[Buildbot <buildbot-do-not-reply@xxxxxxxxxxxx>]

Problems have been found with the following capture file(s):

http://www.ethereal.com/distribution/buildbot-builds/randpkt/editcap.431ed7e6.pcap


Error information:
Core was generated by `lt-tethereal'.
Program terminated with signal 11, Segmentation fault.
#0  tvb_length (tvb=0x0) at tvbuff.c:574
574		g_assert(tvb->initialized);
#0  tvb_length (tvb=0x0) at tvbuff.c:574
	__PRETTY_FUNCTION__ = "tvb_length"
#1  0x20000000409a6220 in reassemble_octet_string (pinfo=0x2000000000593610, 
    tree=0x2000000001a80720, tvb=0x2000000001a82e08, offset=18, con_len=33, 
    ind=1101461544, out_tvb=0x9fffffffffffd070) at packet-ber.c:543
	octet_segment_table = (GHashTable *) 0x200000000066bfc0
	octet_reassembled_table = (GHashTable *) 0x2000000001a94040
	fd_head = (fragment_data *) 0x0
	next_tvb = (tvbuff_t *) 0x0
	reassembled_tvb = (tvbuff_t *) 0x0
	dst_ref = 0
	start_offset = 2
	fragment = 1
	firstFragment = 0
#2  0x20000000409a6630 in dissect_ber_octet_string (implicit_tag=0, 
    pinfo=0x2000000000593610, tree=0x2000000001a80720, tvb=0x2000000001a82e08, 
    offset=2, hf_id=8930, out_tvb=0x9fffffffffffd070) at packet-ber.c:632
	class = 0 '\0'
	pc = 1
	ind = 0
	tag = 4
	len = 33
	end_offset = 35
	i = 1297
#3  0x2000000040c239c0 in dissect_gsm_map_Sm_RP_UI (implicit_tag=0, 
    tvb=0x2000000001a82e08, offset=0, pinfo=0x2000000000593610, 
    tree=0x2000000001a80720, hf_index=8930) at packet-gsm_map.c:10195
	tpdu_tvb = (tvbuff_t *) 0x2300000000
#4  0x2000000040c23aa0 in dissect_sm_RP_UI (pinfo=0x2000000000593610, 
    tree=0x2000000001a80720, tvb=0x2000000001a82e08, offset=0)
    at packet-gsm_map.c:10210
No locals.
#5  0x20000000409a81d0 in dissect_ber_sequence (implicit_tag=55, 
    pinfo=0x2000000000593610, parent_tree=0x9fffffffffffd0bc, 
    tvb=0x2000000001a82c50, offset=22, seq=0x200000004175fcf0, hf_id=-12127, 
    ett_id=-12096) at packet-ber.c:1049
	len = 33
	hoffset = 20
	count = 18
	class = 0 '\0'
	pc = 1
	tag = 4
	eoffset = 55
	class = 1 '\001'
	pc = 0
	ind = 0
	ind_field = 0
	tag = 12
	len = 53
	tree = (proto_tree *) 0x2000000001a80720
	end_offset = 55
	s_offset = 0
	length_remaining = 18
	next_tvb = (tvbuff_t *) 0x2000000001a82e08
#6  0x2000000040c23b10 in dissect_gsm_map_Mo_forwardSM_Arg (implicit_tag=0, 
    tvb=0x2000000001a82c50, offset=0, pinfo=0x2000000000593610, 
    tree=0x2000000001a80720, hf_index=-1) at packet-gsm_map.c:10225
No locals.
#7  0x2000000040c2bc50 in dissect_invokeData (pinfo=0x2000000000593610, 
    tree=0x2000000001a80720, tvb=0x2000000001a82c50, offset=0)
    at packet-gsm_map.c:13756
	octet = 18 '\022'
#8  0x20000000409a81d0 in dissect_ber_sequence (implicit_tag=61, 
    pinfo=0x2000000000593610, parent_tree=0x9fffffffffffd10c, 
    tvb=0x2000000001a82af0, offset=8, seq=0x2000000041764ae8, hf_id=-12047, 
    ett_id=-12016) at packet-ber.c:1049
	len = 53
	hoffset = 6
	count = 18
	class = 1 '\001'
	pc = 0
	tag = 12
	eoffset = 61
	class = 2 '\002'
	pc = 61
	ind = 0
	ind_field = 0
	tag = 10
	len = 61
	tree = (proto_tree *) 0x2000000001a80720
	end_offset = 61
	s_offset = 0
	length_remaining = 18
	next_tvb = (tvbuff_t *) 0x2000000001a82c50
#9  0x2000000040c2d960 in dissect_gsm_map_InvokePDU (implicit_tag=1, 
    tvb=0x2000000001a82af0, offset=0, pinfo=0x2000000000593610, 
    tree=0x2000000001a80780, hf_index=8431) at packet-gsm_map.c:14153
No locals.
#10 0x2000000040c2d9c0 in dissect_invoke_impl (pinfo=0x2000000000593610, 
    tree=0x2000000001a80780, tvb=0x2000000001a82af0, offset=0)
    at packet-gsm_map.c:14159
No locals.
#11 0x20000000409a9630 in dissect_ber_choice (pinfo=0x2000000000593610, 
    parent_tree=0x2000000001a80780, tvb=0x2000000001a82830, offset=61, 
    choice=0x2000000041764c88, hf_id=-1, ett_id=3230, branch_taken=0x0)
    at packet-ber.c:1487
	class = 2 '\002'
	pc = 1
	ind = 0
	tag = 1
	len = 61
	ch = (const ber_choice_t *) 0x2000000041764c88
	tree = (proto_tree *) 0x2000000001a80780
	end_offset = 63
	start_offset = 2
	count = 18
	hoffset = 2
	hfinfo = (header_field_info *) 0x12
	length = 61
	length_remaining = 18
	next_tvb = (tvbuff_t *) 0x2000000001a82af0
	first_pass = 1
#12 0x2000000040c2df50 in dissect_gsm_map_GSMMAPPDU (implicit_tag=0, 
    tvb=0x2000000001a82830, offset=0, pinfo=0x2000000000593610, 
    tree=0x2000000001a80780, hf_index=-1) at packet-gsm_map.c:14280
No locals.
#13 0x2000000040c2e0f0 in dissect_gsm_map (tvb=0x2000000001a82830, 
    pinfo=0x2000000000593610, parent_tree=0x2000000001a806c0)
    at packet-gsm_map.c:14313
	tree = (proto_tree *) 0x2000000001a80780
	tap_rec = {invoke = 1, opr_code_idx = 40 '(', size = 63}
	op_idx = 40
#14 0x2000000040863e30 in call_dissector_through_handle (
    handle=0x200000000056b680, tvb=0x2000000001a82830, 
    pinfo=0x2000000000593610, tree=0x2000000001a806c0) at packet.c:383
	saved_proto = 0x20000000412d6028 "GSM_MAP"
	ret = 18
#15 0x2000000040864c40 in call_dissector_work (handle=0x200000000056b680, 
    tvb=0x2000000001a82830, pinfo_arg=0x2000000000593610, 
    tree=0x2000000001a806c0) at packet.c:558
	pinfo = (packet_info * volatile) 0x2000000000593610
	saved_proto = 0x200000004145c3f0 "TCAP"
	saved_can_desegment = 0
	ret = 63
	save_writable = 1
	save_dl_src = {type = AT_NONE, len = 0, data = 0x0}
	save_dl_dst = {type = 825702201, len = 536870912, 
  data = 0x2b <Address 0x2b out of bounds>}
	save_net_src = {type = AT_NONE, len = 0, 
  data = 0x3 <Address 0x3 out of bounds>}
	save_net_dst = {type = AT_NONE, len = 0, data = 0x0}
	save_src = {type = AT_NONE, len = 0, 
  data = 0xd700000001 <Address 0xd700000001 out of bounds>}
	save_dst = {type = 4294902280, len = 0, 
  data = 0x2000000001a8a920 "���\001"}
	saved_layer_names_len = 19
	__PRETTY_FUNCTION__ = "call_dissector_work"
#16 0x2000000040865e10 in dissector_try_string (
    sub_dissectors=0x20000000000a85e0, 
    string=0x2000000041a8c740 "0.4.0.0.1.0.25.2", tvb=0x2000000001a82830, 
    pinfo=0x2000000000593610, tree=0x2000000001a806c0) at packet.c:1076
	dtbl_entry = (dtbl_entry_t *) 0x12
	handle = (struct dissector_handle *) 0x200000000056b680
	saved_match_string = (const gchar *) 0x0
#17 0x2000000041007e50 in dissect_tcap_Component (implicit_tag=0, 
    tvb=0x2000000041a71508, offset=4, pinfo=0x2000000000593610, 
    tree=0x2000000001a80180, hf_index=28300) at packet-tcap.c:1287
	next_tvb = (tvbuff_t *) 0x2000000001a82830
	class = 2 '\002'
	pc = 1
	tag = 1
	len = 61
	s_offset = 27797552
	ind_field = 0
#18 0x2000000041007f70 in dissect_ComponentPortion_item (
    pinfo=0x2000000000593610, tree=0x2000000001a80180, tvb=0x2000000001a82768, 
    offset=2) at packet-tcap.c:1300
No locals.
#19 0x20000000409aa7d0 in dissect_ber_sq_of (implicit_tag=2, type=16, 
    pinfo=0x2000000000593610, parent_tree=0x2000000041995570, 
    tvb=0x2000000001a82768, offset=4, seq=0x2000000041995568, hf_id=-11088, 
    ett_id=8578) at packet-ber.c:1879
	len = 61
	hoffset = 2
	class = 2 '\002'
	pc = 1
	tag = 1
	eoffset = 65
	class = 1 '\001'
	pc = 1
	ind = 0
	ind_field = 0
	tag = 12
	len = 63
	tree = (proto_tree *) 0x2000000001a80180
	item = (proto_item *) 0x41
	cnt = 2
	hoffset = 1100567928
	end_offset = 65
	hfi = (header_field_info *) 0x12
#20 0x20000000409aa910 in dissect_ber_sequence_of (implicit_tag=0, 
    pinfo=0x2000000000593610, parent_tree=0x2000000001a807b0, 
    tvb=0x2000000001a82768, offset=0, seq=0x2000000041995568, hf_id=28294, 
    ett_id=8578) at packet-ber.c:1907
No locals.
#21 0x2000000041007fe0 in dissect_tcap_ComponentPortion (implicit_tag=0, 
    tvb=0x2000000001a82768, offset=0, pinfo=0x2000000000593610, 
    tree=0x2000000001a807b0, hf_index=28294) at packet-tcap.c:1310
No locals.
#22 0x2000000041008040 in dissect_components (pinfo=0x2000000000593610, 
    tree=0x2000000001a807b0, tvb=0x2000000001a82768, offset=0)
    at packet-tcap.c:1316
No locals.
#23 0x20000000409a81d0 in dissect_ber_sequence (implicit_tag=115, 
    pinfo=0x2000000000593610, parent_tree=0x9fffffffffffd50c, 
    tvb=0x2000000001a82298, offset=52, seq=0x20000000419955f8, hf_id=-11023, 
    ett_id=-10992) at packet-ber.c:1049
	len = 63
	hoffset = 50
	count = 18
	class = 1 '\001'
	pc = 1
	tag = 12
	eoffset = 115
	class = 2 '\002'
	pc = 115
	ind = 0
	ind_field = 0
	tag = 115
	len = 115
	tree = (proto_tree *) 0x2000000001a807b0
	end_offset = 115
	s_offset = 0
	length_remaining = 18
	next_tvb = (tvbuff_t *) 0x2000000001a82768
#24 0x20000000410084b0 in dissect_tcap_Begin (implicit_tag=1, 
    tvb=0x2000000001a82298, offset=0, pinfo=0x2000000000593610, 
    tree=0x2000000001a80870, hf_index=28282) at packet-tcap.c:1381
No locals.
#25 0x2000000041008510 in dissect_begin_impl (pinfo=0x2000000000593610, 
    tree=0x2000000001a80870, tvb=0x2000000001a82298, offset=0)
    at packet-tcap.c:1387
No locals.
#26 0x20000000409a9630 in dissect_ber_choice (pinfo=0x2000000000593610, 
    parent_tree=0x2000000001a80870, tvb=0x2000000001a82240, offset=115, 
    choice=0x20000000419962d8, hf_id=-1, ett_id=8571, branch_taken=0x0)
    at packet-ber.c:1487
	class = 1 '\001'
	pc = 1
	ind = 0
	tag = 2
	len = 115
	ch = (const ber_choice_t *) 0x20000000419962f0
	tree = (proto_tree *) 0x2000000001a80870
	end_offset = 117
	start_offset = 2
	count = 18
	hoffset = 2
	hfinfo = (header_field_info *) 0x12
	length = 115
	length_remaining = 18
	next_tvb = (tvbuff_t *) 0x2000000001a82298
	first_pass = 1
#27 0x200000004100b1f0 in dissect_tcap_MessageType (implicit_tag=0, 
    tvb=0x2000000001a82240, offset=0, pinfo=0x2000000000593610, 
    tree=0x2000000001a80870, hf_index=-1) at packet-tcap.c:2206
No locals.
#28 0x200000004100b3d0 in dissect_tcap (tvb=0x2000000001a82240, 
    pinfo=0x2000000000593610, parent_tree=0x2000000001a806c0)
    at packet-tcap.c:2270
	tree = (proto_tree *) 0x2000000001a80870
#29 0x2000000040863e30 in call_dissector_through_handle (
    handle=0x2000000000618ea0, tvb=0x2000000001a82240, 
    pinfo=0x2000000000593610, tree=0x2000000001a806c0) at packet.c:383
	saved_proto = 0x200000004145c3f0 "TCAP"
	ret = 18
#30 0x2000000040864c40 in call_dissector_work (handle=0x2000000000618ea0, 
    tvb=0x2000000001a82240, pinfo_arg=0x2000000000593610, 
    tree=0x2000000001a806c0) at packet.c:558
	pinfo = (packet_info * volatile) 0x2000000000593610
	saved_proto = 0x2000000041363c90 "SCCP"
	saved_can_desegment = 0
	ret = 117
	save_writable = 1
	save_dl_src = {type = AT_NONE, len = -1879048192, 
  data = 0x10006 <Address 0x10006 out of bounds>}
	save_dl_dst = {type = 3340530119, len = 29826161, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	save_net_src = {type = 2175940607, len = -477218589, 
  data = 0x10037 <Address 0x10037 out of bounds>}
	save_net_dst = {type = AT_NONE, len = -512225278, 
  data = 0x1001a <Address 0x1001a out of bounds>}
	save_src = {type = 875770112, len = -264241152, 
  data = 0xffec <Address 0xffec out of bounds>}
	save_dst = {type = 4294902015, len = -1, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	saved_layer_names_len = 14
	__PRETTY_FUNCTION__ = "call_dissector_work"
#31 0x20000000408655d0 in dissector_try_port (
    sub_dissectors=0x200000000047bee0, port=8, tvb=0x2000000001a82240, 
    pinfo=0x2000000000593610, tree=0x2000000001a806c0) at packet.c:833
	dtbl_entry = (dtbl_entry_t *) 0x12
	handle = (struct dissector_handle *) 0x2000000000618ea0
	saved_match_port = 3
#32 0x2000000040f26d90 in dissect_sccp_data_param (tvb=0x2000000001a82240, 
    pinfo=0x2000000000593610, tree=0x2000000001a806c0) at packet-sccp.c:1202
No locals.
#33 0x2000000040f279e0 in dissect_sccp_parameter (tvb=0x2000000001a820e0, 
    pinfo=0x2000000000593610, sccp_tree=0x2000000001a809c0, 
    tree=0x2000000001a806c0, parameter_type=15 '\017', offset=16, 
    parameter_length=117) at packet-sccp.c:1412
	parameter_tvb = (tvbuff_t *) 0x12
#34 0x2000000040f27da0 in dissect_sccp_variable_parameter (
    tvb=0x2000000001a820e0, pinfo=0x2000000000593610, 
    sccp_tree=0x2000000001a809c0, tree=0x2000000001a806c0, 
    parameter_type=15 '\017', offset=15) at packet-sccp.c:1499
	parameter_length = 117
	length_length = 1 '\001'
#35 0x2000000040f28a90 in dissect_sccp_message (tvb=0x2000000001a820e0, 
    pinfo=0x2000000000593610, sccp_tree=0x2000000001a809c0, 
    tree=0x2000000001a806c0) at packet-sccp.c:1709
	message_type = 5 '\005'
	variable_pointer1 = 5
	variable_pointer2 = 10
	variable_pointer3 = 15
	optional_pointer = 0
	offset = 1
#36 0x2000000040f2a160 in dissect_sccp (tvb=0x2000000001a820e0, 
    pinfo=0x2000000000593610, tree=0x2000000001a806c0) at packet-sccp.c:1992
	sccp_tree = (proto_tree *) 0x2000000001a809c0
	mtp3_addr_p = (const mtp3_addr_pc_t *) 0x4
#37 0x2000000040863e30 in call_dissector_through_handle (
    handle=0x200000000047bec0, tvb=0x2000000001a820e0, 
    pinfo=0x2000000000593610, tree=0x2000000001a806c0) at packet.c:383
	saved_proto = 0x2000000041363c90 "SCCP"
	ret = 18
#38 0x2000000040864c40 in call_dissector_work (handle=0x200000000047bec0, 
    tvb=0x2000000001a820e0, pinfo_arg=0x2000000000593610, 
    tree=0x2000000001a806c0) at packet.c:558
	pinfo = (packet_info * volatile) 0x2000000000593610
	saved_proto = 0x200000004137d348 "MTP3"
	saved_can_desegment = 0
	ret = 133
	save_writable = 1
	save_dl_src = {type = 1946168947, len = 1936744818, data = 0x0}
	save_dl_dst = {type = 538976288, len = 538976288, 
  data = 0x6173696420656220 <Address 0x6173696420656220 out of bounds>}
	save_net_src = {type = 1684368482, len = 537528878, 
  data = 0x2020202020202020 <Address 0x2020202020202020 out of bounds>}
	save_net_dst = {type = 4294957248, len = -1610612737, 
  data = 0x9fffffffffffd8c4 "\f"}
	save_src = {type = 4294957256, len = -1610612737, 
  data = 0x9fffffffffffd8cc ""}
	save_dst = {type = 4294957264, len = -1610612737, 
  data = 0x4000 <Address 0x4000 out of bounds>}
	saved_layer_names_len = 9
	__PRETTY_FUNCTION__ = "call_dissector_work"
#39 0x20000000408655d0 in dissector_try_port (
    sub_dissectors=0x20000000001b64a0, port=3, tvb=0x2000000001a820e0, 
    pinfo=0x2000000000593610, tree=0x2000000001a806c0) at packet.c:833
	dtbl_entry = (dtbl_entry_t *) 0x12
	handle = (struct dissector_handle *) 0x200000000047bec0
	saved_match_port = 42
#40 0x2000000040dd1bf0 in dissect_mtp3_payload (tvb=0x2000000000593618, 
    pinfo=0x2000000000593610, tree=0x2000000001a806c0) at packet-mtp3.c:471
	service_indicator = 3 '\003'
	payload_tvb = (tvbuff_t *) 0x2000000001a820e0
#41 0x2000000040dd2060 in dissect_mtp3 (tvb=0x2000000001a82088, 
    pinfo=0x2000000000593610, tree=0x2000000001a806c0) at packet-mtp3.c:529
	tap_rec = {addr_opc = {type = MTP3_NET_ADDR_FMT_DEC, pc = 12000, 
    ni = 2 '\002'}, addr_dpc = {type = MTP3_NET_ADDR_FMT_DEC, pc = 9371, 
    ni = 2 '\002'}, si_code = 3 '\003', size = 138}
	mtp3_item = (proto_item *) 0x2000000041a856a8
	mtp3_tree = (proto_tree *) 0x2000000041a85692
#42 0x2000000040863e30 in call_dissector_through_handle (
    handle=0x20000000001b6480, tvb=0x2000000001a82088, 
    pinfo=0x2000000000593610, tree=0x2000000001a806c0) at packet.c:383
	saved_proto = 0x200000004137d348 "MTP3"
	ret = 18
#43 0x2000000040864c40 in call_dissector_work (handle=0x20000000001b6480, 
    tvb=0x2000000001a82088, pinfo_arg=0x2000000000593610, 
    tree=0x2000000001a806c0) at packet.c:558
	pinfo = (packet_info * volatile) 0x2000000000593610
	saved_proto = 0x20000000413624c0 "MTP2"
	saved_can_desegment = 0
	ret = 138
	save_writable = 1
	save_dl_src = {type = 538976288, len = 538976288, 
  data = 0x6e69646f636e6520 <Address 0x6e69646f636e6520 out of bounds>}
	save_dl_dst = {type = 811999335, len = 170814834, 
  data = 0x202020202020200a <Address 0x202020202020200a out of bounds>}
	save_net_src = {type = 1866858528, len = 2019893362, 
  data = 0x74202c656c706d61 <Address 0x74202c656c706d61 out of bounds>}
	save_net_dst = {type = 1109419368, len = 1931498053, 
  data = 0x617a696c61697265 <Address 0x617a696c61697265 out of bounds>}
	save_src = {type = 1852795252, len = 543584032, 
  data = 0x32312065756c6176 <Address 0x32312065756c6176 out of bounds>}
	save_dst = {type = 538970675, len = 538976288, 
  data = 0x797420666f202020 <Address 0x797420666f202020 out of bounds>}
	saved_layer_names_len = 4
	__PRETTY_FUNCTION__ = "call_dissector_work"
#44 0x2000000040867c40 in call_dissector (handle=0x20000000001b6480, 
    tvb=0x2000000001a82088, pinfo=0x2000000000593610, tree=0x2000000001a806c0)
    at packet.c:1701
	ret = 18
	__PRETTY_FUNCTION__ = "call_dissector"
#45 0x2000000040dd01d0 in dissect_mtp2_msu (su_tvb=0x2000000001a82030, 
    pinfo=0x2000000000593610, mtp2_item=0x2000000001a80690, 
    tree=0x2000000001a806c0) at packet-mtp2.c:186
	sif_sio_length = 27788992
	sif_sio_tvb = (tvbuff_t *) 0x12
#46 0x2000000040dd03a0 in dissect_mtp2_su (su_tvb=0x2000000001a82030, 
    pinfo=0x2000000000593610, mtp2_item=0x2000000001a80690, 
    mtp2_tree=0x2000000001a80690, tree=0x2000000001a806c0) at packet-mtp2.c:215
	li = 18
#47 0x2000000040dd0570 in dissect_mtp2 (tvb=0x2000000001a82030, 
    pinfo=0x2000000000593610, tree=0x2000000001a806c0) at packet-mtp2.c:239
	mtp2_item = (proto_item *) 0x2000000001a80690
	mtp2_tree = (proto_tree *) 0x2000000001a80690
#48 0x2000000040863e30 in call_dissector_through_handle (
    handle=0x20000000005e8f80, tvb=0x2000000001a82030, 
    pinfo=0x2000000000593610, tree=0x2000000001a806c0) at packet.c:383
	saved_proto = 0x20000000413624c0 "MTP2"
	ret = 18
#49 0x2000000040864c40 in call_dissector_work (handle=0x20000000005e8f80, 
    tvb=0x2000000001a82030, pinfo_arg=0x2000000000593610, 
    tree=0x2000000001a806c0) at packet.c:558
	pinfo = (packet_info * volatile) 0x2000000000593610
	saved_proto = 0x200000004127ad78 "Frame"
	saved_can_desegment = 0
	ret = 141
	save_writable = 0
	save_dl_src = {type = 538976288, len = 538976288, 
  data = 0x7473655466692020 <Address 0x7473655466692020 out of bounds>}
	save_dl_dst = {type = 1701707776, len = 540876914, 
  data = 0x612d50492d796d27 <Address 0x612d50492d796d27 out of bounds>}
	save_net_src = {type = 1701995620, len = 690451315, 
  data = 0x4c494146203d3d20 <Address 0x4c494146203d3d20 out of bounds>}
	save_net_dst = {type = 4294901760, len = -1610612737, data = 0x0}
	save_src = {type = 825504016, len = 536870912, 
  data = 0x1 <Address 0x1 out of bounds>}
	save_dst = {type = 825504224, len = -1610612737, data = 0x0}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#50 0x20000000408655d0 in dissector_try_port (
    sub_dissectors=0x20000000000a9100, port=42, tvb=0x2000000001a82030, 
    pinfo=0x2000000000593610, tree=0x2000000001a806c0) at packet.c:833
	dtbl_entry = (dtbl_entry_t *) 0x12
	handle = (struct dissector_handle *) 0x20000000005e8f80
	saved_match_port = 0
#51 0x2000000040b9ae80 in dissect_frame (tvb=0x2000000001a82030, 
    pinfo=0x2000000000593610, parent_tree=0x2000000001a806c0)
    at packet-frame.c:233
	except_sn = {except_down = 0x9fffffffffffe760, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffe1e0, except_cleanup = 0x9fffffffffffe1e0}}
	except_ch = {except_id = 0x20000000412a0ea0, except_size = 1, 
  except_obj = {except_id = {except_group = 2314885530818453536, 
      except_code = 2314885530818453536}, 
    except_message = 0x2020202020202020 <Address 0x2020202020202020 out of bounds>, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, <invalid float value>, 
        <invalid float value>, 0, -inf, <invalid float value>, 0, 0, 
        <invalid float value>, 0, 0, 0, 0, -0, 0, <invalid float value>, 
        -nan(0x4928824398483892), -inf, <invalid float value>, 0, 
        <invalid float value>, inf, inf, -0, -0, <invalid float value>, 
        <invalid float value>, 0, 0, 0, <invalid float value>}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	fh_tree = (proto_tree *) 0x2000000001a800c0
	ti = (proto_item * volatile) 0x2000000001a90c30
	ts = {secs = 0, nsecs = 310000}
	cap_len = 141
	pkt_len = 141
	tree = (proto_tree *) 0x2000000001a806c0
	item = (proto_item *) 0x12
#52 0x2000000040863e30 in call_dissector_through_handle (
    handle=0x20000000000a9120, tvb=0x2000000001a82030, 
    pinfo=0x2000000000593610, tree=0x2000000001a806c0) at packet.c:383
	saved_proto = 0x200000004127ad78 "Frame"
	ret = 18
#53 0x2000000040864c40 in call_dissector_work (handle=0x20000000000a9120, 
    tvb=0x2000000001a82030, pinfo_arg=0x2000000000593610, 
    tree=0x2000000001a806c0) at packet.c:558
	pinfo = (packet_info * volatile) 0x2000000000593610
	saved_proto = 0x20000000410faf88 "<Missing Protocol Name>"
	saved_can_desegment = 0
	ret = 141
	save_writable = 536870912
	save_dl_src = {type = 1112145920, len = 536870912, 
  data = 0x9fffffffffffe490 ""}
	save_dl_dst = {type = 825504057, len = 536870912, 
  data = 0x3033000000004200 <Address 0x3033000000004200 out of bounds>}
	save_net_src = {type = 825504128, len = -1610612737, data = 0x0}
	save_net_dst = {type = 1095041032, len = 536870912, 
  data = 0x29 <Address 0x29 out of bounds>}
	save_src = {type = AT_NONE, len = 0, data = 0x0}
	save_dst = {type = 4294960304, len = -1610612737, 
  data = 0x1 <Address 0x1 out of bounds>}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#54 0x2000000040867c40 in call_dissector (handle=0x20000000000a9120, 
    tvb=0x2000000001a82030, pinfo=0x2000000000593610, tree=0x2000000001a806c0)
    at packet.c:1701
	ret = 18
	__PRETTY_FUNCTION__ = "call_dissector"
#55 0x2000000040863a00 in dissect_packet (edt=0x2000000000593600, 
    pseudo_header=0x2000000000593610, 
    pd=0x2000000000633800 "�$?\203\233$��\t", fd=0x9fffffffffffe9e0, cinfo=0x0)
    at packet.c:322
	except_sn = {except_down = 0x0, except_type = XCEPT_CATCHER, 
  except_info = {except_catcher = 0x9fffffffffffe780, 
    except_cleanup = 0x9fffffffffffe780}}
	except_ch = {except_id = 0x20000000410fb178, except_size = 1, 
  except_obj = {except_id = {except_group = 0, except_code = 0}, 
    except_message = 0x0, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 0, 
        <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 
        <invalid float value>, 0, 0}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	__PRETTY_FUNCTION__ = "dissect_packet"
#56 0x200000004085dce0 in epan_dissect_run (edt=0x2000000000593600, 
    pseudo_header=0x2000000000593048, 
    data=0x2000000000633800 "�$?\203\233$��\t", fd=0x9fffffffffffe9e0, 
    cinfo=0x0) at epan.c:155
No locals.
#57 0x2000000000037a10 in process_packet (cf=0x2000000000090ae8, pdh=0x0, 
    offset=2305843009219540480, whdr=0x2000000000593028, 
    pseudo_header=0x2000000000593048, 
    pd=0x2000000000633800 "�$?\203\233$��\t", err=0x9fffffffffffea50)
    at tethereal.c:2355
	fdata = {next = 0x0, prev = 0x0, pfd = 0x0, num = 178, pkt_len = 141, 
  cap_len = 141, cum_bytes = 25098, abs_ts = {secs = 1121412027, 
    nsecs = 351000}, rel_ts = {secs = 0, nsecs = 310000}, del_ts = {secs = 0, 
    nsecs = 2000}, file_off = 27829, lnk_t = 42, flags = {passed_dfilter = 0, 
    encoding = 0, visited = 0, marked = 0, ref_time = 0}, 
  color_filter = 0x1000c}
	create_proto_tree = 5846528
	edt = (epan_dissect_t *) 0x2000000000593600
	passed = 18
#58 0x2000000000036f60 in load_cap_file (cf=0x2000000000090ae8, save_file=0x0, 
    out_file_type=592704) at tethereal.c:2175
	linktype = 5845032
	snapshot_length = 5845032
	pdh = (wtap_dumper *) 0x0
	err = 1462964150
	err_info = (gchar *) 0x1003e <Address 0x1003e out of bounds>
	data_offset = 27829
#59 0x2000000000033e90 in main (argc=6, argv=0x28) at tethereal.c:1356
	opt = 18
	i = 6
	arg_error = 658504
	gpf_path = 0x0
	pf_path = 0x0
	gdp_path = 0x0
	dp_path = 0x0
	gpf_open_errno = 0
	gpf_read_errno = -2147483648
	pf_open_errno = 0
	pf_read_errno = -2147483648
	gdp_open_errno = 65598
	gdp_read_errno = 0
	dp_open_errno = 65516
	dp_read_errno = 0
	err = 2147483647
	capture_filter_specified = 658512
	if_list = (GList *) 0x200000000066a1e8
	if_entry = (GList *) 0x20000000000a0c48
	if_info = (if_info_t *) 0x1
	adapter_index = 1
	p = 0x20000000400d6170 "��\005"
	err_str = "\000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\016@\000\000\000 \000�\016@\000\000\000 \000�\016@\000\000\000 \000�\016@\000\000\000 \000\000\000\000\000\000\000\000\026]\001\000\000\000\000\000\000��\232\000\000\000\000>\000\001\000\000\000\000\000`������\237\025\000\000\000\024\000\000\000\000�\016@\000\000\000 "...
	cant_get_if_list_errstr = (gchar *) 0x1 <Address 0x1 out of bounds>
	list_link_layer_types = 0
	quiet = 0
	save_file = (gchar *) 0x0
	out_file_type = 2
	cf_name = (
    gchar *) 0x2000000000600c80 "/home/buildbot/ethereal/random/editcap.out"
	rfilter = (gchar *) 0x0
	start_capture = 0
	if_text = (gchar *) 0x12 <Address 0x12 out of bounds>
	lt_list = (GList *) 0x20000000000a0c48
	lt_entry = (GList *) 0x200000000066a1e8
	data_link_info = (data_link_info_t *) 0x1
	fcode = {bf_len = 4026531840, bf_insns = 0x10003}
	rfcode = (dfilter_t *) 0x0
	prefs = (e_prefs *) 0x2000000041a8e998
	__PRETTY_FUNCTION__ = "main"


(no stderr output)


Bug 413 posted.