Ethereal-dev: [Ethereal-dev] Crash in afs dissector.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jaime Fournier <jafour1@xxxxxxxxx>
Date: Tue, 20 Jan 2004 09:03:40 -0800 (PST)
Not sure if there is sufficient info in the trace but
here it goes

Core was generated by `dcereal'.
Program terminated with signal 11, Segmentation fault.

#0  0x10009aec in memmove ()
No symbol table info available.
#1  0x100a4364 in dissect_fs_request ()
No symbol table info available.
#2  0x1009c56c in dissect_afs ()
No symbol table info available.
#3  0x1002e544 in call_dissector_through_handle ()
No symbol table info available.
#4  0x1002ea94 in call_dissector_work ()
No symbol table info available.
#5  0x10031244 in call_dissector ()
No symbol table info available.
#6  0x104722cc in dissect_rx (tvb=0x203299cc,
pinfo=0x203277b0, parent_tree=0x20327da0) at
packet-rx.c:567
        tree = (proto_tree *) 0x20327e90
        offset = 28
        rxinfo = {type = 1 '\001', flags = 41 ')',
serviceid = 1, callnumber = 209, seq = 1093}
        seq = 1093
        callnumber = 209
#7  0x1002e544 in call_dissector_through_handle ()
No symbol table info available.
#8  0x1002ea94 in call_dissector_work ()
No symbol table info available.
#9  0x1002f16c in dissector_try_port ()
No symbol table info available.
#10 0x103ce294 in decode_udp_ports (tvb=0x0,
offset=540161828, pinfo=0x203277b0, tree=0x20327da0,
uh_sport=7001, uh_dport=7001) at packet-udp.c:119
        next_tvb = (tvbuff_t *) 0x203299cc
        low_port = 540161828
        high_port = 7001
#11 0x103ce97c in dissect_udp (tvb=0x20329998,
pinfo=0x203277b0, tree=0x20327da0) at packet-udp.c:269
        udp_tree = (proto_tree *) 0x2020490c
        ti = (proto_item *) 0x0
        len = 566
        reported_len = 1480
        cksum_vec = {{ptr = 0x203236e4 <Address
0x203236e4 out of bounds>, len = 4}, {ptr = 0x2ff0e170
"/��/��x\020\002�D", len = 4}, {ptr = 0x2ff0e148 "", 
    len = 4}, {ptr = 0x203236ec <Address 0x203236ec
out of bounds>, len = 73}}
        phdr = {1114185, 1482}
        computed_cksum = 1480
        offset = 134217727
        udphstruct = {{uh_sport = 0, uh_dport = 0,
uh_ulen = 0, uh_sum = 0, ip_src = {type = AT_NONE, len
= 0, data = 0x0}, ip_dst = {type = AT_NONE, len = 0, 
      data = 0x0}}, {uh_sport = 0, uh_dport = 0,
uh_ulen = 0, uh_sum = 0, ip_src = {type = AT_NONE, len
= 0, data = 0x0}, ip_dst = {type = AT_NONE, len = 0, 
      data = 0x0}}, {uh_sport = 0, uh_dport = 0,
uh_ulen = 0, uh_sum = 0, ip_src = {type = AT_NONE, len
= 0, data = 0x0}, ip_dst = {type = AT_NONE, len = 0, 
      data = 0x0}}, {uh_sport = 0, uh_dport = 0,
uh_ulen = 0, uh_sum = 0, ip_src = {type = AT_NONE, len
= 0, data = 0x0}, ip_dst = {type = AT_NONE, len = 0, 
      data = 0x0}}}
        udph = (e_udphdr *) 0x0
        udph_count = 0
#12 0x1002e544 in call_dissector_through_handle ()
No symbol table info available.
#13 0x1002ea94 in call_dissector_work ()
No symbol table info available.
#14 0x1002f16c in dissector_try_port ()
No symbol table info available.
#15 0x1006dd00 in dissect_ip (tvb=0x20329964,
pinfo=0x203277b0, tree=0x20327da0) at packet-ip.c:1094
        ip_tree = (proto_tree *) 0x2034c444
        field_tree = (proto_tree *) 0x11
        ti = (proto_item *) 0x0
        hlen = 20
        optlen = 540187032
        nxt = 17 '\021'
        ipsum = 0
        ipfd_head = (fragment_data *) 0x0
        next_tvb = (tvbuff_t *) 0x20329998
        update_col_info = 1
        save_fragmented = 0
        eip_arr = {{ip_v_hl = 0 '\0', ip_tos = 0 '\0',
ip_len = 0, ip_id = 0, ip_off = 0, ip_ttl = 0 '\0',
ip_p = 0 '\0', ip_sum = 0, ip_src = {type = AT_NONE, 
      len = 0, data = 0x0}, ip_dst = {type = AT_NONE,
len = 0, data = 0x0}}, {ip_v_hl = 0 '\0', ip_tos = 0
'\0', ip_len = 0, ip_id = 0, ip_off = 0, ip_ttl = 0
'\0', 
    ip_p = 0 '\0', ip_sum = 0, ip_src = {type =
AT_NONE, len = 0, data = 0x0}, ip_dst = {type =
AT_NONE, len = 0, data = 0x0}}, {ip_v_hl = 0 '\0',
ip_tos = 0 '\0', 
    ip_len = 0, ip_id = 0, ip_off = 0, ip_ttl = 0
'\0', ip_p = 0 '\0', ip_sum = 0, ip_src = {type =
AT_NONE, len = 0, data = 0x0}, ip_dst = {type =
AT_NONE, len = 0, 
      data = 0x0}}, {ip_v_hl = 0 '\0', ip_tos = 0
'\0', ip_len = 0, ip_id = 0, ip_off = 0, ip_ttl = 0
'\0', ip_p = 0 '\0', ip_sum = 0, ip_src = {type =
AT_NONE, 
      len = 0, data = 0x0}, ip_dst = {type = AT_NONE,
len = 0, data = 0x0}}}
        eip_current = 0
        iph = (e_ip *) 0x201fb010
#16 0x1002e544 in call_dissector_through_handle ()
No symbol table info available.
#17 0x1002ea94 in call_dissector_work ()
No symbol table info available.
#18 0x1002f16c in dissector_try_port ()
No symbol table info available.
#19 0x1006bf48 in ethertype (etype=2048,
tvb=0x20329930, offset_after_etype=14,
pinfo=0x203277b0, tree=0x20327da0, fh_tree=0x20328278,
etype_id=540161828, 
    trailer_id=3115, fcs_len=804320248) at
packet-ethertype.c:175
        except_sn = {except_down = 0x2ff0ed18,
except_type = XCEPT_CATCHER, except_info =
{except_catcher = 0x2ff0e750, except_cleanup =
0x2ff0e750}}
        except_ch = {except_id = 0x105139c4,
except_size = 1, except_obj = {except_id =
{except_group = 268656244, except_code = 2}, 
    except_message = 0x20329930 <Address 0x20329930
out of bounds>, except_dyndata = 0x0}, except_jmp =
{0, 0, 268877584, 804316928, 538711396, -559038737,
253, 
    804388232, 804389248, 0, -559038737, -559038737,
-559038737, 0, 2, 538678556, 538924272, -1, 540161738,
804320136, 1, 537167664, 538948292, 0, 1143113796, 
    540161744, 0 <repeats 36 times>, 804317320, 6}}
        exc = (except_t *) 0x0
        description = 0xfffffffc <Address 0xfffffffc
out of bounds>
        next_tvb = (tvbuff_t *) 0x20329964
        length_before = 1500
        dissector_found = 268686636
        saved_proto = 0x1051e060 "Ethernet"
        exception_proto = 0x20048730 '�' <repeats 20
times>
#20 0x10081720 in dissect_eth_common (tvb=0x20329930,
pinfo=0x203277b0, tree=0x20327da0, fcs_len=804320248)
at packet-eth.c:282
        ehdr = (eth_hdr *) 0x201fb2c4
        is_802_2 = 0
        fh_tree = (proto_tree *) 0x20328278
        src_addr = 0x203236d0 <Address 0x203236d0 out
of bounds>
        dst_addr = 0x203236ca <Address 0x203236ca out
of bounds>
        ehdrs = {{dst = {type = AT_NONE, len = 0, data
= 0x0}, src = {type = AT_NONE, len = 0, data = 0x0},
type = 0}, {dst = {type = AT_NONE, len = 0, data =
0x0}, 
    src = {type = AT_NONE, len = 0, data = 0x0}, type
= 0}, {dst = {type = AT_NONE, len = 0, data = 0x0},
src = {type = AT_NONE, len = 0, data = 0x0}, type =
0}, {
    dst = {type = AT_NONE, len = 0, data = 0x0}, src =
{type = AT_NONE, len = 0, data = 0x0}, type = 0}}
        ehdr_num = 0
#21 0x10081984 in dissect_eth_maybefcs (tvb=0x0,
pinfo=0x20323724, tree=0x1fffffff) at packet-eth.c:377
No locals.
#22 0x1002e544 in call_dissector_through_handle ()
No symbol table info available.
#23 0x1002ea94 in call_dissector_work ()
No symbol table info available.
#24 0x1002f16c in dissector_try_port ()


=====
Jaime Fournier

__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus