Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 7346] Buildbot crash output: fuzz-2012-06-08-29653.pcap

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7346

Jakub Zawadzki <darkjames-ws@xxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |darkjames-ws@xxxxxxxxxxxx

--- Comment #1 from Jakub Zawadzki <darkjames-ws@xxxxxxxxxxxx> 2012-06-08 09:01:50 PDT ---
SIGSEGV in packet #10321

(gdb) bt
#0  0x00007fcf9ee08927 in vfprintf () from /lib64/libc.so.6
#1  0x00007fcf9eeb109c in __vsnprintf_chk () from /lib64/libc.so.6
#2  0x00007fcfa2a0f95b in proto_tree_set_representation () from
/tmp/wireshark/epan/.libs/libwireshark.so.0
#3  0x00007fcfa2a11c22 in proto_tree_add_text () from
/tmp/wireshark/epan/.libs/libwireshark.so.0
#4  0x00007fcfa302b94f in decode_audio_config (tree=0x7fcfa569a200,
tvb=0x22a0760, pinfo=0x2697810, offset=18, length=101, 
    opcode=73 'I', ua3g_item=0x7fcfa569a200, ua3g_body_item=0x7fcfa569a290) at
packet-ua3g.c:3100
#5  0x00007fcfa302ff38 in dissect_ua3g (tvb=0x22a0760, pinfo=0x2697810,
tree=0x7fcfa58699e0) at packet-ua3g.c:4948

(gdb) frame 4

proto_tree_add_text(ua3g_body_tree, tvb, offset, 1, "%s:%s",
str_device[device_index], strbuf->str);

(gdb) print str_device[device_index]
$1 = (const gchar *) 0x71cb00018ab5 <Address 0x71cb00018ab5 out of bounds>
(gdb) print device_index
$2 = 14

device_index out of bound (str_device array has only 5 elements)

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.