Wireshark-bugs: [Wireshark-bugs] [Bug 2017] VoIP trace crashes Wireshark when specific RTP Playe
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2017
------- Comment #5 from stephentfisher@xxxxxxxxx 2007-11-28 07:42 GMT -------
I installed Fedora Core 8 Linux on a Parallels virtual machine on my Mac. Now
I can reproduce the crash! However, it isn't a simple bug so gdb is just
telling me that it ends up crashing in malloc_consolidate. This means that
memory was corrupted at some time before that malloc_consolidate call was
called. I tried to replicate the problem running through Valgrind to no avail
and when linking with electric fence, it just runs out of memory while
launching Wireshark. I did manage to make some progress by setting the
environment variable MALLOC_CHECK_, which does some simple extra checking when
doing malloc and related operations. Running with MALLOC_CHECK_ through gdb
yields some promising results (see below). However, I have run out of time at
the moment to work on this.. hopefully I'll have some time again soon.
(gdb) bt 10
#0 0x00110402 in __kernel_vsyscall ()
#1 0x0466f690 in raise () from /lib/libc.so.6
#2 0x04670f91 in abort () from /ilb/libc.so.6
#3 0x046b3885 in free_check () from /lib/libc.so.6
#4 0x046b3095 in free () from /lib/libc.so.6
#5 0x05b0e811 in g_free () from /lib/libglib-2.0.so.0
#6 0x08124453 in voip_calls_reset (tapinfo=0x8199ea0) at voip_calls.c:187
#7 0x0810eb33 in voip_calls_dlg_reset (ptr=0x0) at voip_calls_dlg.c:895
#8 0x0810ec2a in voip_calls_on_destroy (object=0x9df13a8, user_data=0x0)
at voip_calls_dlg.c:243
#9 0x001f0409 in g_cclosure_marshal_VOID__VOID ()
from /lib/libgobject-2.0.so.0
(More stack frames follow...)
(gdb) frame 6
#6 0x08124453 in voip_calls_reset (tapinfo=0x8199ea0) at voip_calls.c:187
187 g_free((void
*)graph_item->src_addr.data);
(gdb)
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
