Wireshark-bugs: [Wireshark-bugs] [Bug 8022] core dumped when the file is closed
Date: Sat, 01 Dec 2012 23:10:41 +0000
changed bug 8022
What Removed Added
Status CONFIRMED RESOLVED
Resolution --- FIXED

Comment # 8 on bug 8022 from
(In reply to comment #5)
> The reconstructed capture file is 1.6 GB in size and contains some 2 million
> packets. I've split it up into 100,000-packet chunks and have not been able
> to reproduce the issue, but I don't have enough RAM available to open the
> entire file at once.

The radix tree (or whatever that data structure is called) for the frame data
structures needs to get sufficiently deep for the problem to show up, so a
smaller file might not do the job.  0-1024 frames -> root node + leaf nodes,
and 1025-1048576 frames -> root node + 1 level of intermediate nodes + leaf
nodes, so you need > 1048576 nodes to get to 2 levels of intermediate nodes.

I reproduced the problem with the full capture, and the fix (to what was,
indeed, two cut-and-pasteos of mine) fixes the problem.

Marking as RESOLVED/FIXED; as per

    http://www.bugzilla.org/docs/4.2/en/html/lifecycle.html

Cristian should move it to VERIFIED if the fix prevents the crash he's seeing.


You are receiving this mail because:
  • You are watching all bug changes.