Ethereal-users: Re: [ethereal-users] reproducable 0.7.6 core dump

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Tue, 26 Oct 1999 15:19:07 -0700 (PDT)
> I'm running ethereal 0.7.6 under Solaris/Sparc - compiled under 2.6,
> running under 2.7[1].  When I try and load a certain snoop capture file, I
> get a core dump in _doprnt from /usr/lib/libc.so.1.  The only odd thing
> about this capture file is that it contains packets with IP protocol 94,
> which are generated by Firewall-1 SecuRemote encapsulation.

I got bitten by this, and checked in a fix; unfortunately, it wasn't
discovered until 0.7.6 went out the door.

Here's a patch:

Index: ipproto.c
===================================================================
RCS file: /usr/local/cvsroot/ethereal/ipproto.c,v
retrieving revision 1.2
retrieving revision 1.3
diff -c -r1.2 -r1.3
*** ipproto.c	1999/10/15 05:30:35	1.2
--- ipproto.c	1999/10/22 08:02:21	1.3
***************
*** 98,104 ****
      struct protoent *pe;
  #endif
  
!     if ((s = val_to_str(proto, ipproto_val, NULL)) != NULL)
  	goto ok;
  
  #ifdef HAVE_GETPROTOBYNUMBER
--- 98,104 ----
      struct protoent *pe;
  #endif
  
!     if ((s = match_strval(proto, ipproto_val)) != NULL)
  	goto ok;
  
  #ifdef HAVE_GETPROTOBYNUMBER