[Buildbot <buildbot-do-not-reply@xxxxxxxxxxxx>]

Problems have been found with the following capture file(s):

http://www.ethereal.com/distribution/buildbot-builds/randpkt/editcap.4396c707.pcap


Error information:
Core was generated by `lt-tethereal'.
Program terminated with signal 11, Segmentation fault.
#0  h248_cmd (m=0x200000000074e028, t=0x200000000074e290, c=0x0, 
    type=H248_CMD_ADD_REQ, offset=0) at packet-h248-template.c:1159
1159	packet-h248-template.c: No such file or directory.
	in packet-h248-template.c
#0  h248_cmd (m=0x200000000074e028, t=0x200000000074e290, c=0x0, 
    type=H248_CMD_ADD_REQ, offset=0) at packet-h248-template.c:1159
	cmd = (h248_cmd_t *) 0x200000000074e2d8
	cmdtrx = (h248_cmd_msg_t *) 0x200000000074e318
	cmdctx = (h248_cmd_msg_t *) 0x200000000074e330
#1  0x2000000040e8f2f0 in dissect_h248_T_addReq (implicit_tag=1, 
    tvb=0x20000000006ad500, offset=0, pinfo=0x20000000005ed410, 
    tree=0x2000000001b50b70, hf_index=13862) at h248.cnf:132
No locals.
#2  0x2000000040e8f3a0 in dissect_addReq_impl (pinfo=0x20000000005ed410, 
    tree=0x2000000001b50b70, tvb=0x20000000006ad500, offset=0) at h248.cnf:141
No locals.
#3  0x2000000040b55900 in dissect_ber_choice (pinfo=0x20000000005ed410, 
    parent_tree=0x2000000001b50ba0, tvb=0x20000000006ad4a8, 
    offset=1102736408, choice=0x2000000041ba6c18, hf_id=13859, ett_id=5172, 
    branch_taken=0x0) at packet-ber.c:1557
	class = 2 '\002'
	pc = 1
	ind = 0
	tag = 0
	len = 237
	ch = (const ber_choice_t *) 0x2000000041ba6c18
	tree = (proto_tree *) 0x2000000001b50b70
	end_offset = 240
	start_offset = 3
	count = 7660336
	hoffset = 3
	hfinfo = (header_field_info *) 0x200000000074e330
	length = 7001344
	length_remaining = 7660336
	next_tvb = (tvbuff_t *) 0x20000000006ad500
	first_pass = 1
#4  0x2000000040e905d0 in dissect_h248_Command (implicit_tag=0, 
    tvb=0x20000000006ad4a8, offset=0, pinfo=0x20000000005ed410, 
    tree=0x2000000001b50ba0, hf_index=13859) at h248.cnf:358
No locals.
#5  0x2000000040e90630 in dissect_command (pinfo=0x20000000005ed410, 
    tree=0x2000000001b50ba0, tvb=0x20000000006ad4a8, offset=0) at h248.cnf:365
No locals.
#6  0x2000000040b54460 in dissect_ber_sequence (implicit_tag=246, 
    pinfo=0x20000000005ed410, parent_tree=0x9fffffffffffd8ec, 
    tvb=0x20000000006ad450, offset=3, seq=0x2000000041ba6cf0, hf_id=-10031, 
    ett_id=-10000) at packet-ber.c:1115
	len = 240
	hoffset = 6
	count = 7660336
	class = 2 '\002'
	pc = 1
	tag = 0
	eoffset = 246
	class = 0 '\0'
	pc = 1
	ind = 0
	ind_field = 0
	tag = 16
	len = 243
	tree = (proto_tree *) 0x2000000001b50ba0
	end_offset = 246
	s_offset = 0
	length_remaining = 7660336
	next_tvb = (tvbuff_t *) 0x20000000006ad4a8
#7  0x2000000040e906a0 in dissect_h248_CommandRequest (implicit_tag=0, 
    tvb=0x20000000006ad450, offset=0, pinfo=0x20000000005ed410, 
    tree=0x2000000001b50bd0, hf_index=13847) at h248.cnf:378
No locals.
#8  0x2000000040e90700 in dissect_commandRequests_item (
    pinfo=0x20000000005ed410, tree=0x2000000001b50bd0, 
    tvb=0x20000000006ad450, offset=0) at h248.cnf:384
No locals.
#9  0x2000000040b56c90 in dissect_ber_sq_of (implicit_tag=0, type=16, 
    pinfo=0x20000000005ed410, parent_tree=0x2000000041ba6d58, 
    tvb=0x20000000006ad450, offset=3, seq=0x2000000041ba6d50, hf_id=-9936, 
    ett_id=5165) at packet-ber.c:1963
	len = 243
	hoffset = 0
	class = 0 '\0'
	pc = 1
	tag = 16
	eoffset = 246
	class = 13 '\r'
	pc = 1
	ind = 0
	ind_field = 0
	tag = 0
	len = 246
	tree = (proto_tree *) 0x2000000001b50bd0
	item = (proto_item *) 0xf6
	cnt = 0
	hoffset = 1102736736
	end_offset = 246
	hfi = (header_field_info *) 0x200000000074e330
#10 0x2000000040b56dd0 in dissect_ber_sequence_of (implicit_tag=1, 
    pinfo=0x20000000005ed410, parent_tree=0x2000000001b50c30, 
    tvb=0x20000000006ad450, offset=0, seq=0x2000000041ba6d50, hf_id=13846, 
    ett_id=5165) at packet-ber.c:1991
No locals.
#11 0x2000000040e90770 in dissect_h248_SEQUENCE_OF_CommandRequest (
    implicit_tag=1, tvb=0x20000000006ad450, offset=0, 
    pinfo=0x20000000005ed410, tree=0x2000000001b50c30, hf_index=13846)
    at h248.cnf:394
No locals.
#12 0x2000000040e907d0 in dissect_commandRequests_impl (
    pinfo=0x20000000005ed410, tree=0x2000000001b50c30, 
    tvb=0x20000000006ad450, offset=0) at h248.cnf:400
No locals.
#13 0x2000000040b54460 in dissect_ber_sequence (implicit_tag=260, 
    pinfo=0x20000000005ed410, parent_tree=0x9fffffffffffd98c, 
    tvb=0x20000000006ad3f8, offset=11, seq=0x2000000041ba6db0, hf_id=-9871, 
    ett_id=-9840) at packet-ber.c:1115
	len = 246
	hoffset = 14
	count = 7660336
	class = 2 '\002'
	pc = 1
	tag = 3
	eoffset = 260
	class = 0 '\0'
	pc = 1
	ind = 0
	ind_field = 0
	tag = 16
	len = 256
	tree = (proto_tree *) 0x2000000001b50c30
	end_offset = 260
	s_offset = 0
	length_remaining = 7660336
	next_tvb = (tvbuff_t *) 0x20000000006ad450
#14 0x2000000040e90840 in dissect_h248_ActionRequest (implicit_tag=0, 
    tvb=0x20000000006ad3f8, offset=0, pinfo=0x20000000005ed410, 
    tree=0x2000000001b50c60, hf_index=13832) at h248.cnf:414
No locals.
#15 0x2000000040e908a0 in dissect_actions_item (pinfo=0x20000000005ed410, 
    tree=0x2000000001b50c60, tvb=0x20000000006ad3f8, offset=0) at h248.cnf:420
No locals.
#16 0x2000000040b56c90 in dissect_ber_sq_of (implicit_tag=0, type=16, 
    pinfo=0x20000000005ed410, parent_tree=0x2000000041ba6de8, 
    tvb=0x20000000006ad3f8, offset=4, seq=0x2000000041ba6de0, hf_id=-9776, 
    ett_id=5156) at packet-ber.c:1963
	len = 256
	hoffset = 0
	class = 0 '\0'
	pc = 1
	tag = 16
	eoffset = 260
	class = 9 '\t'
	pc = 1
	ind = 0
	ind_field = 0
	tag = 0
	len = 260
	tree = (proto_tree *) 0x2000000001b50c60
	item = (proto_item *) 0x104
	cnt = 0
	hoffset = 1102736880
	end_offset = 260
	hfi = (header_field_info *) 0x200000000074e330
#17 0x2000000040b56dd0 in dissect_ber_sequence_of (implicit_tag=1, 
    pinfo=0x20000000005ed410, parent_tree=0x2000000001b50cc0, 
    tvb=0x20000000006ad3f8, offset=0, seq=0x2000000041ba6de0, hf_id=13831, 
    ett_id=5156) at packet-ber.c:1991
No locals.
#18 0x2000000040e90910 in dissect_h248_SEQUENCE_OF_ActionRequest (
    implicit_tag=1, tvb=0x20000000006ad3f8, offset=0, 
    pinfo=0x20000000005ed410, tree=0x2000000001b50cc0, hf_index=13831)
    at h248.cnf:430
No locals.
#19 0x2000000040e90970 in dissect_actions_impl (pinfo=0x20000000005ed410, 
    tree=0x2000000001b50cc0, tvb=0x20000000006ad3f8, offset=0) at h248.cnf:436
No locals.
#20 0x2000000040b54460 in dissect_ber_sequence (implicit_tag=270, 
    pinfo=0x20000000005ed410, parent_tree=0x9fffffffffffda2c, 
    tvb=0x20000000006ad348, offset=6, seq=0x2000000041ba6e10, hf_id=-9711, 
    ett_id=-9680) at packet-ber.c:1115
	len = 260
	hoffset = 10
	count = 7660336
	class = 2 '\002'
	pc = 1
	tag = 1
	eoffset = 270
	class = 4 '\004'
	pc = 270
	ind = 0
	ind_field = 0
	tag = 0
	len = 270
	tree = (proto_tree *) 0x2000000001b50cc0
	end_offset = 270
	s_offset = 0
	length_remaining = 7660336
	next_tvb = (tvbuff_t *) 0x20000000006ad3f8
#21 0x2000000040e909e0 in dissect_h248_TransactionRequest (implicit_tag=1, 
    tvb=0x20000000006ad348, offset=0, pinfo=0x20000000005ed410, 
    tree=0x2000000001b51230, hf_index=13826) at h248.cnf:448
No locals.
#22 0x2000000040e90a40 in dissect_transactionRequest_impl (
    pinfo=0x20000000005ed410, tree=0x2000000001b51230, 
    tvb=0x20000000006ad348, offset=0) at h248.cnf:454
No locals.
#23 0x2000000040b55900 in dissect_ber_choice (pinfo=0x20000000005ed410, 
    parent_tree=0x2000000001b51260, tvb=0x20000000006ad2f0, 
    offset=1102739376, choice=0x2000000041ba77b0, hf_id=13816, ett_id=5154, 
    branch_taken=0x0) at packet-ber.c:1557
	class = 2 '\002'
	pc = 1
	ind = 0
	tag = 0
	len = 270
	ch = (const ber_choice_t *) 0x2000000041ba77b0
	tree = (proto_tree *) 0x2000000001b51230
	end_offset = 274
	start_offset = 4
	count = 7660336
	hoffset = 4
	hfinfo = (header_field_info *) 0x200000000074e330
	length = 7000904
	length_remaining = 7660336
	next_tvb = (tvbuff_t *) 0x20000000006ad348
	first_pass = 1
#24 0x2000000040e923c0 in dissect_h248_Transaction (implicit_tag=0, 
    tvb=0x20000000006ad2f0, offset=0, pinfo=0x20000000005ed410, 
    tree=0x2000000001b51260, hf_index=13816) at h248.cnf:249
No locals.
#25 0x2000000040e92420 in dissect_transactions_item (
    pinfo=0x20000000005ed410, tree=0x2000000001b51260, 
    tvb=0x20000000006ad2f0, offset=0) at h248.cnf:256
No locals.
#26 0x2000000040b56c90 in dissect_ber_sq_of (implicit_tag=0, type=16, 
    pinfo=0x20000000005ed410, parent_tree=0x2000000041ba7830, 
    tvb=0x20000000006ad2f0, offset=4, seq=0x2000000041ba7828, hf_id=-9584, 
    ett_id=5149) at packet-ber.c:1963
	len = 270
	hoffset = 0
	class = 2 '\002'
	pc = 1
	tag = 0
	eoffset = 274
	class = 3 '\003'
	pc = 1
	ind = 0
	ind_field = 0
	tag = 129
	len = 274
	tree = (proto_tree *) 0x2000000001b51260
	item = (proto_item *) 0x112
	cnt = 0
	hoffset = 1102739512
	end_offset = 274
	hfi = (header_field_info *) 0x200000000074e330
#27 0x2000000040b56dd0 in dissect_ber_sequence_of (implicit_tag=1, 
    pinfo=0x20000000005ed410, parent_tree=0x2000000001b51200, 
    tvb=0x20000000006ad2f0, offset=0, seq=0x2000000041ba7828, hf_id=13815, 
    ett_id=5149) at packet-ber.c:1991
No locals.
#28 0x2000000040e92490 in dissect_h248_SEQUENCE_OF_Transaction (
    implicit_tag=1, tvb=0x20000000006ad2f0, offset=0, 
    pinfo=0x20000000005ed410, tree=0x2000000001b51200, hf_index=13815)
    at h248.cnf:266
No locals.
#29 0x2000000040e924f0 in dissect_transactions_impl (
    pinfo=0x20000000005ed410, tree=0x2000000001b51200, 
    tvb=0x20000000006ad2f0, offset=0) at h248.cnf:272
No locals.
#30 0x2000000040b55900 in dissect_ber_choice (pinfo=0x20000000005ed410, 
    parent_tree=0x2000000001b510e0, tvb=0x20000000006ad298, 
    offset=1102739592, choice=0x2000000041ba7870, hf_id=13813, ett_id=5148, 
    branch_taken=0x0) at packet-ber.c:1557
	class = 2 '\002'
	pc = 1
	ind = 0
	tag = 1
	len = 274
	ch = (const ber_choice_t *) 0x2000000041ba7888
	tree = (proto_tree *) 0x2000000001b51200
	end_offset = 278
	start_offset = 4
	count = 7660336
	hoffset = 4
	hfinfo = (header_field_info *) 0x200000000074e330
	length = 7000816
	length_remaining = 7660336
	next_tvb = (tvbuff_t *) 0x20000000006ad2f0
	first_pass = 1
#31 0x2000000040e92560 in dissect_h248_T_messageBody (implicit_tag=0, 
    tvb=0x20000000006ad298, offset=0, pinfo=0x20000000005ed410, 
    tree=0x2000000001b510e0, hf_index=13813) at h248.cnf:290
No locals.
#32 0x2000000040e925c0 in dissect_messageBody (pinfo=0x20000000005ed410, 
    tree=0x2000000001b510e0, tvb=0x20000000006ad298, offset=0) at h248.cnf:297
No locals.
#33 0x2000000040b54460 in dissect_ber_sequence (implicit_tag=293, 
    pinfo=0x20000000005ed410, parent_tree=0x9fffffffffffdb0c, 
    tvb=0x20000000006ad0e0, offset=11, seq=0x2000000041ba78e8, hf_id=-9487, 
    ett_id=-9456) at packet-ber.c:1115
	len = 278
	hoffset = 15
	count = 7660336
	class = 2 '\002'
	pc = 1
	tag = 2
	eoffset = 293
	class = 72 'H'
	pc = 536870912
	ind = 0
	ind_field = 0
	tag = 906
	len = 293
	tree = (proto_tree *) 0x2000000001b510e0
	end_offset = 293
	s_offset = 0
	length_remaining = 7660336
	next_tvb = (tvbuff_t *) 0x20000000006ad298
#34 0x2000000040e926b0 in dissect_h248_Message (implicit_tag=1, 
    tvb=0x20000000006ad0e0, offset=0, pinfo=0x20000000005ed410, 
    tree=0x2000000001b51290, hf_index=13807) at h248.cnf:75
No locals.
#35 0x2000000040e927d0 in dissect_mess_impl (pinfo=0x20000000005ed410, 
    tree=0x2000000001b51290, tvb=0x20000000006ad0e0, offset=0) at h248.cnf:86
No locals.
#36 0x2000000040b54460 in dissect_ber_sequence (implicit_tag=301, 
    pinfo=0x20000000005ed410, parent_tree=0x9fffffffffffdb5c, 
    tvb=0x20000000006ad088, offset=4, seq=0x2000000041ba7930, hf_id=-9407, 
    ett_id=-9376) at packet-ber.c:1115
	len = 293
	hoffset = 8
	count = 7660336
	class = 2 '\002'
	pc = 1
	tag = 1
	eoffset = 301
	class = 0 '\0'
	pc = 1
	ind = 0
	ind_field = 0
	tag = 16
	len = 297
	tree = (proto_tree *) 0x2000000001b51290
	end_offset = 301
	s_offset = 0
	length_remaining = 7660336
	next_tvb = (tvbuff_t *) 0x20000000006ad0e0
#37 0x2000000040e92840 in dissect_h248_MegacoMessage (implicit_tag=0, 
    tvb=0x20000000006ad088, offset=0, pinfo=0x20000000005ed410, 
    tree=0x2000000001b51290, hf_index=-1) at h248.cnf:98
No locals.
#38 0x2000000040e92a80 in dissect_h248 (tvb=0x20000000006ad088, 
    pinfo=0x20000000005ed410, tree=0x2000000001b50cf0)
    at packet-h248-template.c:1444
No locals.
#39 0x20000000409f1fa0 in call_dissector_through_handle (
    handle=0x20000000000a7c20, tvb=0x20000000006ad088, 
    pinfo=0x20000000005ed410, tree=0x2000000001b50cf0) at packet.c:386
	saved_proto = 0x20000000415e8e20 "H248"
	ret = 7660336
#40 0x20000000409f2db0 in call_dissector_work (handle=0x20000000000a7c20, 
    tvb=0x20000000006ad088, pinfo_arg=0x20000000005ed410, 
    tree=0x2000000001b50cf0) at packet.c:561
	pinfo = (packet_info * volatile) 0x20000000005ed410
	saved_proto = 0x2000000041669058 "MTP3"
	saved_can_desegment = 0
	ret = 1752375340
	save_writable = 1
	save_dl_src = {type = 538976288, len = 538976288, 
  data = 0x6e69646f636e6520 <Address 0x6e69646f636e6520 out of bounds>}
	save_dl_dst = {type = 811999335, len = 170814834, 
  data = 0x202020202020200a <Address 0x202020202020200a out of bounds>}
	save_net_src = {type = 1866858528, len = 2019893362, 
  data = 0x74202c656c706d61 <Address 0x74202c656c706d61 out of bounds>}
	save_net_dst = {type = 1109419368, len = 1931498053, 
  data = 0x617a696c61697265 <Address 0x617a696c61697265 out of bounds>}
	save_src = {type = 1852795252, len = 543584032, 
  data = 0x32312065756c6176 <Address 0x32312065756c6176 out of bounds>}
	save_dst = {type = 538970675, len = 538976288, 
  data = 0x797420666f202020 <Address 0x797420666f202020 out of bounds>}
	saved_layer_names_len = 4
	__PRETTY_FUNCTION__ = "call_dissector_work"
#41 0x20000000409f3740 in dissector_try_port (
    sub_dissectors=0x20000000001e09c0, port=14, tvb=0x20000000006ad088, 
    pinfo=0x20000000005ed410, tree=0x2000000001b50cf0) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x200000000074e330
	handle = (struct dissector_handle *) 0x20000000000a7c20
	saved_match_port = 43
#42 0x2000000040fc9cf0 in dissect_mtp3_payload (tvb=0x20000000005ed418, 
    pinfo=0x20000000005ed410, tree=0x2000000001b50cf0) at packet-mtp3.c:471
	service_indicator = 14 '\016'
	payload_tvb = (tvbuff_t *) 0x20000000006ad088
#43 0x2000000040fca160 in dissect_mtp3 (tvb=0x20000000006ad030, 
    pinfo=0x20000000005ed410, tree=0x2000000001b50cf0) at packet-mtp3.c:529
	tap_rec = {addr_opc = {type = MTP3_NET_ADDR_FMT_DEC, pc = 129, 
    ni = 3 '\003'}, addr_dpc = {type = MTP3_NET_ADDR_FMT_DEC, pc = 264, 
    ni = 3 '\003'}, si_code = 14 '\016', size = 306}
	mtp3_item = (proto_item *) 0x2000000041f0fdf8
	mtp3_tree = (proto_tree *) 0x2000000041f0fde2
#44 0x20000000409f1fa0 in call_dissector_through_handle (
    handle=0x20000000005f85e0, tvb=0x20000000006ad030, 
    pinfo=0x20000000005ed410, tree=0x2000000001b50cf0) at packet.c:386
	saved_proto = 0x2000000041669058 "MTP3"
	ret = 7660336
#45 0x20000000409f2db0 in call_dissector_work (handle=0x20000000005f85e0, 
    tvb=0x20000000006ad030, pinfo_arg=0x20000000005ed410, 
    tree=0x2000000001b50cf0) at packet.c:561
	pinfo = (packet_info * volatile) 0x20000000005ed410
	saved_proto = 0x200000004154dae0 "Frame"
	saved_can_desegment = 0
	ret = 306
	save_writable = 0
	save_dl_src = {type = 538976288, len = 538976288, 
  data = 0x7473655466692020 <Address 0x7473655466692020 out of bounds>}
	save_dl_dst = {type = 1701707776, len = 540876914, 
  data = 0x612d50492d796d27 <Address 0x612d50492d796d27 out of bounds>}
	save_net_src = {type = 1701995620, len = 690451315, 
  data = 0x4c494146203d3d20 <Address 0x4c494146203d3d20 out of bounds>}
	save_net_dst = {type = AT_NONE, len = 0, data = 0x0}
	save_src = {type = 909128464, len = 536870912, 
  data = 0x1 <Address 0x1 out of bounds>}
	save_dst = {type = 909128448, len = 536870912, 
  data = 0x20000000400da200 "z�P�"}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#46 0x20000000409f3740 in dissector_try_port (
    sub_dissectors=0x20000000000a7420, port=43, tvb=0x20000000006ad030, 
    pinfo=0x20000000005ed410, tree=0x2000000001b50cf0) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x200000000074e330
	handle = (struct dissector_handle *) 0x20000000005f85e0
	saved_match_port = 0
#47 0x2000000040d79940 in dissect_frame (tvb=0x20000000006ad030, 
    pinfo=0x20000000005ed410, parent_tree=0x2000000001b50cf0)
    at packet-frame.c:234
	except_sn = {except_down = 0x9fffffffffffe770, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffe1f0, except_cleanup = 0x9fffffffffffe1f0}}
	except_ch = {except_id = 0x2000000041579898, except_size = 1, 
  except_obj = {except_id = {except_group = 1, except_code = 2}, 
    except_message = 0x0, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 
        0, <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 0, 0, 0}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	fh_tree = (proto_tree *) 0x2000000001b50ea0
	ti = (proto_item * volatile) 0x2000000001b50e40
	ts = {secs = 0, nsecs = 0}
	cap_len = 306
	pkt_len = 306
	tree = (proto_tree *) 0x2000000001b50cf0
	item = (proto_item *) 0x200000000074e330
#48 0x20000000409f1fa0 in call_dissector_through_handle (
    handle=0x20000000000a7460, tvb=0x20000000006ad030, 
    pinfo=0x20000000005ed410, tree=0x2000000001b50cf0) at packet.c:386
	saved_proto = 0x200000004154dae0 "Frame"
	ret = 7660336
#49 0x20000000409f2db0 in call_dissector_work (handle=0x20000000000a7460, 
    tvb=0x20000000006ad030, pinfo_arg=0x20000000005ed410, 
    tree=0x2000000001b50cf0) at packet.c:561
	pinfo = (packet_info * volatile) 0x20000000005ed410
	saved_proto = 0x20000000413a84e8 "<Missing Protocol Name>"
	saved_can_desegment = 0
	ret = 1098447488
	save_writable = 536870912
	save_dl_src = {type = 129, len = 0, 
  data = 0x2000000001b5a3a1 "\n", ' ' <repeats 16 times>, "PC: 129\n        messageBody: transactions (1)\n", ' ' <repeats 12 times>, "BER: Error length:49934 longer than tvb_reported_length_remaining:270\n[Malformed Packet: H248]\n\n0000  ce 08 41 20 00 30 82 01"...}
	save_dl_dst = {type = 909128448, len = 0, 
  data = 0x5 <Address 0x5 out of bounds>}
	save_net_src = {type = 909128592, len = -1610612737, data = 0x0}
	save_net_dst = {type = 540672080, len = 3748401, 
  data = 0xc <Address 0xc out of bounds>}
	save_src = {type = AT_NONE, len = 0, data = 0x0}
	save_dst = {type = 4294960320, len = -1610612737, 
  data = 0x1 <Address 0x1 out of bounds>}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#50 0x20000000409f5db0 in call_dissector (handle=0x20000000000a7460, 
    tvb=0x20000000006ad030, pinfo=0x20000000005ed410, tree=0x2000000001b50cf0)
    at packet.c:1704
	ret = 7660336
	__PRETTY_FUNCTION__ = "call_dissector"
#51 0x20000000409f1b70 in dissect_packet (edt=0x20000000005ed400, 
    pseudo_header=0x20000000005ed410, pd=0x20000000006ac800 "�\bA ", 
    fd=0x9fffffffffffe9f0, cinfo=0x0) at packet.c:325
	except_sn = {except_down = 0x0, except_type = XCEPT_CATCHER, 
  except_info = {except_catcher = 0x9fffffffffffe790, 
    except_cleanup = 0x9fffffffffffe790}}
	except_ch = {except_id = 0x20000000413a86d8, except_size = 1, 
  except_obj = {except_id = {except_group = 2305843010288329728, 
      except_code = 2305843010288330240}, 
    except_message = 0x20000000400da800 "z�P�", except_dyndata = 0x0}, 
  except_jmp = {{buf = {0, 0, <invalid float value>, <invalid float value>, 
        0, -inf, <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 
        0, -0, 0, <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 
        <invalid float value>, 0, <invalid float value>}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	__PRETTY_FUNCTION__ = "dissect_packet"
#52 0x20000000409eb600 in epan_dissect_run (edt=0x20000000005ed400, 
    pseudo_header=0x20000000005ece48, data=0x20000000006ac800 "�\bA ", 
    fd=0x9fffffffffffe9f0, cinfo=0x0) at epan.c:161
No locals.
#53 0x2000000000036e50 in process_packet (cf=0x200000000008fcb8, pdh=0x0, 
    offset=2305843009219908608, whdr=0x20000000005ece28, 
    pseudo_header=0x20000000005ece48, pd=0x20000000006ac800 "�\bA ", 
    err=0x9fffffffffffea60) at tethereal.c:2411
	fdata = {next = 0x0, prev = 0x0, pfd = 0x0, num = 2, pkt_len = 306, 
  cap_len = 306, cum_bytes = 612, abs_ts = {secs = 1109946808, 
    nsecs = 76000000}, rel_ts = {secs = 0, nsecs = 0}, del_ts = {secs = 0, 
    nsecs = 0}, file_off = 362, lnk_t = 43, flags = {passed_dfilter = 0, 
    encoding = 0, visited = 0, marked = 0, ref_time = 0}, 
  color_filter = 0x1000c}
	create_proto_tree = 6214656
	edt = (epan_dissect_t *) 0x20000000005ed400
	passed = 7660336
#54 0x2000000000036400 in load_cap_file (cf=0x200000000008fcb8, 
    save_file=0x0, out_file_type=589072) at tethereal.c:2236
	linktype = 6213160
	snapshot_length = 6213160
	pdh = (wtap_dumper *) 0x0
	err = 1462964150
	err_info = (gchar *) 0x1003e <Address 0x1003e out of bounds>
	data_offset = 362
#55 0x2000000000033640 in main (argc=6, argv=0x28) at tethereal.c:1393
	opt = 7660336
	i = 6
	arg_error = 654872
	gpf_path = 0x0
	pf_path = 0x0
	gdp_path = 0x0
	dp_path = 0x0
	gpf_open_errno = 0
	gpf_read_errno = -2147483648
	pf_open_errno = 0
	pf_read_errno = -2147483648
	gdp_open_errno = 65598
	gdp_read_errno = 0
	dp_open_errno = 65516
	dp_read_errno = 0
	err = 2147483647
	capture_filter_specified = 654880
	if_list = (GList *) 0x2000000000738c28
	if_entry = (GList *) 0x200000000009fe18
	if_info = (if_info_t *) 0x1
	adapter_index = 1
	p = 0x20000000400d6170 ""
	err_str = "\000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\r@\000\000\000 \000�\016@\000\000\000 \000�\016@\000\000\000 \000�\016@\000\000\000 \000�\016@\000\000\000 \000\000\000\000\000\000\000\000\026]\001\000\000\000\000\000\000��\232\000\000\000\000>\000\001\000\000\000\000\000p������\237\025\000\000\000\024\000\000\000\000�\016@\000\000\000 "...
	cant_get_if_list_errstr = (gchar *) 0x1 <Address 0x1 out of bounds>
	list_link_layer_types = 0
	quiet = 0
	save_file = (gchar *) 0x0
	out_file_type = 2
	cf_name = (
    gchar *) 0x2000000000672a00 "/home/buildbot/ethereal/random/editcap.out"
	rfilter = (gchar *) 0x0
	start_capture = 0
	if_text = (gchar *) 0x200000000074e330 "��t"
	lt_list = (GList *) 0x2000000000738c28
	lt_entry = (GList *) 0x1
	data_link_info = (data_link_info_t *) 0x200000000074e328
	fcode = {bf_len = 4026531840, bf_insns = 0x10003}
	rfcode = (dfilter_t *) 0x0
	prefs = (e_prefs *) 0x2000000041f185b0
	optstring = "a:b:c:d:Df:F:hi:lLnN:o:pqr:R:s:St:T:vVw:xy:z:"
	__PRETTY_FUNCTION__ = "main"


(no stderr output)


Bug 610 posted.