[Buildbot <buildbot-do-not-reply@xxxxxxxxxxxx>]

Problems have been found with the following capture file(s):

http://www.ethereal.com/distribution/buildbot-builds/randpkt/editcap.436b1c6a.pcap


Error information:
Core was generated by `lt-tethereal'.
Program terminated with signal 11, Segmentation fault.
#0  dissect_h248_T_errorCode (implicit_tag=1, tvb=0x2000000000689b48, 
    offset=270, pinfo=0x2000000000633410, tree=0x2000000001b24d20, 
    hf_index=270) at packet-h248.c:1945
1945	    h248_cmdmsg->error_code = val;
#0  dissect_h248_T_errorCode (implicit_tag=1, tvb=0x2000000000689b48, 
    offset=270, pinfo=0x2000000000633410, tree=0x2000000001b24d20, 
    hf_index=270) at packet-h248.c:1945
	val = 0
#1  0x2000000040df8070 in dissect_errorCode_impl (pinfo=0x2000000000633410, 
    tree=0x2000000001b24d20, tvb=0x2000000000689b48, offset=0)
    at packet-h248.c:1952
No locals.
#2  0x2000000040af2580 in dissect_ber_sequence (implicit_tag=274, 
    pinfo=0x2000000000633410, parent_tree=0x9fffffffffffda8c, 
    tvb=0x2000000000689af0, offset=4, seq=0x2000000041a8a178, hf_id=-9615, 
    ett_id=-9584) at packet-ber.c:1104
	len = 270
	hoffset = 4
	count = 270
	class = 2 '\002'
	pc = 1
	tag = 0
	eoffset = 274
	class = 4 '\004'
	pc = 274
	ind = 0
	ind_field = 0
	tag = 129
	len = 274
	tree = (proto_tree *) 0x2000000001b24d20
	end_offset = 274
	s_offset = 0
	length_remaining = 270
	next_tvb = (tvbuff_t *) 0x2000000000689b48
#3  0x2000000040df81b0 in dissect_h248_ErrorDescriptor (implicit_tag=1, 
    tvb=0x2000000000689af0, offset=0, pinfo=0x2000000000633410, 
    tree=0x2000000001b24d50, hf_index=12413) at packet-h248.c:1978
No locals.
#4  0x2000000040df8210 in dissect_messageError_impl (pinfo=0x2000000000633410, 
    tree=0x2000000001b24d50, tvb=0x2000000000689af0, offset=0)
    at packet-h248.c:1984
No locals.
#5  0x2000000040af3a20 in dissect_ber_choice (pinfo=0x2000000000633410, 
    parent_tree=0x2000000001b24e70, tvb=0x2000000000689a98, offset=1101582488, 
    choice=0x2000000041a8d098, hf_id=12412, ett_id=4800, branch_taken=0x0)
    at packet-ber.c:1547
	class = 2 '\002'
	pc = 1
	ind = 0
	tag = 0
	len = 274
	ch = (const ber_choice_t *) 0x2000000041a8d098
	tree = (proto_tree *) 0x2000000001b24d50
	end_offset = 278
	start_offset = 4
	count = 270
	hoffset = 4
	hfinfo = (header_field_info *) 0x10e
	length = 6855408
	length_remaining = 270
	next_tvb = (tvbuff_t *) 0x2000000000689af0
	first_pass = 1
#6  0x2000000040e02180 in dissect_h248_T_messageBody (implicit_tag=0, 
    tvb=0x2000000000689a98, offset=0, pinfo=0x2000000000633410, 
    tree=0x2000000001b24e70, hf_index=12412) at packet-h248.c:5165
No locals.
#7  0x2000000040e021e0 in dissect_messageBody (pinfo=0x2000000000633410, 
    tree=0x2000000001b24e70, tvb=0x2000000000689a98, offset=0)
    at packet-h248.c:5172
No locals.
#8  0x2000000040af2580 in dissect_ber_sequence (implicit_tag=293, 
    pinfo=0x2000000000633410, parent_tree=0x9fffffffffffdafc, 
    tvb=0x20000000006898e0, offset=15, seq=0x2000000041a8d110, hf_id=-9503, 
    ett_id=-9472) at packet-ber.c:1104
	len = 278
	hoffset = 15
	count = 270
	class = 2 '\002'
	pc = 1
	tag = 2
	eoffset = 293
	class = 8 '\b'
	pc = 293
	ind = 0
	ind_field = 0
	tag = 65548
	len = 293
	tree = (proto_tree *) 0x2000000001b24e70
	end_offset = 293
	s_offset = 0
	length_remaining = 270
	next_tvb = (tvbuff_t *) 0x2000000000689a98
#9  0x2000000040e02250 in dissect_h248_Message (implicit_tag=1, 
    tvb=0x20000000006898e0, offset=0, pinfo=0x2000000000633410, 
    tree=0x2000000001b24ea0, hf_index=12406) at packet-h248.c:5185
No locals.
#10 0x2000000040e022b0 in dissect_mess_impl (pinfo=0x2000000000633410, 
    tree=0x2000000001b24ea0, tvb=0x20000000006898e0, offset=0)
    at packet-h248.c:5191
No locals.
#11 0x2000000040af2580 in dissect_ber_sequence (implicit_tag=301, 
    pinfo=0x2000000000633410, parent_tree=0x9fffffffffffdb4c, 
    tvb=0x2000000000689888, offset=8, seq=0x2000000041a8d158, hf_id=-9423, 
    ett_id=-9392) at packet-ber.c:1104
	len = 293
	hoffset = 8
	count = 270
	class = 2 '\002'
	pc = 1
	tag = 1
	eoffset = 301
	class = 0 '\0'
	pc = 1
	ind = 0
	ind_field = 0
	tag = 16
	len = 297
	tree = (proto_tree *) 0x2000000001b24ea0
	end_offset = 301
	s_offset = 0
	length_remaining = 270
	next_tvb = (tvbuff_t *) 0x20000000006898e0
#12 0x2000000040e02320 in dissect_h248_MegacoMessage (implicit_tag=0, 
    tvb=0x2000000000689888, offset=0, pinfo=0x2000000000633410, 
    tree=0x2000000001b24ea0, hf_index=-1) at packet-h248.c:5203
No locals.
#13 0x2000000040e02560 in dissect_h248 (tvb=0x2000000000689888, 
    pinfo=0x2000000000633410, tree=0x2000000001b25290) at packet-h248.c:5245
No locals.
#14 0x2000000040993b20 in call_dissector_through_handle (
    handle=0x20000000000a9a20, tvb=0x2000000000689888, 
    pinfo=0x2000000000633410, tree=0x2000000001b25290) at packet.c:386
	saved_proto = 0x2000000041516be0 "H248"
	ret = 270
#15 0x2000000040994930 in call_dissector_work (handle=0x20000000000a9a20, 
    tvb=0x2000000000689888, pinfo_arg=0x2000000000633410, 
    tree=0x2000000001b25290) at packet.c:561
	pinfo = (packet_info * volatile) 0x2000000000633410
	saved_proto = 0x2000000041596fe8 "MTP3"
	saved_can_desegment = 0
	ret = 1752375340
	save_writable = 0
	save_dl_src = {type = 538976288, len = 538976288, 
  data = 0x6e69646f636e6520 <Address 0x6e69646f636e6520 out of bounds>}
	save_dl_dst = {type = 811999335, len = 170814834, 
  data = 0x202020202020200a <Address 0x202020202020200a out of bounds>}
	save_net_src = {type = 1866858528, len = 2019893362, 
  data = 0x74202c656c706d61 <Address 0x74202c656c706d61 out of bounds>}
	save_net_dst = {type = 1109419368, len = 1931498053, 
  data = 0x617a696c61697265 <Address 0x617a696c61697265 out of bounds>}
	save_src = {type = 1852795252, len = 543584032, 
  data = 0x32312065756c6176 <Address 0x32312065756c6176 out of bounds>}
	save_dst = {type = 538970675, len = 538976288, 
  data = 0x797420666f202020 <Address 0x797420666f202020 out of bounds>}
	saved_layer_names_len = 4
	__PRETTY_FUNCTION__ = "call_dissector_work"
#16 0x20000000409952c0 in dissector_try_port (
    sub_dissectors=0x20000000001ba780, port=14, tvb=0x2000000000689888, 
    pinfo=0x2000000000633410, tree=0x2000000001b25290) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x10e
	handle = (struct dissector_handle *) 0x20000000000a9a20
	saved_match_port = 43
#17 0x2000000040f35310 in dissect_mtp3_payload (tvb=0x2000000000633418, 
    pinfo=0x2000000000633410, tree=0x2000000001b25290) at packet-mtp3.c:471
	service_indicator = 14 '\016'
	payload_tvb = (tvbuff_t *) 0x2000000000689888
#18 0x2000000040f35780 in dissect_mtp3 (tvb=0x2000000000689830, 
    pinfo=0x2000000000633410, tree=0x2000000001b25290) at packet-mtp3.c:529
	tap_rec = {addr_opc = {type = MTP3_NET_ADDR_FMT_DEC, pc = 129, 
    ni = 3 '\003'}, addr_dpc = {type = MTP3_NET_ADDR_FMT_DEC, pc = 264, 
    ni = 3 '\003'}, si_code = 14 '\016', size = 306}
	mtp3_item = (proto_item *) 0x2000000041ddec88
	mtp3_tree = (proto_tree *) 0x2000000041ddec72
#19 0x2000000040993b20 in call_dissector_through_handle (
    handle=0x200000000063cc80, tvb=0x2000000000689830, 
    pinfo=0x2000000000633410, tree=0x2000000001b25290) at packet.c:386
	saved_proto = 0x2000000041596fe8 "MTP3"
	ret = 270
#20 0x2000000040994930 in call_dissector_work (handle=0x200000000063cc80, 
    tvb=0x2000000000689830, pinfo_arg=0x2000000000633410, 
    tree=0x2000000001b25290) at packet.c:561
	pinfo = (packet_info * volatile) 0x2000000000633410
	saved_proto = 0x200000004147e900 "Frame"
	saved_can_desegment = 0
	ret = 538976288
	save_writable = 0
	save_dl_src = {type = 538976288, len = 538976288, 
  data = 0x7473655466692020 <Address 0x7473655466692020 out of bounds>}
	save_dl_dst = {type = 1701707776, len = 540876914, 
  data = 0x612d50492d796d27 <Address 0x612d50492d796d27 out of bounds>}
	save_net_src = {type = 1701995620, len = 690451315, 
  data = 0x4c494146203d3d20 <Address 0x4c494146203d3d20 out of bounds>}
	save_net_dst = {type = 4294958784, len = -1610612737, data = 0x0}
	save_src = {type = 909128464, len = 536870912, 
  data = 0x1 <Address 0x1 out of bounds>}
	save_dst = {type = 909128448, len = 536870912, 
  data = 0x20000000400da200 "z�P�"}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#21 0x20000000409952c0 in dissector_try_port (
    sub_dissectors=0x20000000000a9220, port=43, tvb=0x2000000000689830, 
    pinfo=0x2000000000633410, tree=0x2000000001b25290) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x10e
	handle = (struct dissector_handle *) 0x200000000063cc80
	saved_match_port = 0
#22 0x2000000040ce9c70 in dissect_frame (tvb=0x2000000000689830, 
    pinfo=0x2000000000633410, parent_tree=0x2000000001b25290)
    at packet-frame.c:234
	except_sn = {except_down = 0x9fffffffffffe760, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffe1e0, except_cleanup = 0x9fffffffffffe1e0}}
	except_ch = {except_id = 0x20000000414a7560, except_size = 1, 
  except_obj = {except_id = {except_group = 2305843010288329728, 
      except_code = 65598}, 
    except_message = 0xc9dffffff3620000 <Address 0xc9dffffff3620000 out of bounds>, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, <invalid float value>, 
        <invalid float value>, 0, -inf, <invalid float value>, 0, 0, 
        <invalid float value>, 0, 0, 0, 0, -0, 0, <invalid float value>, 
        -nan(0x4928824398483892), -inf, <invalid float value>, 0, 
        <invalid float value>, inf, inf, -0, -0, <invalid float value>, 
        <invalid float value>, 0, <invalid float value>, 0, -inf}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	fh_tree = (proto_tree *) 0x2000000001b25260
	ti = (proto_item * volatile) 0x2000000001b250e0
	ts = {secs = 0, nsecs = 0}
	cap_len = 306
	pkt_len = 306
	tree = (proto_tree *) 0x2000000001b25290
	item = (proto_item *) 0x10e
#23 0x2000000040993b20 in call_dissector_through_handle (
    handle=0x20000000000a9240, tvb=0x2000000000689830, 
    pinfo=0x2000000000633410, tree=0x2000000001b25290) at packet.c:386
	saved_proto = 0x200000004147e900 "Frame"
	ret = 270
#24 0x2000000040994930 in call_dissector_work (handle=0x20000000000a9240, 
    tvb=0x2000000000689830, pinfo_arg=0x2000000000633410, 
    tree=0x2000000001b25290) at packet.c:561
	pinfo = (packet_info * volatile) 0x2000000000633410
	saved_proto = 0x20000000412f6a38 "<Missing Protocol Name>"
	saved_can_desegment = 0
	ret = 1411409519
	save_writable = 0
	save_dl_src = {type = 1850303598, len = 774468195, 
  data = 0x9fffffffffffe490 ""}
	save_dl_dst = {type = 909128549, len = 1701344288, 
  data = 0x65706f2074657320 <Address 0x65706f2074657320 out of bounds>}
	save_net_src = {type = 909128562, len = 537554543, 
  data = 0x2020202020202020 <Address 0x2020202020202020 out of bounds>}
	save_net_dst = {type = 1763704864, len = 1667851374, 
  data = 0x6168742073657461 <Address 0x6168742073657461 out of bounds>}
	save_src = {type = AT_NONE, len = 0, data = 0x0}
	save_dst = {type = AT_NONE, len = 0, data = 0x0}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#25 0x2000000040997930 in call_dissector (handle=0x20000000000a9240, 
    tvb=0x2000000000689830, pinfo=0x2000000000633410, tree=0x2000000001b25290)
    at packet.c:1704
	ret = 270
	__PRETTY_FUNCTION__ = "call_dissector"
#26 0x20000000409936f0 in dissect_packet (edt=0x2000000000633400, 
    pseudo_header=0x2000000000633410, pd=0x2000000000689000 "�\bA ", 
    fd=0x9fffffffffffe9e0, cinfo=0x0) at packet.c:325
	except_sn = {except_down = 0x0, except_type = XCEPT_CATCHER, 
  except_info = {except_catcher = 0x9fffffffffffe780, 
    except_cleanup = 0x9fffffffffffe780}}
	except_ch = {except_id = 0x20000000412f6c28, except_size = 1, 
  except_obj = {except_id = {except_group = 2305843010288329728, 
      except_code = 2305843009220530400}, 
    except_message = 0x2000000035700091 <Address 0x2000000035700091 out of bounds>, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, <invalid float value>, 
        <invalid float value>, 0, -inf, <invalid float value>, 0, 0, 
        <invalid float value>, 0, 0, 0, 0, -0, 0, <invalid float value>, 
        -nan(0x4928824398483892), -inf, <invalid float value>, 0, 
        <invalid float value>, inf, inf, -0, -0, <invalid float value>, 
        <invalid float value>, 0, <invalid float value>, 0, -inf}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	__PRETTY_FUNCTION__ = "dissect_packet"
#27 0x200000004098d5e0 in epan_dissect_run (edt=0x2000000000633400, 
    pseudo_header=0x2000000000632e48, data=0x2000000000689000 "�\bA ", 
    fd=0x9fffffffffffe9e0, cinfo=0x0) at epan.c:158
No locals.
#28 0x2000000000037710 in process_packet (cf=0x2000000000090798, pdh=0x0, 
    offset=2305843009220195328, whdr=0x2000000000632e28, 
    pseudo_header=0x2000000000632e48, pd=0x2000000000689000 "�\bA ", 
    err=0x9fffffffffffea50) at tethereal.c:2370
	fdata = {next = 0x0, prev = 0x0, pfd = 0x0, num = 1, pkt_len = 306, 
  cap_len = 306, cum_bytes = 306, abs_ts = {secs = 1109946808, 
    nsecs = 76000000}, rel_ts = {secs = 0, nsecs = 0}, del_ts = {secs = 0, 
    nsecs = 0}, file_off = 40, lnk_t = 43, flags = {passed_dfilter = 0, 
    encoding = 0, visited = 0, marked = 0, ref_time = 0}, 
  color_filter = 0x1000c}
	create_proto_tree = 6501376
	edt = (epan_dissect_t *) 0x2000000000633400
	passed = 270
#29 0x2000000000036c60 in load_cap_file (cf=0x2000000000090798, save_file=0x0, 
    out_file_type=591856) at tethereal.c:2190
	linktype = 6499880
	snapshot_length = 6499880
	pdh = (wtap_dumper *) 0x0
	err = 1462964150
	err_info = (gchar *) 0x1003e <Address 0x1003e out of bounds>
	data_offset = 40
#30 0x2000000000033bf0 in main (argc=6, argv=0x28) at tethereal.c:1357
	opt = 270
	i = 6
	arg_error = 657656
	gpf_path = 0x0
	pf_path = 0x0
	gdp_path = 0x0
	dp_path = 0x0
	gpf_open_errno = 0
	gpf_read_errno = -2147483648
	pf_open_errno = 0
	pf_read_errno = -2147483648
	gdp_open_errno = 65598
	gdp_read_errno = 0
	dp_open_errno = 65516
	dp_read_errno = 0
	err = 2147483647
	capture_filter_specified = 657664
	if_list = (GList *) 0x200000000070e768
	if_entry = (GList *) 0x20000000000a08f8
	if_info = (if_info_t *) 0x1
	adapter_index = 1
	p = 0x20000000400d6170 "��\005"
	err_str = "\000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\016@\000\000\000 \000�\016@\000\000\000 \000�\016@\000\000\000 \000�\016@\000\000\000 \000\000\000\000\000\000\000\000\026]\001\000\000\000\000\000\000��\232\000\000\000\000>\000\001\000\000\000\000\000`������\237\025\000\000\000\024\000\000\000\000�\016@\000\000\000 "...
	cant_get_if_list_errstr = (gchar *) 0x1 <Address 0x1 out of bounds>
	list_link_layer_types = 0
	quiet = 0
	save_file = (gchar *) 0x0
	out_file_type = 2
	cf_name = (
    gchar *) 0x2000000000650540 "/home/buildbot/ethereal/random/editcap.out"
	rfilter = (gchar *) 0x0
	start_capture = 0
	if_text = (gchar *) 0x10e <Address 0x10e out of bounds>
	lt_list = (GList *) 0x20000000000a08f8
	lt_entry = (GList *) 0x200000000070e768
	data_link_info = (data_link_info_t *) 0x1
	fcode = {bf_len = 4026531840, bf_insns = 0x10003}
	rfcode = (dfilter_t *) 0x0
	prefs = (e_prefs *) 0x2000000041de7f30
	__PRETTY_FUNCTION__ = "main"


(no stderr output)


Bug 572 posted.