Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 3441] New: Wireshark crash with SIGSEGV when trying to drill down to a huge (~

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3441

           Summary: Wireshark crash with SIGSEGV when trying to drill down
                    to a huge (~400K) LDAP request
           Product: Wireshark
           Version: SVN
          Platform: x86
        OS/Version: Ubuntu
            Status: NEW
          Severity: Major
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: mat@xxxxxxxxx


Build Information:
wireshark 1.1.3-SVN-27393

Copyright 1998-2009 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.14.4, with GLib 2.18.2, with libpcap 0.9.8, with libz
1.2.3.3, with POSIX capabilities (Linux), with libpcre 7.8, without SMI,
without
c-ares, with ADNS, without Lua, with GnuTLS 2.4.1, with Gcrypt 1.4.1, with MIT
Kerberos, without GeoIP, with PortAudio V19-devel (built Mar 12 2008), without
AirPcap.

Running on Linux 2.6.27-11-generic, with libpcap version 0.9.8, GnuTLS 2.4.1,
Gcrypt 1.4.1.

Built using gcc 4.3.2.

--
After successfully parsing a huge LDAP request, I receive randomly SIGSEV
errors when trying to drill down into the content.

Attaching wireshark to GDB gives me this:

(lt-wireshark:13892): Gtk-CRITICAL **: gtk_text_buffer_get_iter_at_mark:
assertion `GTK_IS_TEXT_MARK (mark)' failed

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb53e2720 (LWP 13892)]        
0xb6037dea in ?? () from /usr/lib/libgtk-x11-2.0.so.0
(gdb) bt
#0  0xb6037dea in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#1  0xb605b423 in gtk_text_layout_validate_yrange () from
/usr/lib/libgtk-x11-2.0.so.0
#2  0xb6068109 in ?? () from /usr/lib/libgtk-x11-2.0.so.0                       
#3  0xb60696f5 in ?? () from /usr/lib/libgtk-x11-2.0.so.0                       
#4  0xb606974e in ?? () from /usr/lib/libgtk-x11-2.0.so.0                       
#5  0xb5e0b46b in ?? () from /usr/lib/libgdk-x11-2.0.so.0                       
#6  0xb5ad27e1 in ?? () from /usr/lib/libglib-2.0.so.0                          
#7  0xb5ad4718 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0     
#8  0xb5ad7dc3 in ?? () from /usr/lib/libglib-2.0.so.0                          
#9  0xb5ad7f81 in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0    
#10 0xb5faa204 in gtk_main_iteration () from /usr/lib/libgtk-x11-2.0.so.0       
#11 0x080ad055 in delayed_create_progress_dlg (task_title=0x8152f90
"Processing", item_title=0x814fe7a "Packet Details", terminate_is_stop=1,
stop_flag=0xbfc4b1d8, 
    start_time=0x1, progress=0.0400200486) at progress_dlg.c:299                
#12 0x080998ae in packet_hex_print_common (bv=<value optimized out>,
pd=0xb1878008 "", len=416991, bstart=9, bend=416949, astart=0, aend=0,
encoding=0)             
    at main_proto_draw.c:1044                                                   
#13 0x0808dd4b in tree_view_selection_changed_cb (sel=0x9f4c820, user_data=0x0)
at main.c:670
#14 0xb5b7e3d4 in g_cclosure_marshal_VOID__VOID () from
/usr/lib/libgobject-2.0.so.0
#15 0xb5b70c4b in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#16 0xb5b87095 in ?? () from /usr/lib/libgobject-2.0.so.0
#17 0xb5b887ac in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#18 0xb5b88c26 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#19 0xb608fde5 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#20 0xb60a8ceb in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#21 0xb60acab1 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#22 0xb5fafbdb in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#23 0xb5b6f3c9 in ?? () from /usr/lib/libgobject-2.0.so.0
#24 0xb5b70c4b in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#25 0xb5b86d3d in ?? () from /usr/lib/libgobject-2.0.so.0
#26 0xb5ef1870 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#27 0xb5ef1e2c in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#28 0xb5ef209d in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#29 0xb5ef220e in gtk_bindings_activate_event () from
/usr/lib/libgtk-x11-2.0.so.0
#30 0xb60ac03e in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#31 0xb5fb0036 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#32 0xb5b6f3c9 in ?? () from /usr/lib/libgobject-2.0.so.0
#33 0xb5b70b78 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#34 0xb5b86d3d in ?? () from /usr/lib/libgobject-2.0.so.0
#35 0xb5b8862b in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#36 0xb5b88c26 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#37 0xb60c533e in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#38 0xb60d8eff in gtk_window_propagate_key_event () from
/usr/lib/libgtk-x11-2.0.so.0
#39 0xb60dc1cc in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#40 0xb5fb0036 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#41 0xb5b6f3c9 in ?? () from /usr/lib/libgobject-2.0.so.0
---Type <return> to continue, or q <return> to quit---
#42 0xb5b70c4b in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#43 0xb5b86d3d in ?? () from /usr/lib/libgobject-2.0.so.0
#44 0xb5b8862b in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#45 0xb5b88c26 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#46 0xb60c533e in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#47 0xb5fa8c11 in gtk_propagate_event () from /usr/lib/libgtk-x11-2.0.so.0
#48 0xb5fa9ef7 in gtk_main_do_event () from /usr/lib/libgtk-x11-2.0.so.0
#49 0xb5e3f50a in ?? () from /usr/lib/libgdk-x11-2.0.so.0
#50 0xb5ad4718 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#51 0xb5ad7dc3 in ?? () from /usr/lib/libglib-2.0.so.0
#52 0xb5ad82e2 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#53 0xb5faa3a9 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#54 0x0808f929 in main (argc=0, argv=0xbfc4e3ac) at main.c:2613


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.