Wireshark-bugs: [Wireshark-bugs] [Bug 4563] New: certain edp display filters trigger Wireshark/t
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sun, 7 Mar 2010 16:50:34 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4563

           Summary: certain edp display filters trigger Wireshark/tshark
                    runtime error
           Product: Wireshark
           Version: SVN
          Platform: Other
        OS/Version: Windows XP
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: jyoung@xxxxxxx


Created an attachment (id=4373)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=4373)
trace file with edp packets

Build Information:
$ tshark -v
TShark 1.3.4 (SVN Rev 32140 from /trunk)

Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GLib 2.22.4, with WinPcap (version unknown), with libz 1.2.3,
without POSIX capabilities, without libpcre, with SMI 0.4.8, with c-ares 1.7.0,
with Lua 5.1, without Python, with GnuTLS 2.8.5, with Gcrypt 1.4.5, with MIT
Kerberos, with GeoIP.

Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.1.1
(packet.dll version 4.1.0.1753), based on libpcap version 1.0 branch 1_0_rel0b
(20091008), GnuTLS 2.8.5, Gcrypt 1.4.5.

Built using Microsoft Visual C++ 9.0 build 30729
$

--
Both Wireshark and tshark will terminate with a runtime error when a tracefile
with edp packets is read and one of the following two display filters is
applied: edp.info==<something>, or edp.unknown==<something>.

The debug message generated by both Wireshark and tshark using either display
filter report the same "Unhandled exception" at tvbuff.c line 631...

> $ tshark -r edp-frames.pcap -R edp.info==a
> Unhandled exception ("tvbuff.c:631: failed assertion "tvb && tvb->initialized"", group=1, code=4)
> 
> This application has requested the Runtime to terminate it in an unusual way.
> Please contact the application's support team for more information.
> $

<snip>

> $ tshark -r edp-frames.pcap -R edp.unknown==a
> Unhandled exception ("tvbuff.c:631: failed assertion "tvb && tvb->initialized"", group=1, code=4)
> 
> This application has requested the Runtime to terminate it in an unusual way.
> Please contact the application's support team for more information.
> $

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.