Wireshark-bugs: [Wireshark-bugs] [Bug 9962] Buildbot crash output: fuzz-2014-04-07-13431.pcap
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 10 Apr 2014 00:07:44 +0000

Comment # 7 on bug 9962 from 
In this code in packet-lbmc.c:

        /* If transport is TCP and we got a TCP SID header, process it. */
        if (lbm_channel_is_unknown_transport_source_lbttcp(channel))
        {
            COPY_ADDRESS_SHALLOW(&tcp_addr, &(pinfo->src));
            tcp_port = (guint16)pinfo->srcport;
        }
        else if (lbm_channel_is_unknown_transport_client_lbttcp(channel))
        {
            COPY_ADDRESS_SHALLOW(&tcp_addr, &(pinfo->dst));
            tcp_port = (guint16)pinfo->destport;
        }
        if ((pinfo->fd->flags.visited == 0) && (tcp_sid_info.set) &&
!lbm_channel_is_known(channel))
        {
            lbttcp_transport_sid_add(&tcp_addr, tcp_port, pinfo->fd->num,
tcp_sid_info.session_id);
        }

with the capture in question, tcp_sid_info.set is true and
lbm_channel_is_known(channel) is false, so it's calling
lbttcp_transport_sid_add(), and neither
lbm_channel_is_unknown_transport_source_lbttcp(channel) nor
lbm_channel_is_unknown_transport_client_lbttcp(channel) are true, so it's never
*set* tcp_addr nor tcp_port.

Hilarity^WCrashes ensue.

You are receiving this mail because:
  • You are watching all bug changes.