Ethereal-dev: [Ethereal-dev] Bug in Win32 Ethereal 0.9.16

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gordon McKinney <gordon@xxxxxxxxxxxxx>
Date: Tue, 4 Nov 2003 11:31:24 GMT
Looks like a null pointer. Reading the same trace file in 0.9.15 works, this version 
doesn't. I've added a text attachment of the same to prevent line wrapping.

I cannot release the trace file but it is a switch capture from a Win2K box. Lots of 
SMB, TNS, Web etc.

Drop me a line if you have any Qs.




The instruction at "0x0075a081" referenced memory at "0x00000004". The memory could 
not be "read"

Unhandled exception in exthereal.exe 0xC0000005

TVBUFF.C

abs_length	7698751
abs_offset	1234064
offset		0
tvb		0x00000000

	gint
	tvb_length_remaining(tvbuff_t *tvb, gint offset)
	{
		guint	abs_offset, abs_length;
	
--->		g_assert(tvb->initialized);
	
		if (compute_offset_length(tvb, offset, -1, &abs_offset, &abs_length, NULL)) {
			return abs_length;
		}
		else {
			return -1;
		}
	}


The instruction at "0x0075a081" referenced memory at "0x00000004". The memory could 
not be "read"

Unhandled exception in exthereal.exe 0xC0000005

TVBUFF.C

abs_length	7698751
abs_offset	1234064
offset		0
tvb		0x00000000

	gint
	tvb_length_remaining(tvbuff_t *tvb, gint offset)
	{
		guint	abs_offset, abs_length;
	
--->		g_assert(tvb->initialized);
	
		if (compute_offset_length(tvb, offset, -1, &abs_offset, &abs_length, NULL)) {
			return abs_length;
		}
		else {
			return -1;
		}
	}

tvb_length_remaining(tvbuff * 0x00000000, int 0) line 626 + 3 bytes
show_stub_data(tvbuff * 0x00000000, int 0, _GNode * 0x0148aa98, _dcerpc_auth_info * 
0x0012d524, int 0) line 1731 + 13 bytes
dissect_dcerpc_cn_stub(tvbuff * 0x02e9caac, int 24, _packet_info * 0x03319518, _GNode 
* 0x02df6c64, _GNode * 0x0148aa98, _e_dce_cn_common_hdr_t * 0x0012d598, _dcerpc_info 
* 0x00bba5dc, _dcerpc_auth_info * 0x0012d524, unsigned int 5940, unsigned int 2833) 
line 2645 + 21 bytes
dissect_dcerpc_cn_resp(tvbuff * 0x02e9caac, int 24, _packet_info * 0x03319518, _GNode 
* 0x02df6c64, _GNode * 0x0148aa98, _e_dce_cn_common_hdr_t * 0x0012d598) line 2906 + 
48 bytes
dissect_dcerpc_cn(tvbuff * 0x02e9caac, int 16, _packet_info * 0x03319518, _GNode * 
0x0148aa98, int 1, int * 0x0012d644) line 3326 + 29 bytes
dissect_dcerpc_cn_bs(tvbuff * 0x02e9caac, _packet_info * 0x03319518, _GNode * 
0x0148aa98) line 3416 + 32 bytes
dissector_try_heuristic(_GSList * 0x0141e820, tvbuff * 0x02e9caac, _packet_info * 
0x03319518, _GNode * 0x0148aa98) line 1428 + 17 bytes
decode_tcp_ports(tvbuff * 0x02e9ca78, int 0, _packet_info * 0x03319518, _GNode * 
0x0148aa98, int 1030, int 4127, unsigned int 0) line 2302 + 24 bytes
desegment_tcp(tvbuff * 0x02e9ca44, _packet_info * 0x03319518, int 20, unsigned int 
10301, unsigned int 11761, unsigned int 1030, unsigned int 4127, _GNode * 0x0148aa98, 
_GNode * 0x02de1bf0) line 1618 + 29 bytes
dissect_tcp(tvbuff * 0x02e9ca44, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 
2703 + 69 bytes
call_dissector_through_handle(dissector_handle * 0x00cc0e70, tvbuff * 0x02e9ca44, 
_packet_info * 0x03319518, _GNode * 0x0148aa98) line 362 + 18 bytes
call_dissector_work(dissector_handle * 0x00cc0e70, tvbuff * 0x02e9ca44, _packet_info 
* 0x03319518, _GNode * 0x0148aa98) line 507 + 21 bytes
dissector_try_port(dissector_table * 0x00ca78b0, unsigned int 6, tvbuff * 0x02e9ca44, 
_packet_info * 0x03319518, _GNode * 0x0148aa98) line 771 + 21 bytes
dissect_ip(tvbuff * 0x02e9ca10, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 
1094 + 33 bytes
call_dissector_through_handle(dissector_handle * 0x00ca7760, tvbuff * 0x02e9ca10, 
_packet_info * 0x03319518, _GNode * 0x0148aa98) line 362 + 18 bytes
call_dissector_work(dissector_handle * 0x00ca7760, tvbuff * 0x02e9ca10, _packet_info 
* 0x03319518, _GNode * 0x0148aa98) line 507 + 21 bytes
dissector_try_port(dissector_table * 0x00ca5a70, unsigned int 2048, tvbuff * 
0x02e9ca10, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 771 + 21 bytes
ethertype(unsigned short 2048, tvbuff * 0x02e9c9dc, int 14, _packet_info * 
0x03319518, _GNode * 0x0148aa98, _GNode * 0x02df52d8, int 2772, int 2774, int -1) 
line 175 + 34 bytes
dissect_eth_common(tvbuff * 0x02e9c9dc, _packet_info * 0x03319518, _GNode * 
0x0148aa98, int -1) line 283 + 48 bytes
dissect_eth_maybefcs(tvbuff * 0x02e9c9dc, _packet_info * 0x03319518, _GNode * 
0x0148aa98) line 377 + 26 bytes
call_dissector_through_handle(dissector_handle * 0x00cb4ef0, tvbuff * 0x02e9c9dc, 
_packet_info * 0x03319518, _GNode * 0x0148aa98) line 362 + 18 bytes
call_dissector_work(dissector_handle * 0x00cb4ef0, tvbuff * 0x02e9c9dc, _packet_info 
* 0x03319518, _GNode * 0x0148aa98) line 507 + 21 bytes
dissector_try_port(dissector_table * 0x00ca5180, unsigned int 1, tvbuff * 0x02e9c9dc, 
_packet_info * 0x03319518, _GNode * 0x0148aa98) line 771 + 21 bytes
dissect_frame(tvbuff * 0x02e9c9dc, _packet_info * 0x03319518, _GNode * 0x0148aa98) 
line 185 + 34 bytes
call_dissector_through_handle(dissector_handle * 0x00ca50c0, tvbuff * 0x02e9c9dc, 
_packet_info * 0x03319518, _GNode * 0x0148aa98) line 362 + 18 bytes
call_dissector_work(dissector_handle * 0x00ca50c0, tvbuff * 0x02e9c9dc, _packet_info 
* 0x03319518, _GNode * 0x0148aa98) line 507 + 21 bytes
call_dissector(dissector_handle * 0x00ca50c0, tvbuff * 0x02e9c9dc, _packet_info * 
0x03319518, _GNode * 0x0148aa98) line 1575 + 21 bytes
dissect_packet(_epan_dissect_t * 0x03319510, wtap_pseudo_header * 0x00d1471c, const 
unsigned char * 0x02c82530, _frame_data * 0x02f3aaa0, _column_info * 0x00be9510) line 
310 + 32 bytes
epan_dissect_run(_epan_dissect_t * 0x03319510, void * 0x00d1471c, const unsigned char 
* 0x02c82530, _frame_data * 0x02f3aaa0, _column_info * 0x00be9510) line 106 + 25 
bytes
add_packet_to_packet_list(_frame_data * 0x02f3aaa0, _capture_file * 0x00bd93e0, 
wtap_pseudo_header * 0x00d1471c, const unsigned char * 0x02c82530, int 1) line 777 + 
31 bytes
read_packet(_capture_file * 0x00bd93e0, long 1621642) line 903 + 23 bytes
cf_read(_capture_file * 0x00bd93e0, int * 0x0012ed3c) line 423 + 13 bytes
file_open_ok_cb(_GtkWidget * 0x01461708, _GtkFileSelection * 0x00d0dc70) line 285 + 
14 bytes
LIBGTK-0! 6dc88a5c()
LIBGTK-0! 6dcc362f()
LIBGTK-0! 6dcc2bba()
LIBGTK-0! 6dcc0a68()
LIBGTK-0! 6dc0f7c4()
LIBGTK-0! 6dc11683()
LIBGTK-0! 6dc88a5c()
LIBGTK-0! 6dcc2a88()
LIBGTK-0! 6dcc0a68()
LIBGTK-0! 6dc0f6e4()
LIBGTK-0! 6dc10dca()
LIBGTK-0! 6dc887ea()
LIBGTK-0! 6dcc2bf0()
LIBGTK-0! 6dcc0a68()
LIBGTK-0! 6dd0a190()
LIBGTK-0! 6dc879a1()
LIBGTK-0! 6dc8754c()
LIBGDK-0! 67fa5f79()
LIBGLIB-2.0-0! 672de67e()
LIBGLIB-2.0-0! 672dec9f()
LIBGLIB-2.0-0! 672db959()
LIBGTK-0! 6dc8712c()
main(int 0, char * * 0x00ca1774) line 2553
WinMain(HINSTANCE__ * 0x00400000, HINSTANCE__ * 0x00000000, char * 0x00133d53, int 1) 
line 2673 + 23 bytes
ETHEREAL! WinMainCRTStartup + 308 bytes
KERNEL32! 77f1bbb5()


The instruction at "0x0075a081" referenced memory at "0x00000004". The memory could not be "read"

Unhandled exception in exthereal.exe 0xC0000005

TVBUFF.C

abs_length	7698751
abs_offset	1234064
offset		0
tvb		0x00000000

	gint
	tvb_length_remaining(tvbuff_t *tvb, gint offset)
	{
		guint	abs_offset, abs_length;
	
--->		g_assert(tvb->initialized);
	
		if (compute_offset_length(tvb, offset, -1, &abs_offset, &abs_length, NULL)) {
			return abs_length;
		}
		else {
			return -1;
		}
	}

tvb_length_remaining(tvbuff * 0x00000000, int 0) line 626 + 3 bytes
show_stub_data(tvbuff * 0x00000000, int 0, _GNode * 0x0148aa98, _dcerpc_auth_info * 0x0012d524, int 0) line 1731 + 13 bytes
dissect_dcerpc_cn_stub(tvbuff * 0x02e9caac, int 24, _packet_info * 0x03319518, _GNode * 0x02df6c64, _GNode * 0x0148aa98, _e_dce_cn_common_hdr_t * 0x0012d598, _dcerpc_info * 0x00bba5dc, _dcerpc_auth_info * 0x0012d524, unsigned int 5940, unsigned int 2833) line 2645 + 21 bytes
dissect_dcerpc_cn_resp(tvbuff * 0x02e9caac, int 24, _packet_info * 0x03319518, _GNode * 0x02df6c64, _GNode * 0x0148aa98, _e_dce_cn_common_hdr_t * 0x0012d598) line 2906 + 48 bytes
dissect_dcerpc_cn(tvbuff * 0x02e9caac, int 16, _packet_info * 0x03319518, _GNode * 0x0148aa98, int 1, int * 0x0012d644) line 3326 + 29 bytes
dissect_dcerpc_cn_bs(tvbuff * 0x02e9caac, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 3416 + 32 bytes
dissector_try_heuristic(_GSList * 0x0141e820, tvbuff * 0x02e9caac, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 1428 + 17 bytes
decode_tcp_ports(tvbuff * 0x02e9ca78, int 0, _packet_info * 0x03319518, _GNode * 0x0148aa98, int 1030, int 4127, unsigned int 0) line 2302 + 24 bytes
desegment_tcp(tvbuff * 0x02e9ca44, _packet_info * 0x03319518, int 20, unsigned int 10301, unsigned int 11761, unsigned int 1030, unsigned int 4127, _GNode * 0x0148aa98, _GNode * 0x02de1bf0) line 1618 + 29 bytes
dissect_tcp(tvbuff * 0x02e9ca44, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 2703 + 69 bytes
call_dissector_through_handle(dissector_handle * 0x00cc0e70, tvbuff * 0x02e9ca44, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 362 + 18 bytes
call_dissector_work(dissector_handle * 0x00cc0e70, tvbuff * 0x02e9ca44, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 507 + 21 bytes
dissector_try_port(dissector_table * 0x00ca78b0, unsigned int 6, tvbuff * 0x02e9ca44, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 771 + 21 bytes
dissect_ip(tvbuff * 0x02e9ca10, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 1094 + 33 bytes
call_dissector_through_handle(dissector_handle * 0x00ca7760, tvbuff * 0x02e9ca10, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 362 + 18 bytes
call_dissector_work(dissector_handle * 0x00ca7760, tvbuff * 0x02e9ca10, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 507 + 21 bytes
dissector_try_port(dissector_table * 0x00ca5a70, unsigned int 2048, tvbuff * 0x02e9ca10, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 771 + 21 bytes
ethertype(unsigned short 2048, tvbuff * 0x02e9c9dc, int 14, _packet_info * 0x03319518, _GNode * 0x0148aa98, _GNode * 0x02df52d8, int 2772, int 2774, int -1) line 175 + 34 bytes
dissect_eth_common(tvbuff * 0x02e9c9dc, _packet_info * 0x03319518, _GNode * 0x0148aa98, int -1) line 283 + 48 bytes
dissect_eth_maybefcs(tvbuff * 0x02e9c9dc, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 377 + 26 bytes
call_dissector_through_handle(dissector_handle * 0x00cb4ef0, tvbuff * 0x02e9c9dc, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 362 + 18 bytes
call_dissector_work(dissector_handle * 0x00cb4ef0, tvbuff * 0x02e9c9dc, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 507 + 21 bytes
dissector_try_port(dissector_table * 0x00ca5180, unsigned int 1, tvbuff * 0x02e9c9dc, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 771 + 21 bytes
dissect_frame(tvbuff * 0x02e9c9dc, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 185 + 34 bytes
call_dissector_through_handle(dissector_handle * 0x00ca50c0, tvbuff * 0x02e9c9dc, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 362 + 18 bytes
call_dissector_work(dissector_handle * 0x00ca50c0, tvbuff * 0x02e9c9dc, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 507 + 21 bytes
call_dissector(dissector_handle * 0x00ca50c0, tvbuff * 0x02e9c9dc, _packet_info * 0x03319518, _GNode * 0x0148aa98) line 1575 + 21 bytes
dissect_packet(_epan_dissect_t * 0x03319510, wtap_pseudo_header * 0x00d1471c, const unsigned char * 0x02c82530, _frame_data * 0x02f3aaa0, _column_info * 0x00be9510) line 310 + 32 bytes
epan_dissect_run(_epan_dissect_t * 0x03319510, void * 0x00d1471c, const unsigned char * 0x02c82530, _frame_data * 0x02f3aaa0, _column_info * 0x00be9510) line 106 + 25 bytes
add_packet_to_packet_list(_frame_data * 0x02f3aaa0, _capture_file * 0x00bd93e0, wtap_pseudo_header * 0x00d1471c, const unsigned char * 0x02c82530, int 1) line 777 + 31 bytes
read_packet(_capture_file * 0x00bd93e0, long 1621642) line 903 + 23 bytes
cf_read(_capture_file * 0x00bd93e0, int * 0x0012ed3c) line 423 + 13 bytes
file_open_ok_cb(_GtkWidget * 0x01461708, _GtkFileSelection * 0x00d0dc70) line 285 + 14 bytes
LIBGTK-0! 6dc88a5c()
LIBGTK-0! 6dcc362f()
LIBGTK-0! 6dcc2bba()
LIBGTK-0! 6dcc0a68()
LIBGTK-0! 6dc0f7c4()
LIBGTK-0! 6dc11683()
LIBGTK-0! 6dc88a5c()
LIBGTK-0! 6dcc2a88()
LIBGTK-0! 6dcc0a68()
LIBGTK-0! 6dc0f6e4()
LIBGTK-0! 6dc10dca()
LIBGTK-0! 6dc887ea()
LIBGTK-0! 6dcc2bf0()
LIBGTK-0! 6dcc0a68()
LIBGTK-0! 6dd0a190()
LIBGTK-0! 6dc879a1()
LIBGTK-0! 6dc8754c()
LIBGDK-0! 67fa5f79()
LIBGLIB-2.0-0! 672de67e()
LIBGLIB-2.0-0! 672dec9f()
LIBGLIB-2.0-0! 672db959()
LIBGTK-0! 6dc8712c()
main(int 0, char * * 0x00ca1774) line 2553
WinMain(HINSTANCE__ * 0x00400000, HINSTANCE__ * 0x00000000, char * 0x00133d53, int 1) line 2673 + 23 bytes
ETHEREAL! WinMainCRTStartup + 308 bytes
KERNEL32! 77f1bbb5()