Wireshark-bugs: [Wireshark-bugs] [Bug 5760] Buildbot crash output: fuzz-2011-03-16-6919.pcap
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5760
Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |anders.broman@xxxxxxxxxxxx,
| |jeff.morriss.ws@xxxxxxxxx
--- Comment #3 from Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> 2011-03-29 12:07:43 PDT ---
backtrace is:
~~~
#0 bssgp_suspend_ack (tvb=0x260a760, tree=0x2609950, offset=12, len=1)
at ../../../epan/dissectors/packet-bssgp.c:4203
#1 0x00007f062925cc78 in be_fe_gprs_suspend_info (tvb=0x260a760,
tree=0x2609950, offset=31, len=1,
add_string=0x3e <Address 0x3e out of bounds>, string_len=12)
at ../../../epan/dissectors/packet-gsm_a_bssmap.c:4111
#2 0x00007f062925cbab in be_field_element_dissect (tvb=0x260a760,
tree=0x2609860, offset=<value optimized out>, len=14,
add_string=<value optimized out>, string_len=<value optimized out>)
at ../../../epan/dissectors/packet-gsm_a_bssmap.c:4306
#3 0x00007f062925f212 in bssmap_old_bss_to_new_bss_info (tvb=0x260a760,
tree=0x2609860, pinfo=<value optimized out>)
at ../../../epan/dissectors/packet-gsm_a_bssmap.c:2856
#4 0x00007f06296f4657 in dissect_ranap_OldBSS_ToNewBSS_Information ()
at ranap.cnf:249
~~~
The problem is that 'gpinfo' (a global copy of 'pinfo') is NULL. That's
because the gsm_a_bssmap() dissector is calling bssgp_suspend_ack()
directly--not going through dissect_bssgp() which sets gpinfo.
The problem comes from rev 36142. Anders, are you still overhauling this/these
dissectors?
I suppose a good solution would be to change the prototype for all the bssgp
functions to include pinfo in the parameter list.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
