In frame 6 errstr looks wrong. But I don't see how asn1_err_to_str
could return a bad value, unless ep_strdup returned a bad value.
Not related directly, but.... I'm not familiar with this dissector,
but I'm wondering why there is a "g_free(msgflags)" on line 1982 of
packet-snmp.c, but none before the similar "return" on line 1977.
--gilbert
On 3/10/06, Jaap Keuter <jaap.keuter@xxxxxxxxx> wrote:
> Hi List,
>
> This one seems odd. In record #4 the variable 'ap' (va_list) seems strange,
> but the code there is simple and looks oke. The rest of the stackdump
> seems to suggest that the strings referenced by the format string and
> passed via 'ap' aren't oke. I can't reproduce this with SVN Rev 17556 on
> Debian GNU/Linux anyway.
>
> On another note. Shouldn't the dissector call dissect_snmp_error()
> here since ret == ASN1_ERR_NOERROR.
>
> Thanx,
> Jaap
>
>
> On Thu, 9 Mar 2006, Buildbot wrote:
>
> > Problems have been found with the following capture file(s):
> >
> > http://www.ethereal.com/distribution/buildbot-builds/randpkt/editcap.441096b6.pcap
> >
> >
> > Error information:
> > Core was generated by `lt-tethereal'.
> > Program terminated with signal 11, Segmentation fault.
> > #0 0x2000000042b053e1 in strlen () from /lib/libc.so.5
> > #0 0x2000000042b053e1 in strlen () from /lib/libc.so.5
> > No symbol table info available.
> > #1 0x2000000042afb5c0 in __vfprintf () from /lib/libc.so.5
> > No symbol table info available.
> > #2 0x2000000042a27bf0 in vsnprintf () from /lib/libc.so.5
> > No symbol table info available.
> > #3 0x20000000423a1d60 in g_vsnprintf ()
> > from /usr/local/lib/libglib-2.0.so.400
> > No symbol table info available.
> > #4 0x2000000040ac3ab0 in proto_tree_set_representation (
> > pi=0x200000000070c6a8,
> > format=0x2000000041902e58 "ERROR: Couldn't parse %s: %s",
> > ap=0x9fffffffffffcef8) at proto.c:2934
> > fi = (field_info *) 0x200000000070c690
> > #5 0x2000000040ab8bd0 in proto_tree_add_text (tree=0x200000000070a3f0,
> > tvb=0x20000000006a0938, start=21, length=0,
> > format=0x2000000041902e58 "ERROR: Couldn't parse %s: %s") at proto.c:677
> > pi = (proto_item *) 0x200000000070a3f0
> > #6 0x20000000413a9990 in dissect_snmp_parse_error (tvb=0x20000000006a0938,
> > offset=21, pinfo=0x20000000005adc10, tree=0x200000000070b140,
> > field_name=0x20000000419032b0 "message flags wrong length", ret=5954584)
> > at packet-snmp.c:697
> > errstr = 0x45278298 <Address 0x45278298 out of bounds>
> > .......
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>
>
