Wireshark · Ethereal-users: Re: [ethereal-users] RH6.1 and core dumps.

[Gilbert Ramirez <gram@xxxxxxxxxx>]

On Wed, Jan 05, 2000 at 05:03:48PM -0600, Aaron Bush wrote:
> 
> 
> Guy Harris wrote:
> >
> > > Using RH6.1, patched libpcap (compiled from source tar.gz), ethereal
> > > 0.7.9 and 0.8 (compiled from source tar.gz) work only a small 
> percentage
> > > of the time.  When capturing and selecting the stop button the program
> > > will core dump while loading the captured data.
> >
> > Can you get a stack trace with GDB?
> 
> This was produced with ethereal-0.7.9:
> 
> #0  0x80a79dd in dissect_transact_params (pd=0x81d2150 "", offset=114,
>     fd=0x81a7be0, parent=0x0, tree=0x0, si={tid = 22531, uid = 40961,
>       mid = 6275, pid = 6995, conversation = 0x81c04e0,
>       request_val = 0x81b7d20, unicode = 1}, max_data=64, SMB_offset=58,
>     errcode=0, dirn=0, DataOffset=64, DataCount=0, ParameterOffset=56,
>     ParameterCount=6, TransactName=0x0) at packet-smb.c:9068
> 9068      TransactNameCopy = g_malloc(strlen(TransactName) + 1);
> (gdb)

TransactName is NULL. :(

Thanks for the gdb trace. Can you run gdb again, and type 'bt'?
I'd be interested in knowing which of the two calls to dissect_transact_params()
is passing NULL.

--gilbert