type = 1111320848, len = 536870912, 
  data = 0x1 <Address 0x1 out of bounds>}
	save_src = {type = 892444672, len = 536870912, 
  data = 0x20000000400da200 "z¸PÕ"}
	save_dst = {type = 892403712, len = 536870912, 
  data = 0x20000000400da600 "z¸PÕ"}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#6  0x200000004082f6f0 in dissector_try_port (
    sub_dissectors=0x20000000000a70a0, port=44, tvb=0x20000000005dd830, 
    pinfo=0x2000000000585610, tree=0x2000000000682ed0) at packet.c:845
	dtbl_entry = (dtbl_entry_t *) 0x20000000005d7e48
	handle = (struct dissector_handle *) 0x200000000054efc0
	saved_match_port = 0
#7  0x2000000040b607b0 in dissect_frame (tvb=0x20000000005dd830, 
    pinfo=0x2000000000585610, parent_tree=0x2000000000682ed0)
    at packet-frame.c:236
	except_sn = {except_down = 0x9fffffffffffe770, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffe1f0, except_cleanup = 0x9fffffffffffe1f0}}
	except_ch = {except_id = 0x2000000041243320, except_size = 1, 
  except_obj = {except_id = {except_group = 1, except_code = 2}, 
    except_message = 0x0, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 0, 
        <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 
        <invalid float value>, 0, -inf}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	fh_tree = (proto_tree *) 0x2000000000682de0
	ti = (proto_item * volatile) 0x2000000000682bd0
	ts = {secs = 12, nsecs = 336369000}
	cap_len = 15
	pkt_len = 15
	tree = (proto_tree *) 0x2000000000682ed0
	item = (proto_item *) 0x20000000005d7e48
#8  0x200000004082df50 in call_dissector_through_handle (
    handle=0x20000000000a70c0, tvb=0x20000000005dd830, 
    pinfo=0x2000000000585610, tree=0x2000000000682ed0) at packet.c:395
	saved_proto = 0x200000004121dbf8 "Frame"
	ret = 6127176
#9  0x200000004082ed60 in call_dissector_work (handle=0x20000000000a70c0, 
    tvb=0x20000000005dd830, pinfo_arg=0x2000000000585610, 
    tree=0x2000000000682ed0) at packet.c:570
	pinfo = (packet_info * volatile) 0x2000000000585610
	saved_proto = 0x200000004109a418 "<Missing Protocol Name>"
	saved_can_desegment = 0
	ret = 2
	save_writable = 536870912
	save_dl_src = {type = 1718558821, len = 1701344288, 
  data = 0x9fffffffffffe4a0 "\b"}
	save_dl_dst = {type = 1769209856, len = 537554543, 
  data = 0x3834363735202020 <Address 0x3834363735202020 out of bounds>}
	save_net_src = {type = 892416049, len = 1667851374, 
  data = 0x3037373133657461 <Address 0x3037373133657461 out of bounds>}
	save_net_dst = {type = 828702880, len = -1610612737, data = 0x0}
	save_src = {type = 1142161416, len = 536870912, 
  data = 0x19 <Address 0x19 out of bounds>}
	save_dst = {type = 4294960320, len = -1610612737, 
  data = 0x1 <Address 0x1 out of bounds>}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#10 0x2000000040831d60 in call_dissector (handle=0x20000000000a70c0, 
    tvb=0x20000000005dd830, pinfo=0x2000000000585610, tree=0x2000000000682ed0)
    at packet.c:1713
	ret = 6127176
	__PRETTY_FUNCTION__ = "call_dissector"
#11 0x200000004082db20 in dissect_packet (edt=0x2000000000585600, 
    pseudo_header=0x2000000000585610, pd=0x20000000005dd000 "à¶\031", 
    fd=0x9fffffffffffe9f0, cinfo=0x0) at packet.c:334
	except_sn = {except_down = 0x0, except_type = XCEPT_CATCHER, 
  except_info = {except_catcher = 0x9fffffffffffe790, 
    except_cleanup = 0x9fffffffffffe790}}
	except_ch = {except_id = 0x200000004109a608, except_size = 1, 
  except_obj = {except_id = {except_group = 0, except_code = 0}, 
    except_message = 0x0, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 0, 
        <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 
        <invalid float value>, 0, 0}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	__PRETTY_FUNCTION__ = "dissect_packet"
#12 0x2000000040827d50 in epan_dissect_run (edt=0x2000000000585600, 
    pseudo_header=0x2000000000584a48, data=0x20000000005dd000 "à¶\031", 
    fd=0x9fffffffffffe9f0, cinfo=0x0) at epan.c:157
No locals.
#13 0x2000000000036de0 in process_packet (cf=0x200000000008fb38, pdh=0x0, 
    offset=2305843009219483136, whdr=0x2000000000584a28, 
    pseudo_header=0x2000000000584a48, pd=0x20000000005dd000 "à¶\031", 
    err=0x9fffffffffffea50) at tethereal.c:2342
	fdata = {next = 0x0, prev = 0x0, pfd = 0x0, num = 68, pkt_len = 15, 
  cap_len = 15, cum_bytes = 1001, rel_secs = 12, rel_usecs = 336369, 
  abs_secs = 1071821562, abs_usecs = 595149, del_secs = 0, del_usecs = 18668, 
  file_off = 3170, lnk_t = 44, flags = {passed_dfilter = 0, encoding = 0, 
    visited = 0, marked = 0, ref_time = 0}, color_filter = 0x9c40000000000000}
	create_proto_tree = 5789184
	edt = (epan_dissect_t *) 0x2000000000585600
	passed = 6127176
#14 0x20000000000362f0 in load_cap_file (cf=0x200000000008fb38, save_file=0x0, 
    out_file_type=588680) at tethereal.c:2155
	linktype = 5786152
	snapshot_length = 5786152
	pdh = (wtap_dumper *) 0x0
	err = 95475217
	err_info = (gchar *) 0x1003e <Address 0x1003e out of bounds>
	data_offset = 3170
#15 0x2000000000033230 in main (argc=6, argv=0x28) at tethereal.c:1338
	opt = 6127176
	i = 6
	arg_error = 654480
	gpf_path = 0x0
	pf_path = 0x0
	gdp_path = 0x0
	dp_path = 0x0
	gpf_open_errno = 0
	gpf_read_errno = -2147483648
	pf_open_errno = 0
	pf_read_errno = -2147483648
	gdp_open_errno = 65598
	gdp_read_errno = 0
	dp_open_errno = 65516
	dp_read_errno = 0
	err = 2147483647
	capture_filter_specified = 654488
	if_list = (GList *) 0x2000000000653ee8
	if_entry = (GList *) 0x200000000009fc90
	if_info = (if_info_t *) 0x1
	adapter_index = 1
	p = 0x20000000400d6170 "\200Ù\005"
	err_str = "\000¤\r@\000\000\000 \000¦\r@\000\000\000 \000¨\r@\000\000\000 \000ª\r@\000\000\000 \000¬\r@\000\000\000 \000®\r@\000\000\000 \000°\r@\000\000\000 \000²\r@\000\000\000 \000´\r@\000\000\000 \000¶\r@\000\000\000 \000¸\r@\000\000\000 \000º\r@\000\000\000 \000¼\r@\000\000\000 \000¾\r@\000\000\000 \000à\016@\000\000\000 \000â\016@\000\000\000 \000ä\016@\000\000\000 \000æ\016@\000\000\000 \000\000\000\000\000\000\000\000\026]\001\000\000\000\000\000\000Úø\232\000\000\000\000>\000\001\000\000\000\000\000`êÿÿÿÿÿ\237\025\000\000\000\024\000\000\000\000æ\016@\000\000\000 "...
	cant_get_if_list_errstr = (gchar *) 0x1 <Address 0x1 out of bounds>
	list_link_layer_types = 0
	quiet = 0
	save_file = (gchar *) 0x0
	out_file_type = 2
	cf_name = (
    gchar *) 0x20000000005f2100 "/home/buildbot/ethereal/random/editcap.out"
	rfilter = (gchar *) 0x0
	start_capture = 0
	if_text = (gchar *) 0x20000000005d7e48 "(\201\203A"
	lt_list = (GList *) 0x200000000009fc90
	lt_entry = (GList *) 0x2000000000653ee8
	data_link_info = (data_link_info_t *) 0x1
	fcode = {bf_len = 4026531840, bf_insns = 0x10003}
	rfcode = (dfilter_t *) 0x0
	prefs = (e_prefs *) 0x20000000419ecce8
	__PRETTY_FUNCTION__ = "main"


(no stderr output)


Bug 335 posted.