[Buildbot <buildbot-do-not-reply@xxxxxxxxxxxx>]

Problems have been found with the following capture file(s):

http://www.ethereal.com/distribution/buildbot-builds/randpkt/editcap.431f7430.pcap


Error information:
Core was generated by `lt-tethereal'.
Program terminated with signal 11, Segmentation fault.
#0  tvb_length (tvb=0x0) at tvbuff.c:574
574		g_assert(tvb->initialized);
#0  tvb_length (tvb=0x0) at tvbuff.c:574
	__PRETTY_FUNCTION__ = "tvb_length"
#1  0x20000000409a6220 in reassemble_octet_string (pinfo=0x2000000000593610, 
    tree=0x2000000001a80540, tvb=0x2000000001a82990, offset=40, con_len=862, 
    ind=1101461544, out_tvb=0x9fffffffffffca10) at packet-ber.c:543
	octet_segment_table = (GHashTable *) 0x2000000001a940c0
	octet_reassembled_table = (GHashTable *) 0x2000000001a94100
	fd_head = (fragment_data *) 0x0
	next_tvb = (tvbuff_t *) 0x0
	reassembled_tvb = (tvbuff_t *) 0x0
	dst_ref = 0
	start_offset = 4
	fragment = 1
	firstFragment = 1
#2  0x20000000409a6630 in dissect_ber_octet_string (implicit_tag=0, 
    pinfo=0x2000000000593610, tree=0x2000000001a80540, tvb=0x2000000001a82990, 
    offset=4, hf_id=14111, out_tvb=0x9fffffffffffca10) at packet-ber.c:632
	class = 0 '\0'
	pc = 1
	ind = 0
	tag = 22
	len = 862
	end_offset = 866
	i = 1100992856
#3  0x20000000409a6910 in dissect_ber_octet_string_wcb (implicit_tag=0, 
    pinfo=0x2000000000593610, tree=0x2000000001a80540, tvb=0x2000000001a82990, 
    offset=0, hf_id=14111, func=0x20000000425c3a40) at packet-ber.c:666
	out_tvb = (tvbuff_t *) 0x0
#4  0x2000000040d5b160 in dissect_krb5_encrypted_Ticket_data (
    pinfo=0x2000000000593610, tree=0x2000000001a80540, tvb=0x2000000001a82990, 
    offset=0) at packet-kerberos.c:3279
No locals.
#5  0x20000000409a81d0 in dissect_ber_sequence (implicit_tag=879, 
    pinfo=0x2000000000593610, parent_tree=0x9fffffffffffca5c, 
    tvb=0x2000000001a82938, offset=13, seq=0x20000000418273e8, hf_id=-13759, 
    ett_id=-13728) at packet-ber.c:1049
	len = 866
	hoffset = 13
	count = 40
	class = 2 '\002'
	pc = 1
	tag = 2
	eoffset = 879
	class = 0 '\0'
	pc = 1
	ind = 0
	ind_field = 0
	tag = 16
	len = 875
	tree = (proto_tree *) 0x2000000001a80540
	end_offset = 879
	s_offset = 0
	length_remaining = 40
	next_tvb = (tvbuff_t *) 0x2000000001a82990
#6  0x2000000040d5b1e0 in dissect_krb5_Ticket_encrypted (
    pinfo=0x2000000000593610, tree=0x2000000001a80bd0, tvb=0x2000000001a82938, 
    offset=0) at packet-kerberos.c:3297
No locals.
#7  0x20000000409a81d0 in dissect_ber_sequence (implicit_tag=962, 
    pinfo=0x2000000000593610, parent_tree=0x9fffffffffffcaac, 
    tvb=0x2000000001a82608, offset=83, seq=0x200000004182abc0, hf_id=-13679, 
    ett_id=-13648) at packet-ber.c:1049
	len = 879
	hoffset = 83
	count = 40
	class = 2 '\002'
	pc = 1
	tag = 3
	eoffset = 962
	class = 0 '\0'
	pc = 1
	ind = 0
	ind_field = 0
	tag = 16
	len = 958
	tree = (proto_tree *) 0x2000000001a80bd0
	end_offset = 962
	s_offset = 0
	length_remaining = 40
	next_tvb = (tvbuff_t *) 0x2000000001a82938
#8  0x2000000040d5b260 in dissect_krb5_Application_1 (
    pinfo=0x2000000000593610, tree=0x2000000001a80cc0, tvb=0x2000000001a82608, 
    offset=0) at packet-kerberos.c:3316
No locals.
#9  0x20000000409a9630 in dissect_ber_choice (pinfo=0x2000000000593610, 
    parent_tree=0x2000000001a80cc0, tvb=0x2000000001a825b0, offset=962, 
    choice=0x2000000041826b80, hf_id=-1, ett_id=-1, branch_taken=0x0)
    at packet-ber.c:1487
	class = 1 '\001'
	pc = 1
	ind = 0
	tag = 1
	len = 962
	ch = (const ber_choice_t *) 0x2000000041826b80
	tree = (proto_tree *) 0x2000000001a80cc0
	end_offset = 966
	start_offset = 4
	count = 40
	hoffset = 4
	hfinfo = (header_field_info *) 0x28
	length = 962
	length_remaining = 40
	next_tvb = (tvbuff_t *) 0x2000000001a82608
	first_pass = 1
#10 0x2000000040d5b2d0 in dissect_krb5_Ticket (pinfo=0x2000000000593610, 
    tree=0x2000000001a80cc0, tvb=0x2000000001a825b0, offset=0)
    at packet-kerberos.c:3331
No locals.
#11 0x20000000409a81d0 in dissect_ber_sequence (implicit_tag=993, 
    pinfo=0x2000000000593610, parent_tree=0x9fffffffffffcb1c, 
    tvb=0x2000000001a823f8, offset=27, seq=0x2000000041827460, hf_id=-13567, 
    ett_id=-13536) at packet-ber.c:1049
	len = 966
	hoffset = 27
	count = 40
	class = 2 '\002'
	pc = 1
	tag = 3
	eoffset = 993
	class = 0 '\0'
	pc = 1
	ind = 0
	ind_field = 0
	tag = 16
	len = 1158
	tree = (proto_tree *) 0x2000000001a80cc0
	end_offset = 1162
	s_offset = 0
	length_remaining = 40
	next_tvb = (tvbuff_t *) 0x2000000001a825b0
#12 0x2000000040d5b340 in dissect_krb5_AP_REQ (pinfo=0x2000000000593610, 
    tree=0x2000000001a80cc0, tvb=0x2000000001a823f8, offset=0)
    at packet-kerberos.c:3364
No locals.
#13 0x20000000409a9630 in dissect_ber_choice (pinfo=0x2000000000593610, 
    parent_tree=0x2000000001a80cc0, tvb=0x2000000001a823a0, offset=1162, 
    choice=0x2000000041826750, hf_id=-1, ett_id=-1, branch_taken=0x0)
    at packet-ber.c:1487
	class = 1 '\001'
	pc = 1
	ind = 0
	tag = 14
	len = 1162
	ch = (const ber_choice_t *) 0x20000000418267f8
	tree = (proto_tree *) 0x2000000001a80cc0
	end_offset = 1166
	start_offset = 4
	count = 40
	hoffset = 4
	hfinfo = (header_field_info *) 0x28
	length = 1162
	length_remaining = 40
	next_tvb = (tvbuff_t *) 0x2000000001a823f8
	first_pass = 1
#14 0x2000000040d561c0 in dissect_krb5_application_choice (
    pinfo=0x2000000000593610, tree=0x2000000001a80cc0, tvb=0x2000000001a823a0, 
    offset=0) at packet-kerberos.c:1344
No locals.
#15 0x20000000409a6a00 in dissect_ber_octet_string_wcb (implicit_tag=1170, 
    pinfo=0x2000000000593610, tree=0x2000000001a80cc0, tvb=0x2000000001a82348, 
    offset=1170, hf_id=14114, func=0x20000000425c3980) at packet-ber.c:670
	out_tvb = (tvbuff_t *) 0x2000000001a823a0
#16 0x2000000040d58190 in dissect_krb5_PA_DATA_value (
    pinfo=0x2000000000593610, parent_tree=0x2000000001a80d20, 
    tvb=0x2000000001a82348, offset=0) at packet-kerberos.c:2014
	tree = (proto_tree *) 0x28
#17 0x20000000409a81d0 in dissect_ber_sequence (implicit_tag=1187, 
    pinfo=0x2000000000593610, parent_tree=0x9fffffffffffcb9c, 
    tvb=0x2000000001a82298, offset=17, seq=0x2000000041826e20, hf_id=-13439, 
    ett_id=-13408) at packet-ber.c:1049
	len = 1170
	hoffset = 17
	count = 40
	class = 2 '\002'
	pc = 1
	tag = 2
	eoffset = 1187
	class = 0 '\0'
	pc = 1
	ind = 0
	ind_field = 0
	tag = 16
	len = 1179
	tree = (proto_tree *) 0x2000000001a80d20
	end_offset = 1187
	s_offset = 4
	length_remaining = 40
	next_tvb = (tvbuff_t *) 0x2000000001a82348
#18 0x2000000040d58430 in dissect_krb5_PA_DATA (pinfo=0x2000000000593610, 
    tree=0x2000000001a80d20, tvb=0x2000000001a82298, offset=4)
    at packet-kerberos.c:2049
No locals.
#19 0x20000000409aa7d0 in dissect_ber_sq_of (implicit_tag=4, type=16, 
    pinfo=0x2000000000593610, parent_tree=0x2000000041826e58, 
    tvb=0x2000000001a82298, offset=8, seq=0x2000000041826e50, hf_id=-13344, 
    ett_id=5354) at packet-ber.c:1879
	len = 1179
	hoffset = 4
	class = 0 '\0'
	pc = 1
	tag = 16
	eoffset = 1187
	class = 0 '\0'
	pc = 1
	ind = 0
	ind_field = 0
	tag = 16
	len = 37
	tree = (proto_tree *) 0x2000000001a80d20
	item = (proto_item *) 0x4a3
	cnt = 4
	hoffset = 1099066976
	end_offset = 39
	hfi = (header_field_info *) 0x28
#20 0x20000000409aa910 in dissect_ber_sequence_of (implicit_tag=0, 
    pinfo=0x2000000000593610, parent_tree=0x2000000001a80de0, 
    tvb=0x2000000001a82298, offset=0, seq=0x2000000041826e50, hf_id=14146, 
    ett_id=5354) at packet-ber.c:1907
No locals.
#21 0x2000000040d584b0 in dissect_krb5_padata (pinfo=0x2000000000593610, 
    tree=0x2000000001a80de0, tvb=0x2000000001a82298, offset=0)
    at packet-kerberos.c:2067
No locals.
#22 0x20000000409a81d0 in dissect_ber_sequence (implicit_tag=1205, 
    pinfo=0x2000000000593610, parent_tree=0x9fffffffffffcc3c, 
    tvb=0x2000000001a82190, offset=18, seq=0x2000000041827310, hf_id=-13279, 
    ett_id=-13248) at packet-ber.c:1049
	len = 1187
	hoffset = 18
	count = 40
	class = 2 '\002'
	pc = 1
	tag = 3
	eoffset = 1205
	class = 0 '\0'
	pc = 1
	ind = 0
	ind_field = 0
	tag = 16
	len = 1356
	tree = (proto_tree *) 0x2000000001a80de0
	end_offset = 1360
	s_offset = 0
	length_remaining = 40
	next_tvb = (tvbuff_t *) 0x2000000001a82298
#23 0x2000000040d5abe0 in dissect_krb5_KDC_REQ (pinfo=0x2000000000593610, 
    tree=0x2000000001a80de0, tvb=0x2000000001a82190, offset=0)
    at packet-kerberos.c:3152
No locals.
#24 0x20000000409a9630 in dissect_ber_choice (pinfo=0x2000000000593610, 
    parent_tree=0x2000000001a80de0, tvb=0x2000000001a82138, offset=1360, 
    choice=0x2000000041826750, hf_id=-1, ett_id=-1, branch_taken=0x0)
    at packet-ber.c:1487
	class = 1 '\001'
	pc = 1
	ind = 0
	tag = 12
	len = 1360
	ch = (const ber_choice_t *) 0x20000000418267c8
	tree = (proto_tree *) 0x2000000001a80de0
	end_offset = 1364
	start_offset = 4
	count = 40
	hoffset = 4
	hfinfo = (header_field_info *) 0x28
	length = 1360
	length_remaining = 40
	next_tvb = (tvbuff_t *) 0x2000000001a82190
	first_pass = 1
#25 0x2000000040d5ca00 in dissect_kerberos_common (tvb=0x2000000001a82138, 
    pinfo=0x2000000000593610, tree=0x2000000001a809f0, dci=1, 
    do_col_protocol=1, have_rm=0, cb=0x0) at packet-kerberos.c:3896
	except_sn = {except_down = 0x9fffffffffffd8f0, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffcca0, except_cleanup = 0x9fffffffffffcca0}}
	except_ch = {except_id = 0x20000000413521c8, except_size = 1, 
  except_obj = {except_id = {except_group = 2314885530817006139, 
      except_code = 2314885530818453536}, 
    except_message = 0x6360202d20202020 <Address 0x6360202d20202020 out of bounds>, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, <invalid float value>, 
        <invalid float value>, 0, -inf, <invalid float value>, 0, 0, 
        <invalid float value>, 0, 0, 0, 0, -0, 0, <invalid float value>, 
        -nan(0x4928824398483892), -inf, <invalid float value>, 0, 
        <invalid float value>, inf, inf, -0, -0, <invalid float value>, 
        <invalid float value>, 0, <invalid float value>, 0, 
        <invalid float value>}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	offset = 0
	kerberos_tree = (proto_tree *) 0x2000000001a80de0
	item = (proto_item *) 0x2000000001a80de0
	saved_private_data = (void *) 0x0
	krb_rm = 5846544
	__PRETTY_FUNCTION__ = "dissect_kerberos_common"
#26 0x2000000040d5bf30 in dissect_kerberos_udp (tvb=0x2000000001a82138, 
    pinfo=0x2000000000593610, tree=0x2000000001a809f0)
    at packet-kerberos.c:3738
No locals.
#27 0x2000000040863de0 in call_dissector_through_handle (
    handle=0x20000000005e83c0, tvb=0x2000000001a82138, 
    pinfo=0x2000000000593610, tree=0x2000000001a809f0) at packet.c:381
	saved_proto = 0x200000004134fa30 "KRB5"
	ret = 40
#28 0x2000000040864c40 in call_dissector_work (handle=0x20000000005e83c0, 
    tvb=0x2000000001a82138, pinfo_arg=0x2000000000593610, 
    tree=0x2000000001a809f0) at packet.c:558
	pinfo = (packet_info * volatile) 0x2000000000593610
	saved_proto = 0x20000000412f8ab8 "UDP"
	saved_can_desegment = 0
	ret = 0
	save_writable = 536870912
	save_dl_src = {type = 1297, len = -1073741824, 
  data = 0x8000000000000838 "\0206Y"}
	save_dl_dst = {type = AT_NONE, len = 0, 
  data = 0x4101 <Address 0x4101 out of bounds>}
	save_net_src = {type = AT_NONE, len = 0, 
  data = 0x40fefda860 <Address 0x40fefda860 out of bounds>}
	save_net_dst = {type = 943206707, len = 0, data = 0x0}
	save_src = {type = 943194163, len = -2147483648, 
  data = 0x9fffffffffffceb0 ""}
	save_dst = {type = 1697670755, len = 0, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	saved_layer_names_len = 10
	__PRETTY_FUNCTION__ = "call_dissector_work"
#29 0x20000000408655d0 in dissector_try_port (
    sub_dissectors=0x200000000054c7e0, port=88, tvb=0x2000000001a82138, 
    pinfo=0x2000000000593610, tree=0x2000000001a809f0) at packet.c:833
	dtbl_entry = (dtbl_entry_t *) 0x28
	handle = (struct dissector_handle *) 0x20000000005e83c0
	saved_match_port = 17
#30 0x2000000041035320 in decode_udp_ports (tvb=0x2000000001a820e0, offset=8, 
    pinfo=0x2000000000593610, tree=0x2000000001a809f0, uh_sport=3118, 
    uh_dport=3118, uh_ulen=1372) at packet-udp.c:134
	next_tvb = (tvbuff_t *) 0x2000000001a82138
	low_port = 88
	high_port = 3118
	len = 27795768
	reported_len = 40
#31 0x2000000041036230 in dissect_udp (tvb=0x2000000001a820e0, 
    pinfo=0x2000000000593610, tree=0x2000000001a809f0) at packet-udp.c:296
	udp_tree = (proto_tree *) 0x2000000001a80f90
	ti = (proto_item *) 0x28
	len = 40
	reported_len = 1101469456
	cksum_vec = {{ptr = 0x2000000001a9201a "�\037\001h�\037\001e\f.", 
    len = 4}, {ptr = 0x2000000001a9201e "�\037\001e\f.", len = 4}, {
    ptr = 0x9fffffffffffd280 "", len = 4}, {ptr = 0x2000000001a92022 "\f.", 
    len = 1372}}
	phdr = {1543835904, 0}
	computed_cksum = 26387
	offset = 8
	udphstruct = {{uh_sport = 0, uh_dport = 0, uh_ulen = 0, uh_sum = 0, 
    ip_src = {type = AT_NONE, len = 0, data = 0x0}, ip_dst = {type = AT_NONE, 
      len = 0, data = 0x0}}, {uh_sport = 3118, uh_dport = 88, uh_ulen = 1372, 
    uh_sum = 48039, ip_src = {type = AT_IPv4, len = 4, 
      data = 0x2000000001a9201a "�\037\001h�\037\001e\f."}, ip_dst = {
      type = AT_IPv4, len = 4, data = 0x2000000001a9201e "�\037\001e\f."}}, {
    uh_sport = 0, uh_dport = 0, uh_ulen = 0, uh_sum = 0, ip_src = {
      type = AT_NONE, len = 0, data = 0x0}, ip_dst = {type = AT_NONE, len = 0, 
      data = 0x0}}, {uh_sport = 0, uh_dport = 0, uh_ulen = 0, uh_sum = 0, 
    ip_src = {type = AT_NONE, len = 0, data = 0x0}, ip_dst = {type = AT_NONE, 
      len = 0, data = 0x0}}}
	udph = (e_udphdr *) 0x2000000041a8ca68
	udph_count = 1
#32 0x2000000040863e30 in call_dissector_through_handle (
    handle=0x2000000000619140, tvb=0x2000000001a820e0, 
    pinfo=0x2000000000593610, tree=0x2000000001a809f0) at packet.c:383
	saved_proto = 0x20000000412f8ab8 "UDP"
	ret = 40
#33 0x2000000040864c40 in call_dissector_work (handle=0x2000000000619140, 
    tvb=0x2000000001a820e0, pinfo_arg=0x2000000000593610, 
    tree=0x2000000001a809f0) at packet.c:558
	pinfo = (packet_info * volatile) 0x2000000000593610
	saved_proto = 0x20000000411c94d8 "IP"
	saved_can_desegment = 0
	ret = 760
	save_writable = 536870912
	save_dl_src = {type = 1635123301, len = 1936029036, 
  data = 0x7461687420666f20 <Address 0x7461687420666f20 out of bounds>}
	save_dl_dst = {type = 1650553888, len = 1931961708, 
  data = 0x202020202020200a <Address 0x202020202020200a out of bounds>}
	save_net_src = {type = 538976288, len = 538976288, 
  data = 0x7065636e6f632020 <Address 0x7065636e6f632020 out of bounds>}
	save_net_dst = {type = 1818326388, len = 2003792416, 
  data = 0x6261206572612073 <Address 0x6261206572612073 out of bounds>}
	save_src = {type = 1948254316, len = 1700929647, 
  data = 0x34696669646f6d20 <Address 0x34696669646f6d20 out of bounds>}
	save_dst = {type = 859190322, len = -1610612737, 
  data = 0x1400000031 <Address 0x1400000031 out of bounds>}
	saved_layer_names_len = 6
	__PRETTY_FUNCTION__ = "call_dissector_work"
#34 0x20000000408655d0 in dissector_try_port (
    sub_dissectors=0x20000000000a9c80, port=17, tvb=0x2000000001a820e0, 
    pinfo=0x2000000000593610, tree=0x2000000001a809f0) at packet.c:833
	dtbl_entry = (dtbl_entry_t *) 0x28
	handle = (struct dissector_handle *) 0x2000000000619140
	saved_match_port = 2048
#35 0x2000000040cff620 in dissect_ip (tvb=0x2000000001a82088, 
    pinfo=0x2000000000593610, parent_tree=0x2000000001a809f0)
    at packet-ip.c:1176
	ip_tree = (proto_tree *) 0x2000000001a80690
	field_tree = (proto_tree *) 0x20000000005936ec
	ti = (proto_item *) 0x2000000001a80690
	tf = (proto_item *) 0x11
	addr = 1694572460
	offset = 20
	hlen = 20
	optlen = 5846768
	flags = 0
	nxt = 17 '\021'
	ipsum = 0
	ipfd_head = (fragment_data *) 0x0
	next_tvb = (tvbuff_t *) 0x2000000001a820e0
	update_col_info = 1
	save_fragmented = 0
	eip_arr = {{ip_v_hl = 69 'E', ip_tos = 0 '\0', ip_len = 391, 
    ip_id = 46603, ip_off = 16384, ip_ttl = 0 '\0', ip_p = 6 '\006', 
    ip_sum = 59481, ip_src = {type = AT_IPv4, len = 4, 
      data = 0x200000000063381a ""}, ip_dst = {type = AT_IPv4, len = 4, 
      data = 0x200000000063381e "�a\202\003�0\202\003��\003\002\001\005�\0324\030SUB1.W2K3.VMNET1.mM.BASE�(0&�\003\002\001\002�\0370\035\033\006krbtgt\033\023W2I3.VMNET1.VM.BASE�\202\003o0\202\003k9\003\002\001\027�\202\003b6\202\003^(\"\232�H\nu��\210A\203I�6\022\225\203���>\033\222�\231аe��eˤ�\216\fc�jXxL~\033\016�&�e�K\237q��\002\211-\233\1776\233���\035�\022\206G�h\032t|2\222�\206\"1�\v����\b]�*O��"...}}, {ip_v_hl = 69 'E', ip_tos = 0 '\0', ip_len = 1500, 
    ip_id = 1635, ip_off = 16384, ip_ttl = 0 '\0', ip_p = 6 '\006', 
    ip_sum = 54189, ip_src = {type = AT_IPv4, len = 4, 
      data = 0x2000000001a9201a "�\037\001h�\037\001e\f."}, ip_dst = {
      type = AT_IPv4, len = 4, data = 0x2000000001a9201e "�\037\001e\f."}}, {
    ip_v_hl = 69 'E', ip_tos = 0 '\0', ip_len = 780, ip_id = 1636, 
    ip_off = 16384, ip_ttl = 0 '\0', ip_p = 6 '\006', ip_sum = 38524, 
    ip_src = {type = AT_IPv4, len = 4, 
      data = 0x2000000001a9201a "�\037\001h�\037\001e\f."}, ip_dst = {
      type = AT_IPv4, len = 4, data = 0x2000000001a9201e "�\037\001e\f."}}, {
    ip_v_hl = 69 'E', ip_tos = 0 '\0', ip_len = 1392, ip_id = 46606, 
    ip_off = 0, ip_ttl = 0 '\0', ip_p = 17 '\021', ip_sum = 9315, ip_src = {
      type = AT_IPv4, len = 4, 
      data = 0x2000000001a9201a "�\037\001h�\037\001e\f."}, ip_dst = {
      type = AT_IPv4, len = 4, data = 0x2000000001a9201e "�\037\001e\f."}}}
	eip_current = 3
	iph = (e_ip *) 0x2000000041a84a30
	src_addr = (const guchar *) 0x2000000001a820e0 "\001"
	dst_addr = (const guchar *) 0x2000000001a820e0 "\001"
	src32 = 2887713128
	dst32 = 2887713125
	tree = (proto_tree *) 0x2000000001a809f0
	item = (proto_item *) 0x28
	checksum_tree = (proto_tree *) 0x20000000005936ec
#36 0x2000000040863e30 in call_dissector_through_handle (
    handle=0x20000000000a9ca0, tvb=0x2000000001a82088, 
    pinfo=0x2000000000593610, tree=0x2000000001a809f0) at packet.c:383
	saved_proto = 0x20000000411c94d8 "IP"
	ret = 40
#37 0x2000000040864c40 in call_dissector_work (handle=0x20000000000a9ca0, 
    tvb=0x2000000001a82088, pinfo_arg=0x2000000000593610, 
    tree=0x2000000001a809f0) at packet.c:558
	pinfo = (packet_info * volatile) 0x2000000000593610
	saved_proto = 0x20000000412709f0 "Ethernet"
	saved_can_desegment = 0
	ret = 46
	save_writable = 0
	save_dl_src = {type = 1299185789, len = 1866678857, 
  data = 0x65636e61696c706d <Address 0x65636e61696c706d out of bounds>}
	save_dl_dst = {type = 3435921523, len = 214748364, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	save_net_src = {type = 3368026110, len = -858993460, 
  data = 0x1003a <Address 0x1003a out of bounds>}
	save_net_dst = {type = AT_NONE, len = -1577058288, 
  data = 0x10018 <Address 0x10018 out of bounds>}
	save_src = {type = AT_NONE, len = -1879048192, 
  data = 0xffec <Address 0xffec out of bounds>}
	save_dst = {type = 6356992, len = 536870912, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	saved_layer_names_len = 3
	__PRETTY_FUNCTION__ = "call_dissector_work"
#38 0x20000000408655d0 in dissector_try_port (
    sub_dissectors=0x20000000000a8e20, port=2048, tvb=0x2000000001a82088, 
    pinfo=0x2000000000593610, tree=0x2000000001a809f0) at packet.c:833
	dtbl_entry = (dtbl_entry_t *) 0x28
	handle = (struct dissector_handle *) 0x20000000000a9ca0
	saved_match_port = 1
#39 0x2000000040b5f090 in ethertype (etype=2048, tvb=0x2000000001a82030, 
    offset_after_etype=14, pinfo=0x2000000000593610, tree=0x2000000001a809f0, 
    fh_tree=0x2000000001a80840, etype_id=6242, trailer_id=6244, fcs_len=-1)
    at packet-ethertype.c:187
	except_sn = {except_down = 0x9fffffffffffe1c0, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffd910, except_cleanup = 0x9fffffffffffd910}}
	except_ch = {except_id = 0x2000000041289750, except_size = 1, 
  except_obj = {except_id = {except_group = 1, except_code = 2}, 
    except_message = 0x0, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 0, 
        <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 0, 0, 0}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	description = 0x28 <Address 0x28 out of bounds>
	next_tvb = (tvbuff_t *) 0x2000000001a82088
	length_before = 1392
	dissector_found = 0
	saved_proto = 0x20000000412709f0 "Ethernet"
	__PRETTY_FUNCTION__ = "ethertype"
#40 0x2000000040b5ac60 in dissect_eth_common (tvb=0x2000000001a82030, 
    pinfo=0x2000000000593610, parent_tree=0x2000000001a809f0, fcs_len=-1)
    at packet-eth.c:311
	ehdr = (eth_hdr * volatile) 0x2000000041a80160
	is_802_2 = 1970037110
	fh_tree = (proto_tree * volatile) 0x2000000001a80840
	src_addr = (const guint8 *) 0x2000000001a92006 ""
	dst_addr = (const guint8 *) 0x2000000001a92000 ""
	ehdrs = {{dst = {type = AT_ETHER, len = 6, 
      data = 0x2000000001a92000 ""}, src = {type = AT_ETHER, len = 6, 
      data = 0x2000000001a92006 ""}, type = 2048}, {dst = {type = AT_ETHER, 
      len = 6, data = 0x2000000001a92000 ""}, src = {type = AT_ETHER, len = 6, 
      data = 0x2000000001a92006 ""}, type = 2048}, {dst = {type = AT_ETHER, 
      len = 6, data = 0x2000000001a92000 ""}, src = {type = AT_ETHER, len = 6, 
      data = 0x2000000001a92006 ""}, type = 2048}, {dst = {type = AT_ETHER, 
      len = 6, data = 0x2000000001a92000 ""}, src = {type = AT_ETHER, len = 6, 
      data = 0x2000000001a92006 ""}, type = 19968}}
	ehdr_num = 0
	tree = (proto_tree * volatile) 0x2000000001a809f0
#41 0x2000000040b5afb0 in dissect_eth_maybefcs (tvb=0x2000000001a82030, 
    pinfo=0x2000000000593610, tree=0x2000000001a809f0) at packet-eth.c:407
No locals.
#42 0x2000000040863e30 in call_dissector_through_handle (
    handle=0x200000000056ae00, tvb=0x2000000001a82030, 
    pinfo=0x2000000000593610, tree=0x2000000001a809f0) at packet.c:383
	saved_proto = 0x20000000412709f0 "Ethernet"
	ret = 40
#43 0x2000000040864c40 in call_dissector_work (handle=0x200000000056ae00, 
    tvb=0x2000000001a82030, pinfo_arg=0x2000000000593610, 
    tree=0x2000000001a809f0) at packet.c:558
	pinfo = (packet_info * volatile) 0x2000000000593610
	saved_proto = 0x200000004127ad78 "Frame"
	saved_can_desegment = 0
	ret = 60
	save_writable = 0
	save_dl_src = {type = 538976288, len = 538976288, 
  data = 0x7473655466692020 <Address 0x7473655466692020 out of bounds>}
	save_dl_dst = {type = 1701707776, len = 540876914, 
  data = 0x612d50492d796d27 <Address 0x612d50492d796d27 out of bounds>}
	save_net_src = {type = 1701995620, len = 690451315, 
  data = 0x4c494146203d3d20 <Address 0x4c494146203d3d20 out of bounds>}
	save_net_dst = {type = 4294901952, len = -1610612737, data = 0x0}
	save_src = {type = 909128753, len = 536870912, 
  data = 0x1 <Address 0x1 out of bounds>}
	save_dst = {type = 909128753, len = 536870912, 
  data = 0x20000000400da200 "z�P�"}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#44 0x20000000408655d0 in dissector_try_port (
    sub_dissectors=0x20000000000a9100, port=1, tvb=0x2000000001a82030, 
    pinfo=0x2000000000593610, tree=0x2000000001a809f0) at packet.c:833
	dtbl_entry = (dtbl_entry_t *) 0x28
	handle = (struct dissector_handle *) 0x200000000056ae00
	saved_match_port = 0
#45 0x2000000040b9ae80 in dissect_frame (tvb=0x2000000001a82030, 
    pinfo=0x2000000000593610, parent_tree=0x2000000001a809f0)
    at packet-frame.c:233
	except_sn = {except_down = 0x9fffffffffffe760, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffe1e0, except_cleanup = 0x9fffffffffffe1e0}}
	except_ch = {except_id = 0x20000000412a0ea0, except_size = 1, 
  except_obj = {except_id = {except_group = 2305843010288329728, 
      except_code = 65598}, 
    except_message = 0xc8f9999995a02a00 <Address 0xc8f9999995a02a00 out of bounds>, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, <invalid float value>, 
        <invalid float value>, 0, -inf, <invalid float value>, 0, 0, 
        <invalid float value>, 0, 0, 0, 0, -0, 0, <invalid float value>, 
        -nan(0x4928824398483892), -inf, <invalid float value>, 0, 
        <invalid float value>, inf, inf, -0, -0, <invalid float value>, 
        <invalid float value>, 0, <invalid float value>, 0, 
        <invalid float value>}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	fh_tree = (proto_tree *) 0x2000000001a80930
	ti = (proto_item * volatile) 0x2000000001a80630
	ts = {secs = 0, nsecs = 686715000}
	cap_len = 1406
	pkt_len = 1406
	tree = (proto_tree *) 0x2000000001a809f0
	item = (proto_item *) 0x28
#46 0x2000000040863e30 in call_dissector_through_handle (
    handle=0x20000000000a9120, tvb=0x2000000001a82030, 
    pinfo=0x2000000000593610, tree=0x2000000001a809f0) at packet.c:383
	saved_proto = 0x200000004127ad78 "Frame"
	ret = 40
#47 0x2000000040864c40 in call_dissector_work (handle=0x20000000000a9120, 
    tvb=0x2000000001a82030, pinfo_arg=0x2000000000593610, 
    tree=0x2000000001a809f0) at packet.c:558
	pinfo = (packet_info * volatile) 0x2000000000593610
	saved_proto = 0x20000000410faf88 "<Missing Protocol Name>"
	saved_can_desegment = 0
	ret = 60
	save_writable = 536870912
	save_dl_src = {type = 1074593792, len = 536870912, 
  data = 0x33393136400dae00 <Address 0x33393136400dae00 out of bounds>}
	save_dl_dst = {type = 909128753, len = 536870912, 
  data = 0x39373800400db200 <Address 0x39373800400db200 out of bounds>}
	save_net_src = {type = 909128753, len = -1610612737, data = 0x0}
	save_net_dst = {type = 1092419720, len = 536870912, 
  data = 0x25 <Address 0x25 out of bounds>}
	save_src = {type = 1074641920, len = 536870912, 
  data = 0x20000000400dbe00 "z�P�"}
	save_dst = {type = AT_NONE, len = 0, data = 0x20000000400ee200 "z�P�"}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#48 0x2000000040867c40 in call_dissector (handle=0x20000000000a9120, 
    tvb=0x2000000001a82030, pinfo=0x2000000000593610, tree=0x2000000001a809f0)
    at packet.c:1701
	ret = 40
	__PRETTY_FUNCTION__ = "call_dissector"
#49 0x2000000040863a00 in dissect_packet (edt=0x2000000000593600, 
    pseudo_header=0x2000000000593610, pd=0x2000000001a92000 "", 
    fd=0x9fffffffffffe9e0, cinfo=0x0) at packet.c:322
	except_sn = {except_down = 0x0, except_type = XCEPT_CATCHER, 
  except_info = {except_catcher = 0x9fffffffffffe780, 
    except_cleanup = 0x9fffffffffffe780}}
	except_ch = {except_id = 0x20000000410fb178, except_size = 1, 
  except_obj = {except_id = {except_group = 0, except_code = 0}, 
    except_message = 0x0, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 0, 
        <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 
        <invalid float value>, 0, 0}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	__PRETTY_FUNCTION__ = "dissect_packet"
#50 0x200000004085dce0 in epan_dissect_run (edt=0x2000000000593600, 
    pseudo_header=0x2000000000593048, data=0x2000000001a92000 "", 
    fd=0x9fffffffffffe9e0, cinfo=0x0) at epan.c:155
No locals.
#51 0x2000000000037a10 in process_packet (cf=0x2000000000090ae8, pdh=0x0, 
    offset=2305843009219540480, whdr=0x2000000000593028, 
    pseudo_header=0x2000000000593048, pd=0x2000000001a92000 "", 
    err=0x9fffffffffffea50) at tethereal.c:2355
	fdata = {next = 0x0, prev = 0x0, pfd = 0x0, num = 8, pkt_len = 1406, 
  cap_len = 1406, cum_bytes = 4363, abs_ts = {secs = 1103541634, 
    nsecs = 739853000}, rel_ts = {secs = 0, nsecs = 686715000}, del_ts = {
    secs = 0, nsecs = 677922000}, file_off = 3109, lnk_t = 1, flags = {
    passed_dfilter = 0, encoding = 0, visited = 0, marked = 0, ref_time = 0}, 
  color_filter = 0x1000c}
	create_proto_tree = 5846528
	edt = (epan_dissect_t *) 0x2000000000593600
	passed = 40
#52 0x2000000000036f60 in load_cap_file (cf=0x2000000000090ae8, save_file=0x0, 
    out_file_type=592704) at tethereal.c:2175
	linktype = 5845032
	snapshot_length = 5845032
	pdh = (wtap_dumper *) 0x0
	err = 1462964150
	err_info = (gchar *) 0x1003e <Address 0x1003e out of bounds>
	data_offset = 3109
#53 0x2000000000033e90 in main (argc=6, argv=0x28) at tethereal.c:1356
	opt = 40
	i = 6
	arg_error = 658504
	gpf_path = 0x0
	pf_path = 0x0
	gdp_path = 0x0
	dp_path = 0x0
	gpf_open_errno = 0
	gpf_read_errno = -2147483648
	pf_open_errno = 0
	pf_read_errno = -2147483648
	gdp_open_errno = 65598
	gdp_read_errno = 0
	dp_open_errno = 65516
	dp_read_errno = 0
	err = 2147483647
	capture_filter_specified = 658512
	if_list = (GList *) 0x200000000066a1e8
	if_entry = (GList *) 0x20000000000a0c48
	if_info = (if_info_t *) 0x1
	adapter_index = 1
	p = 0x20000000400d6170 "��\005"
	err_str = "\000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\016@\000\000\000 \000�\016@\000\000\000 \000�\016@\000\000\000 \000�\016@\000\000\000 \000\000\000\000\000\000\000\000\026]\001\000\000\000\000\000\000��\232\000\000\000\000>\000\001\000\000\000\000\000`������\237\025\000\000\000\024\000\000\000\000�\016@\000\000\000 "...
	cant_get_if_list_errstr = (gchar *) 0x1 <Address 0x1 out of bounds>
	list_link_layer_types = 0
	quiet = 0
	save_file = (gchar *) 0x0
	out_file_type = 2
	cf_name = (
    gchar *) 0x2000000000600c80 "/home/buildbot/ethereal/random/editcap.out"
	rfilter = (gchar *) 0x0
	start_capture = 0
	if_text = (gchar *) 0x28 <Address 0x28 out of bounds>
	lt_list = (GList *) 0x20000000000a0c48
	lt_entry = (GList *) 0x200000000066a1e8
	data_link_info = (data_link_info_t *) 0x1
	fcode = {bf_len = 4026531840, bf_insns = 0x10003}
	rfcode = (dfilter_t *) 0x0
	prefs = (e_prefs *) 0x2000000041a8e998
	__PRETTY_FUNCTION__ = "main"


(no stderr output)


Bug 416 posted.