Wireshark-bugs: [Wireshark-bugs] [Bug 11395] Buildbot crash output: fuzz-2015-07-22-10767.pcap
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sun, 26 Jul 2015 12:17:39 +0000

Comment # 4 on bug 11395 from 
Regarding the:
  ** (process:2227): WARNING **: Dissector bug, protocol Bundle, in packet
52152: packet-tcp.c:2373: failed assertion "proto_desegment &&
pinfo->can_desegment"


In packet-dtn.c, tcp_dissect_pdus is being called with a length function that
can fail (because the length encoding in the packet is multi-byte, and can
actually be completely invalid and not just encoding-a-ridiculous-number).

Unfortunately, there is no way to indicate this to tcp_dissect_pdus. Right now
the length function is returning 0 in error cases, but tcp_dissect_pdus treats
that as "length function needs one more segment" and tries to reassemble. For
some reason this fails on an assert rather than actually reassembling.

You are receiving this mail because:
  • You are watching all bug changes.