[Buildbot <buildbot-do-not-reply@xxxxxxxxxxxx>]

Problems have been found with the following capture file(s):

http://www.ethereal.com/distribution/buildbot-builds/randpkt/editcap.43a54fd6.pcap


Error information:
Core was generated by `lt-tethereal'.
Program terminated with signal 11, Segmentation fault.
#0  call_dissector_work (handle=0x0, tvb=0x2000000001a70710, 
    pinfo_arg=0x2000000000573410, tree=0x2000000001a6e780) at packet.c:428
428		if (handle->protocol != NULL &&
#0  call_dissector_work (handle=0x0, tvb=0x2000000001a70710, 
    pinfo_arg=0x2000000000573410, tree=0x2000000001a6e780) at packet.c:428
	pinfo = (packet_info * volatile) 0x2000000000573410
	saved_proto = 0x2000000001a7fa90 "\b\v�A"
	saved_can_desegment = 2
	ret = 0
	save_writable = 1
	save_dl_src = {type = AT_NONE, len = 0, data = 0x0}
	save_dl_dst = {type = 822083584, len = 0, data = 0x0}
	save_net_src = {type = AT_NONE, len = 0, data = 0x0}
	save_net_dst = {type = 1074642944, len = 536870912, 
  data = 0x20000000400dc200 "z�P�"}
	save_src = {type = 1074643968, len = 536870912, 
  data = 0x1 <Address 0x1 out of bounds>}
	save_dst = {type = 1096144480, len = 536870912, 
  data = 0x1 <Address 0x1 out of bounds>}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#1  0x2000000040a07cd0 in call_dissector (handle=0x0, tvb=0x2000000001a70710, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet.c:1704
	ret = 0
	__PRETTY_FUNCTION__ = "call_dissector"
#2  0x20000000412be8d0 in dissect_tcap_Component (implicit_tag=0, 
    tvb=0x2000000001a706b8, offset=4, pinfo=0x2000000000573410, 
    tree=0x2000000001a7cff0, hf_index=35154) at tcap.cnf:136
	subdissector_handle = 0x0
	next_tvb = (tvbuff_t *) 0x2000000001a70710
	class = 2 '\002'
	pc = 1
	tag = 1
	len = 10
	s_offset = 27723536
	ind_field = 0
#3  0x20000000412be960 in dissect_ComponentPortion_item (
    pinfo=0x2000000000573410, tree=0x2000000001a7cff0, 
    tvb=0x2000000001a706b8, offset=2) at tcap.cnf:146
No locals.
#4  0x2000000040b6a780 in dissect_ber_sq_of (implicit_tag=2, type=16, 
    pinfo=0x2000000000573410, parent_tree=0x2000000041e3ecc0, 
    tvb=0x2000000001a706b8, offset=4, seq=0x2000000041e3ecb8, hf_id=-14672, 
    ett_id=10541) at packet-ber.c:2021
	len = 10
	hoffset = 2
	class = 2 '\002'
	pc = 1
	tag = 1
	eoffset = 14
	class = 1 '\001'
	pc = 1
	ind = 0
	ind_field = 0
	tag = 12
	len = 12
	tree = (proto_tree *) 0x2000000001a7cff0
	item = (proto_item *) 0xe
	cnt = 2
	hoffset = 1105456328
	end_offset = 14
	hfi = (header_field_info *) 0x0
#5  0x2000000040b6a8c0 in dissect_ber_sequence_of (implicit_tag=0, 
    pinfo=0x2000000000573410, parent_tree=0x2000000001a7d080, 
    tvb=0x2000000001a706b8, offset=0, seq=0x2000000041e3ecb8, hf_id=35148, 
    ett_id=10541) at packet-ber.c:2049
No locals.
#6  0x20000000412be9d0 in dissect_tcap_ComponentPortion (implicit_tag=0, 
    tvb=0x2000000001a706b8, offset=0, pinfo=0x2000000000573410, 
    tree=0x2000000001a7d080, hf_index=35148) at tcap.cnf:156
No locals.
#7  0x20000000412bea30 in dissect_components (pinfo=0x2000000000573410, 
    tree=0x2000000001a7d080, tvb=0x2000000001a706b8, offset=0) at tcap.cnf:162
No locals.
#8  0x2000000040b67ec0 in dissect_ber_sequence (implicit_tag=18, 
    pinfo=0x2000000000573410, parent_tree=0x9fffffffffffc70c, 
    tvb=0x2000000001a705b0, offset=4, seq=0x2000000041e3eda8, hf_id=-14607, 
    ett_id=-14576) at packet-ber.c:1165
	len = 12
	hoffset = 4
	count = 0
	class = 1 '\001'
	pc = 1
	tag = 12
	eoffset = 18
	class = 0 '\0'
	pc = -1237319680
	ind = 0
	ind_field = 0
	tag = 65516
	len = 18
	tree = (proto_tree *) 0x2000000001a7d080
	end_offset = 18
	s_offset = 0
	length_remaining = 0
	next_tvb = (tvbuff_t *) 0x2000000001a706b8
#9  0x20000000412bf2a0 in dissect_tcap_End (implicit_tag=1, 
    tvb=0x2000000001a705b0, offset=0, pinfo=0x2000000000573410, 
    tree=0x2000000001a7d0b0, hf_index=35137) at tcap.cnf:251
No locals.
#10 0x20000000412bf300 in dissect_end_impl (pinfo=0x2000000000573410, 
    tree=0x2000000001a7d0b0, tvb=0x2000000001a705b0, offset=0) at tcap.cnf:258
No locals.
#11 0x2000000040b69360 in dissect_ber_choice (pinfo=0x2000000000573410, 
    parent_tree=0x2000000001a7d0b0, tvb=0x2000000001a70558, 
    offset=1105459800, choice=0x2000000041e3fa28, hf_id=-1, ett_id=10534, 
    branch_taken=0x0) at packet-ber.c:1607
	class = 1 '\001'
	pc = 1
	ind = 0
	tag = 4
	len = 18
	ch = (const ber_choice_t *) 0x2000000041e3fa58
	tree = (proto_tree *) 0x2000000001a7d0b0
	end_offset = 20
	start_offset = 2
	count = 0
	hoffset = 2
	hfinfo = (header_field_info *) 0x0
	length = 27723184
	length_remaining = 0
	next_tvb = (tvbuff_t *) 0x2000000001a705b0
	first_pass = 1
#12 0x20000000412c1c00 in dissect_tcap_MessageType (implicit_tag=0, 
    tvb=0x2000000001a70558, offset=0, pinfo=0x2000000000573410, 
    tree=0x2000000001a7d0b0, hf_index=-1) at tcap.cnf:311
No locals.
#13 0x20000000412c1de0 in dissect_tcap (tvb=0x2000000001a70558, 
    pinfo=0x2000000000573410, parent_tree=0x2000000001a6e780)
    at packet-tcap-template.c:147
	tree = (proto_tree *) 0x2000000001a7d0b0
#14 0x2000000040a03ec0 in call_dissector_through_handle (
    handle=0x20000000003c5180, tvb=0x2000000001a70558, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet.c:386
	saved_proto = 0x20000000417bcb30 "TCAP"
	ret = 0
#15 0x2000000040a04cd0 in call_dissector_work (handle=0x20000000003c5180, 
    tvb=0x2000000001a70558, pinfo_arg=0x2000000000573410, 
    tree=0x2000000001a6e780) at packet.c:561
	pinfo = (packet_info * volatile) 0x2000000000573410
	saved_proto = 0x2000000041675f40 "SCCP"
	saved_can_desegment = 0
	ret = 30
	save_writable = 1
	save_dl_src = {type = 5822784, len = 536870912, 
  data = 0x666f20736e61656d <Address 0x666f20736e61656d out of bounds>}
	save_dl_dst = {type = 1163150159, len = 1381258068, 
  data = 0x6100737300474e49 <Address 0x6100737300474e49 out of bounds>}
	save_net_src = {type = 120, len = 1886218528, 
  data = 0x7461746e656d656c <Address 0x7461746e656d656c out of bounds>}
	save_net_dst = {type = 1936588905, len = 174485280, 
  data = 0x2020202020202020 <Address 0x2020202020202020 out of bounds>}
	save_src = {type = 840966176, len = 543516788, 
  data = 0x706d002e504d4e53 <Address 0x706d002e504d4e53 out of bounds>}
	save_dst = {type = 1701642348, len = 1948284014, 
  data = 0x2042494d20736968 <Address 0x2042494d20736968 out of bounds>}
	saved_layer_names_len = 26
	__PRETTY_FUNCTION__ = "call_dissector_work"
#16 0x2000000040a05660 in dissector_try_port (
    sub_dissectors=0x20000000003c4a60, port=10, tvb=0x2000000001a70558, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x0
	handle = (struct dissector_handle *) 0x20000000003c5180
	saved_match_port = 3
#17 0x20000000411cc680 in dissect_sccp_data_param (tvb=0x2000000001a70558, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet-sccp.c:1306
	ssn = 10 '\n'
#18 0x20000000411cd280 in dissect_sccp_parameter (tvb=0x2000000001a70348, 
    pinfo=0x2000000000573410, sccp_tree=0x2000000001a6f230, 
    tree=0x2000000001a6e780, parameter_type=15 '\017', offset=14, 
    parameter_length=20) at packet-sccp.c:1514
	parameter_tvb = (tvbuff_t *) 0x0
#19 0x20000000411cd640 in dissect_sccp_variable_parameter (
    tvb=0x2000000001a70348, pinfo=0x2000000000573410, 
    sccp_tree=0x2000000001a6f230, tree=0x2000000001a6e780, 
    parameter_type=15 '\017', offset=13) at packet-sccp.c:1601
	parameter_length = 20
	length_length = 1 '\001'
#20 0x20000000411ce650 in dissect_sccp_message (tvb=0x2000000001a70348, 
    pinfo=0x2000000000573410, sccp_tree=0x2000000001a6f230, 
    tree=0x2000000001a6e780) at packet-sccp.c:1835
	variable_pointer1 = 5
	variable_pointer2 = 10
	variable_pointer3 = 13
	optional_pointer = 0
	offset = 1
#21 0x20000000411d0030 in dissect_sccp (tvb=0x2000000001a70348, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet-sccp.c:2137
	sccp_tree = (proto_tree *) 0x2000000001a6f230
	mtp3_addr_p = (const mtp3_addr_pc_t *) 0x18
#22 0x2000000040a03ec0 in call_dissector_through_handle (
    handle=0x20000000003c4a20, tvb=0x2000000001a70348, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet.c:386
	saved_proto = 0x2000000041675f40 "SCCP"
	ret = 0
#23 0x2000000040a04cd0 in call_dissector_work (handle=0x20000000003c4a20, 
    tvb=0x2000000001a70348, pinfo_arg=0x2000000000573410, 
    tree=0x2000000001a6e780) at packet.c:561
	pinfo = (packet_info * volatile) 0x2000000000573410
	saved_proto = 0x200000004168fa58 "MTP3"
	saved_can_desegment = 0
	ret = 44
	save_writable = 1
	save_dl_src = {type = 673213545, len = 1634623849, 
  data = 0x726f2e616e616940 <Address 0x726f2e616e616940 out of bounds>}
	save_dl_dst = {type = 170797415, len = 538976266, 
  data = 0x2020202020202020 <Address 0x2020202020202020 out of bounds>}
	save_net_src = {type = 538976288, len = 543516756, 
  data = 0x6e6f6974616c6572 <Address 0x6e6f6974616c6572 out of bounds>}
	save_net_dst = {type = 1885956211, len = 1952801312, 
  data = 0x656874206e656577 <Address 0x656874206e656577 out of bounds>}
	save_src = {type = 1936941344, len = 1835951977, 
  data = 0x6920666f20746e65 <Address 0x6920666f20746e65 out of bounds>}
	save_dst = {type = 1886999654, len = 538970725, 
  data = 0x2020202020202020 <Address 0x2020202020202020 out of bounds>}
	saved_layer_names_len = 21
	__PRETTY_FUNCTION__ = "call_dissector_work"
#24 0x2000000040a05660 in dissector_try_port (
    sub_dissectors=0x20000000001bea60, port=3, tvb=0x2000000001a70348, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x0
	handle = (struct dissector_handle *) 0x20000000003c4a20
	saved_match_port = 2
#25 0x2000000040fe3ab0 in dissect_mtp3_payload (tvb=0x2000000000573418, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet-mtp3.c:471
	service_indicator = 3 '\003'
	payload_tvb = (tvbuff_t *) 0x2000000001a70348
#26 0x2000000040fe3f20 in dissect_mtp3 (tvb=0x2000000001a702f0, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet-mtp3.c:529
	tap_rec = {addr_opc = {type = MTP3_ADDR_FMT_DEC, pc = 100, 
    ni = 2 '\002'}, addr_dpc = {type = MTP3_ADDR_FMT_DEC, pc = 10, 
    ni = 2 '\002'}, si_code = 3 '\003', size = 39}
	mtp3_item = (proto_item *) 0x2000000041f453e0
	mtp3_tree = (proto_tree *) 0x2000000041f453ca
#27 0x2000000040a03ec0 in call_dissector_through_handle (
    handle=0x20000000001bea40, tvb=0x2000000001a702f0, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet.c:386
	saved_proto = 0x200000004168fa58 "MTP3"
	ret = 0
#28 0x2000000040a04cd0 in call_dissector_work (handle=0x20000000001bea40, 
    tvb=0x2000000001a702f0, pinfo_arg=0x2000000000573410, 
    tree=0x2000000001a6e780) at packet.c:561
	pinfo = (packet_info * volatile) 0x2000000000573410
	saved_proto = 0x2000000041675720 "M2UA"
	saved_can_desegment = 0
	ret = 49
	save_writable = 2
	save_dl_src = {type = 1948262432, len = 1667309679, 
  data = 0x616d202c65766974 <Address 0x616d202c65766974 out of bounds>}
	save_dl_dst = {type = 1735289195, len = 544500000, 
  data = 0x6c62616c69617661 <Address 0x6c62616c69617661 out of bounds>}
	save_net_src = {type = 1868963941, len = 1937055858, 
  data = 0x6568742079622065 <Address 0x6568742079622065 out of bounds>}
	save_net_dst = {type = 1851878688, len = 1684367201, 
  data = 0x202020202020200a <Address 0x202020202020200a out of bounds>}
	save_src = {type = 824188960, len = 538976288, 
  data = 0x6563697665642020 <Address 0x6563697665642020 out of bounds>}
	save_dst = {type = 537526331, len = 538976288, 
  data = 0x2020202020202020 <Address 0x2020202020202020 out of bounds>}
	saved_layer_names_len = 16
	__PRETTY_FUNCTION__ = "call_dissector_work"
#29 0x2000000040a07cd0 in call_dissector (handle=0x20000000001bea40, 
    tvb=0x2000000001a702f0, pinfo=0x2000000000573410, tree=0x2000000001a6e780)
    at packet.c:1704
	ret = 0
	__PRETTY_FUNCTION__ = "call_dissector"
#30 0x2000000040f9c440 in dissect_protocol_data_1_parameter (
    parameter_tvb=0x2000000001a70298, pinfo=0x2000000000573410, 
    tree=0x2000000001a6e780, parameter_item=0x2000000001a6f0b0)
    at packet-m2ua.c:510
	payload_tvb = (tvbuff_t *) 0x2000000001a702f0
	payload_length = 27715456
#31 0x2000000040f9d970 in dissect_parameter (
    parameter_tvb=0x2000000001a70298, pinfo=0x2000000000573410, 
    tree=0x2000000001a6e780, m2ua_tree=0x2000000001a6f0b0)
    at packet-m2ua.c:958
	tag = 768
	length = 43
	padding_length = 1
	parameter_item = (proto_item *) 0x2000000001a6f0b0
	parameter_tree = (proto_tree *) 0x2000000001a6f0b0
#32 0x2000000040f9ddd0 in dissect_parameters (
    parameters_tvb=0x2000000001a70240, pinfo=0x2000000000573410, 
    tree=0x2000000001a6e780, m2ua_tree=0x2000000001a6ea20)
    at packet-m2ua.c:1032
	offset = 0
	length = 0
	total_length = 44
	remaining_length = 44
#33 0x2000000040f9df10 in dissect_message (message_tvb=0x2000000001a70190, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780, 
    m2ua_tree=0x2000000001a6ea20) at packet-m2ua.c:1047
	common_header_tvb = (tvbuff_t *) 0x2000000001a701e8
	parameters_tvb = (tvbuff_t *) 0x2000000001a70240
#34 0x2000000040f9e040 in dissect_m2ua (message_tvb=0x2000000001a70190, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet-m2ua.c:1070
	m2ua_tree = (proto_tree *) 0x0
#35 0x2000000040a03ec0 in call_dissector_through_handle (
    handle=0x200000000057e2e0, tvb=0x2000000001a70190, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet.c:386
	saved_proto = 0x2000000041675720 "M2UA"
	ret = 0
#36 0x2000000040a04cd0 in call_dissector_work (handle=0x200000000057e2e0, 
    tvb=0x2000000001a70190, pinfo_arg=0x2000000000573410, 
    tree=0x2000000001a6e780) at packet.c:561
	pinfo = (packet_info * volatile) 0x2000000000573410
	saved_proto = 0x20000000413c7ef8 "SCTP"
	saved_can_desegment = 0
	ret = 64
	save_writable = 0
	save_dl_src = {type = 1869504544, len = 1399736692, 
  data = 0x2027656369767265 <Address 0x2027656369767265 out of bounds>}
	save_dl_dst = {type = 537555567, len = 538976288, 
  data = 0x6020202020202020 <Address 0x6020202020202020 out of bounds>}
	save_net_src = {type = 1769235297, len = 774333814, 
  data = 0x6920746168542020 <Address 0x6920746168542020 out of bounds>}
	save_net_dst = {type = 842345587, len = 544105832, 
  data = 0x3664656972657571 <Address 0x3664656972657571 out of bounds>}
	save_src = {type = 875561010, len = 1936291941, 
  data = 0x366f6320676e6974 <Address 0x366f6320676e6974 out of bounds>}
	save_dst = {type = 875561010, len = 543973749, 
  data = 0x643532640a776f72 <Address 0x643532640a776f72 out of bounds>}
	saved_layer_names_len = 11
	__PRETTY_FUNCTION__ = "call_dissector_work"
#37 0x2000000040a05660 in dissector_try_port (
    sub_dissectors=0x20000000003c4ae0, port=2, tvb=0x2000000001a70190, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x0
	handle = (struct dissector_handle *) 0x200000000057e2e0
	saved_match_port = 132
#38 0x20000000411e7240 in dissect_payload (payload_tvb=0x2000000001a70190, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780, ppi=2)
    at packet-sctp.c:1518
	low_port = 2
	high_port = 2
#39 0x20000000411e7990 in dissect_data_chunk (chunk_tvb=0x2000000001a700e0, 
    chunk_length=68, pinfo=0x2000000000573410, tree=0x2000000001a6e780, 
    chunk_tree=0x2000000001a7d170, chunk_item=0x2000000001a7d170, 
    flags_item=0x2000000001a6e900) at packet-sctp.c:1646
	number_of_ppid = 0
	payload_proto_id = 2
	flags_tree = (proto_tree *) 0x0
	e_bit = 0 '\0'
	b_bit = 0 '\0'
#40 0x20000000411e9a80 in dissect_sctp_chunk (chunk_tvb=0x2000000001a700e0, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780, 
    sctp_tree=0x2000000001a7d170, useinfo=1) at packet-sctp.c:2208
	type = 0 '\0'
	length = 68
	padding_length = 0
	result = 0
	flags_item = (proto_item *) 0x2000000001a6e900
	chunk_item = (proto_item *) 0x2000000001a7d170
	chunk_tree = (proto_tree *) 0x2000000001a7d170
	type_tree = (proto_tree *) 0x2000000001a6e7b0
#41 0x20000000411ea0f0 in dissect_sctp_chunks (tvb=0x2000000001a70138, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780, 
    sctp_item=0x2000000001a7d260, sctp_tree=0x2000000001a7d260, 
    encapsulated=68) at packet-sctp.c:2317
	chunk_tvb = (tvbuff_t *) 0x0
	length = 0
	total_length = 68
	remaining_length = 68
	last_offset = 0
	offset = 12
	sctp_item_length_set = 0
#42 0x20000000411eade0 in dissect_sctp_packet (tvb=0x2000000001a70138, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780, encapsulated=0)
    at packet-sctp.c:2447
	checksum = 2904
	calculated_crc32c = 3529354848
	calculated_adler32 = 0
	length = 27775584
	crc32c_correct = 0
	adler32_correct = 0
	sctp_item = (proto_item *) 0x2000000001a7d260
	sctp_tree = (proto_tree *) 0x2000000001a7d260
#43 0x20000000411eb0e0 in dissect_sctp (tvb=0x2000000001a70138, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet-sctp.c:2486
	number_of_ppid = 0
#44 0x2000000040a03ec0 in call_dissector_through_handle (
    handle=0x200000000058c7c0, tvb=0x2000000001a70138, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet.c:386
	saved_proto = 0x20000000413c7ef8 "SCTP"
	ret = 0
#45 0x2000000040a04cd0 in call_dissector_work (handle=0x200000000058c7c0, 
    tvb=0x2000000001a70138, pinfo_arg=0x2000000000573410, 
    tree=0x2000000001a6e780) at packet.c:561
	pinfo = (packet_info * volatile) 0x2000000000573410
	saved_proto = 0x20000000413c7f40 "IP"
	saved_can_desegment = 0
	ret = 92
	save_writable = 536870912
	save_dl_src = {type = 1635123301, len = 1936029036, 
  data = 0x7461687420666f20 <Address 0x7461687420666f20 out of bounds>}
	save_dl_dst = {type = 1650553888, len = 1931961708, 
  data = 0x202020202020200a <Address 0x202020202020200a out of bounds>}
	save_net_src = {type = 538976288, len = 538976288, 
  data = 0x7065636e6f632020 <Address 0x7065636e6f632020 out of bounds>}
	save_net_dst = {type = 1818326388, len = 2003792416, 
  data = 0x6261206572612073 <Address 0x6261206572612073 out of bounds>}
	save_src = {type = 1948254316, len = 1700929647, 
  data = 0x65696669646f6d20 <Address 0x65696669646f6d20 out of bounds>}
	save_dst = {type = 1667510881, len = -1610612737, 
  data = 0x1400000031 <Address 0x1400000031 out of bounds>}
	saved_layer_names_len = 6
	__PRETTY_FUNCTION__ = "call_dissector_work"
#46 0x2000000040a05660 in dissector_try_port (
    sub_dissectors=0x20000000001be0e0, port=132, tvb=0x2000000001a70138, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x0
	handle = (struct dissector_handle *) 0x200000000058c7c0
	saved_match_port = 2048
#47 0x2000000040f03a90 in dissect_ip (tvb=0x2000000001a70088, 
    pinfo=0x2000000000573410, parent_tree=0x2000000001a6e780)
    at packet-ip.c:1179
	ip_tree = (proto_tree *) 0x2000000001a6e480
	field_tree = (proto_tree *) 0x20000000005734ec
	ti = (proto_item *) 0x2000000001a6e480
	tf = (proto_item *) 0x84
	addr = 33686018
	offset = 20
	hlen = 20
	optlen = 5715184
	flags = 0
	nxt = 132 '\204'
	ipsum = 0
	ipfd_head = (fragment_data *) 0x0
	next_tvb = (tvbuff_t *) 0x2000000001a70138
	update_col_info = 1
	save_fragmented = 0
	eip_arr = {{ip_v_hl = 69 'E', ip_tos = 0 '\0', ip_len = 100, 
    ip_id = 4660, ip_off = 0, ip_ttl = 0 '\0', ip_p = 132 '\204', 
    ip_sum = 41692, ip_src = {type = AT_IPv4, len = 4, 
      data = 0x200000000059181a "\001\001\001\001\002\002\002\002\vX\vX"}, 
    ip_dst = {type = AT_IPv4, len = 4, 
      data = 0x200000000059181e "\002\002\002\002\vX\vX"}}, {
    ip_v_hl = 69 'E', ip_tos = 0 '\0', ip_len = 272, ip_id = 4660, 
    ip_off = 43690, ip_ttl = 0 '\0', ip_p = 170 '�', ip_sum = 43690, 
    ip_src = {type = AT_IPv4, len = 4, 
      data = 0x200000000059181a "\001\001\001\001\002\002\002\002\vX\vX"}, 
    ip_dst = {type = AT_IPv4, len = 4, 
      data = 0x200000000059181e "\002\002\002\002\vX\vX"}}, {
    ip_v_hl = 69 'E', ip_tos = 0 '\0', ip_len = 112, ip_id = 4660, 
    ip_off = 0, ip_ttl = 0 '\0', ip_p = 132 '\204', ip_sum = 41680, ip_src = {
      type = AT_IPv4, len = 4, 
      data = 0x200000000059181a "\001\001\001\001\002\002\002\002\vX\vX"}, 
    ip_dst = {type = AT_IPv4, len = 4, 
      data = 0x200000000059181e "\002\002\002\002\vX\vX"}}, {
    ip_v_hl = 69 'E', ip_tos = 0 '\0', ip_len = 140, ip_id = 4660, 
    ip_off = 0, ip_ttl = 0 '\0', ip_p = 132 '\204', ip_sum = 41652, ip_src = {
      type = AT_IPv4, len = 4, 
      data = 0x200000000059181a "\001\001\001\001\002\002\002\002\vX\vX"}, 
    ip_dst = {type = AT_IPv4, len = 4, 
      data = 0x200000000059181e "\002\002\002\002\vX\vX"}}}
	eip_current = 0
	iph = (e_ip *) 0x2000000041f446c0
	src_addr = (const guchar *) 0x2000000001a70138 "\001"
	dst_addr = (const guchar *) 0x2000000001a70138 "\001"
	src32 = 16843009
	dst32 = 33686018
	tree = (proto_tree *) 0x2000000001a6e780
	item = (proto_item *) 0x0
	checksum_tree = (proto_tree *) 0x20000000005734f0
#48 0x2000000040a03ec0 in call_dissector_through_handle (
    handle=0x20000000001be120, tvb=0x2000000001a70088, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet.c:386
	saved_proto = 0x20000000413c7f40 "IP"
	ret = 0
#49 0x2000000040a04cd0 in call_dissector_work (handle=0x20000000001be120, 
    tvb=0x2000000001a70088, pinfo_arg=0x2000000000573410, 
    tree=0x2000000001a6e780) at packet.c:561
	pinfo = (packet_info * volatile) 0x2000000000573410
	saved_proto = 0x200000004165c7b0 "Ethernet"
	saved_can_desegment = 0
	ret = 112
	save_writable = 0
	save_dl_src = {type = 1299185789, len = 1866678857, 
  data = 0x65636e61696c706d <Address 0x65636e61696c706d out of bounds>}
	save_dl_dst = {type = 3435921523, len = 214748364, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	save_net_src = {type = 3368026110, len = -858993460, 
  data = 0x1003a <Address 0x1003a out of bounds>}
	save_net_dst = {type = AT_NONE, len = 0, 
  data = 0x10018 <Address 0x10018 out of bounds>}
	save_src = {type = AT_NONE, len = -1879048192, 
  data = 0xffec <Address 0xffec out of bounds>}
	save_dst = {type = 4294902015, len = 2147483647, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	saved_layer_names_len = 3
	__PRETTY_FUNCTION__ = "call_dissector_work"
#50 0x2000000040a05660 in dissector_try_port (
    sub_dissectors=0x20000000000a71c0, port=2048, tvb=0x2000000001a70088, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x0
	handle = (struct dissector_handle *) 0x20000000001be120
	saved_match_port = 1
#51 0x2000000040d55b90 in ethertype (etype=2048, tvb=0x2000000001a70030, 
    offset_after_etype=14, pinfo=0x2000000000573410, tree=0x2000000001a6e780, 
    fh_tree=0x2000000001a6e5d0, etype_id=8169, trailer_id=8171, fcs_len=-1)
    at packet-ethertype.c:189
	except_sn = {except_down = 0x9fffffffffffe2d0, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffda20, except_cleanup = 0x9fffffffffffda20}}
	except_ch = {except_id = 0x2000000041585b38, except_size = 1, 
  except_obj = {except_id = {except_group = 1, except_code = 2}, 
    except_message = 0x0, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 
        0, <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 0, 0, 0}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	description = 0x0
	next_tvb = (tvbuff_t *) 0x2000000001a70088
	length_before = 100
	dissector_found = 0
	saved_proto = 0x200000004165c7b0 "Ethernet"
	__PRETTY_FUNCTION__ = "ethertype"
#52 0x2000000040d51760 in dissect_eth_common (tvb=0x2000000001a70030, 
    pinfo=0x2000000000573410, parent_tree=0x2000000001a6e780, fcs_len=-1)
    at packet-eth.c:311
	ehdr = (eth_hdr * volatile) 0x2000000041f40528
	is_802_2 = 1970037110
	fh_tree = (proto_tree * volatile) 0x2000000001a6e5d0
	src_addr = (
    const guint8 *) 0x2000000000591806 "\001\001\001\t\001\001\b"
	dst_addr = (
    const guint8 *) 0x2000000000591800 "\002\002\002\002\002\002\001\001\001\t\001\001\b"
	ehdrs = {{dst = {type = AT_ETHER, len = 6, 
      data = 0x2000000000591800 "\002\002\002\002\002\002\001\001\001\t\001\001\b"}, src = {type = AT_ETHER, len = 6, 
      data = 0x2000000000591806 "\001\001\001\t\001\001\b"}, type = 2048}, {
    dst = {type = AT_ETHER, len = 6, 
      data = 0x2000000000591800 "\002\002\002\002\002\002\001\001\001\t\001\001\b"}, src = {type = AT_ETHER, len = 6, 
      data = 0x2000000000591806 "\001\001\001\t\001\001\b"}, type = 2048}, {
    dst = {type = AT_ETHER, len = 6, 
      data = 0x2000000000591800 "\002\002\002\002\002\002\001\001\001\t\001\001\b"}, src = {type = AT_ETHER, len = 6, 
      data = 0x2000000000591806 "\001\001\001\t\001\001\b"}, type = 2048}, {
    dst = {type = AT_ETHER, len = 6, 
      data = 0x2000000000591800 "\002\002\002\002\002\002\001\001\001\t\001\001\b"}, src = {type = AT_ETHER, len = 6, 
      data = 0x2000000000591806 "\001\001\001\t\001\001\b"}, type = 2048}}
	ehdr_num = 1
	tree = (proto_tree * volatile) 0x2000000001a6e780
#53 0x2000000040d51ab0 in dissect_eth_maybefcs (tvb=0x2000000001a70030, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet-eth.c:407
No locals.
#54 0x2000000040a03ec0 in call_dissector_through_handle (
    handle=0x200000000056d1a0, tvb=0x2000000001a70030, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet.c:386
	saved_proto = 0x200000004165c7b0 "Ethernet"
	ret = 0
#55 0x2000000040a04cd0 in call_dissector_work (handle=0x200000000056d1a0, 
    tvb=0x2000000001a70030, pinfo_arg=0x2000000000573410, 
    tree=0x2000000001a6e780) at packet.c:561
	pinfo = (packet_info * volatile) 0x2000000000573410
	saved_proto = 0x2000000041571aa8 "Frame"
	saved_can_desegment = 0
	ret = 154
	save_writable = 0
	save_dl_src = {type = 538976288, len = 538976288, 
  data = 0x7473655466692020 <Address 0x7473655466692020 out of bounds>}
	save_dl_dst = {type = 1701707776, len = 540876914, 
  data = 0x612d50492d796d27 <Address 0x612d50492d796d27 out of bounds>}
	save_net_src = {type = 1701995620, len = 690451315, 
  data = 0x4c494146203d3d20 <Address 0x4c494146203d3d20 out of bounds>}
	save_net_dst = {type = 4294901968, len = -1610612737, data = 0x0}
	save_src = {type = 875639056, len = 536870912, 
  data = 0x1 <Address 0x1 out of bounds>}
	save_dst = {type = 875639040, len = 536870912, 
  data = 0x20000000400dc200 "z�P�"}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#56 0x2000000040a05660 in dissector_try_port (
    sub_dissectors=0x20000000000a7500, port=1, tvb=0x2000000001a70030, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x0
	handle = (struct dissector_handle *) 0x200000000056d1a0
	saved_match_port = 0
#57 0x2000000040d92de0 in dissect_frame (tvb=0x2000000001a70030, 
    pinfo=0x2000000000573410, parent_tree=0x2000000001a6e780)
    at packet-frame.c:256
	except_sn = {except_down = 0x9fffffffffffe870, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffe2f0, except_cleanup = 0x9fffffffffffe2f0}}
	except_ch = {except_id = 0x200000004159f9d0, except_size = 1, 
  except_obj = {except_id = {except_group = 2305843010288337920, 
      except_code = 65598}, 
    except_message = 0xc9dffffff3620000 <Address 0xc9dffffff3620000 out of bounds>, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 
        0, <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 
        <invalid float value>, 0, <invalid float value>}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	fh_tree = (proto_tree *) 0x2000000001a6e810
	ti = (proto_item * volatile) 0x2000000001a6e600
	ts = {secs = 75, nsecs = 0}
	cap_len = 114
	pkt_len = 114
	tree = (proto_tree *) 0x2000000001a6e780
	item = (proto_item *) 0x0
#58 0x2000000040a03ec0 in call_dissector_through_handle (
    handle=0x20000000000a7540, tvb=0x2000000001a70030, 
    pinfo=0x2000000000573410, tree=0x2000000001a6e780) at packet.c:386
	saved_proto = 0x2000000041571aa8 "Frame"
	ret = 0
#59 0x2000000040a04cd0 in call_dissector_work (handle=0x20000000000a7540, 
    tvb=0x2000000001a70030, pinfo_arg=0x2000000000573410, 
    tree=0x2000000001a6e780) at packet.c:561
	pinfo = (packet_info * volatile) 0x2000000000573410
	saved_proto = 0x20000000413c8128 "<Missing Protocol Name>"
	saved_can_desegment = 0
	ret = 154
	save_writable = 536870912
	save_dl_src = {type = 2264635920, len = -1830241746, 
  data = 0x10003 <Address 0x10003 out of bounds>}
	save_dl_dst = {type = 875639090, len = -859732672, 
  data = 0xffe1 <Address 0xffe1 out of bounds>}
	save_net_src = {type = 875639090, len = -1237319680, 
  data = 0xffec <Address 0xffec out of bounds>}
	save_net_dst = {type = AT_NONE, len = 0, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	save_src = {type = AT_NONE, len = 0, 
  data = 0x1000c <Address 0x1000c out of bounds>}
	save_dst = {type = AT_NONE, len = 0, 
  data = 0x1 <Address 0x1 out of bounds>}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#60 0x2000000040a07cd0 in call_dissector (handle=0x20000000000a7540, 
    tvb=0x2000000001a70030, pinfo=0x2000000000573410, tree=0x2000000001a6e780)
    at packet.c:1704
	ret = 0
	__PRETTY_FUNCTION__ = "call_dissector"
#61 0x2000000040a03a90 in dissect_packet (edt=0x2000000000573400, 
    pseudo_header=0x2000000000573410, 
    pd=0x2000000000591800 "\002\002\002\002\002\002\001\001\001\t\001\001\b", 
    fd=0x9fffffffffffeaf0, cinfo=0x0) at packet.c:325
	except_sn = {except_down = 0x0, except_type = XCEPT_CATCHER, 
  except_info = {except_catcher = 0x9fffffffffffe890, 
    except_cleanup = 0x9fffffffffffe890}}
	except_ch = {except_id = 0x20000000413c8318, except_size = 1, 
  except_obj = {except_id = {except_group = 0, except_code = 0}, 
    except_message = 0x0, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 
        0, <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 
        <invalid float value>, 0, 0}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	__PRETTY_FUNCTION__ = "dissect_packet"
#62 0x20000000409fd500 in epan_dissect_run (edt=0x2000000000573400, 
    pseudo_header=0x2000000000572e48, 
    data=0x2000000000591800 "\002\002\002\002\002\002\001\001\001\t\001\001\b", fd=0x9fffffffffffeaf0, cinfo=0x0) at epan.c:161
No locals.
#63 0x200000000003a550 in process_packet (cf=0x2000000000093878, pdh=0x0, 
    offset=2305843009219408896, whdr=0x2000000000572e28, 
    pseudo_header=0x2000000000572e48, 
    pd=0x2000000000591800 "\002\002\002\002\002\002\001\001\001\t\001\001\b", 
    err=0x9fffffffffffeb60) at tethereal.c:2080
	fdata = {next = 0x0, prev = 0x0, pfd = 0x0, num = 5, pkt_len = 114, 
  cap_len = 114, cum_bytes = 914, abs_ts = {secs = 1111154617, nsecs = 0}, 
  rel_ts = {secs = 75, nsecs = 0}, del_ts = {secs = 0, nsecs = 0}, 
  file_off = 904, lnk_t = 1, flags = {passed_dfilter = 0, encoding = 0, 
    visited = 0, marked = 0, ref_time = 0}, color_filter = 0x1000c}
	create_proto_tree = 5714944
	edt = (epan_dissect_t *) 0x2000000000573400
	passed = 0
#64 0x2000000000039b00 in load_cap_file (cf=0x2000000000093878, 
    save_file=0x0, out_file_type=604368) at tethereal.c:1905
	linktype = 5713448
	snapshot_length = 5713448
	pdh = (wtap_dumper *) 0x0
	err = 1462964150
	err_info = (gchar *) 0x1003e <Address 0x1003e out of bounds>
	data_offset = 904
#65 0x2000000000037c20 in main (argc=6, argv=0x28) at tethereal.c:1298
	opt = 0
	i = 6
	arg_error = 6647016
	gpf_path = 0x0
	pf_path = 0x0
	gdp_path = 0x0
	dp_path = 0x0
	gpf_open_errno = 0
	gpf_read_errno = -2147483648
	pf_open_errno = 0
	pf_read_errno = -2147483648
	gdp_open_errno = 65598
	gdp_read_errno = 0
	dp_open_errno = 65516
	dp_read_errno = 0
	err = 0
	capture_filter_specified = 670168
	list_link_layer_types = 0
	start_capture = 0
	quiet = 0
	save_file = (gchar *) 0x0
	out_file_type = 2
	cf_name = (
    gchar *) 0x2000000000594a80 "/home/buildbot/ethereal/random/editcap.out"
	rfilter = (gchar *) 0x0
	fcode = {bf_len = 4026531840, bf_insns = 0x10003}
	rfcode = (dfilter_t *) 0x0
	prefs = (e_prefs *) 0x2000000041f4de58
	optstring = "a:b:c:d:Df:F:hi:lLnN:o:pqr:R:s:St:T:vVw:xy:z:"
	__PRETTY_FUNCTION__ = "main"


(no stderr output)


Bug 638 posted.