[Buildbot <buildbot-do-not-reply@xxxxxxxxxxxx>]

Problems have been found with the following capture file(s):

http://www.ethereal.com/distribution/buildbot-builds/randpkt/editcap.441a9130.pcap


Error information:
Core was generated by `lt-tethereal'.
Program terminated with signal 11, Segmentation fault.
#0  tvb_length_remaining (tvb=0x7300000000, offset=0) at tvbuff.c:585
585		DISSECTOR_ASSERT(tvb->initialized);
#0  tvb_length_remaining (tvb=0x7300000000, offset=0) at tvbuff.c:585
	abs_offset = 0
	abs_length = 536870912
#1  0x20000000413e7c20 in dissect_tcap_OrigTransactionID (implicit_tag=0, 
    tvb=0x2000000000690ba0, offset=100, pinfo=0x200000000059dc10, 
    tree=0x20000000006fa660, hf_index=1094614496) at tcap.cnf:213
	parameter_tvb = (tvbuff_t *) 0x7300000000
	len = 0 '\0'
	i = 160 '�'
#2  0x20000000413e7de0 in dissect_otid (pinfo=0x200000000059dc10, 
    tree=0x20000000006fa660, tvb=0x2000000000690ba0, offset=0) at tcap.cnf:229
No locals.
#3  0x2000000040c12c30 in dissect_ber_sequence (implicit_tag=100, 
    pinfo=0x200000000059dc10, parent_tree=0x9fffffffffffd61c, 
    tvb=0x2000000000690b48, offset=0, seq=0x2000000042024f40, hf_id=-10751, 
    ett_id=-10720) at packet-ber.c:1174
	len = 0
	hoffset = 0
	count = 100
	class = 1 '\001'
	pc = 0
	tag = 8
	eoffset = 100
	class = 2 '\002'
	pc = 115
	ind = 0
	ind_field = 0
	tag = 101087488
	len = 115
	tree = (proto_tree *) 0x20000000006fa660
	end_offset = 115
	s_offset = 0
	length_remaining = 100
	next_tvb = (tvbuff_t *) 0x2000000000690ba0
#4  0x20000000413e7eb0 in dissect_tcap_Begin (implicit_tag=1, 
    tvb=0x2000000000690b48, offset=0, pinfo=0x200000000059dc10, 
    tree=0x20000000006fa210, hf_index=37715) at tcap.cnf:246
No locals.
#5  0x20000000413e7f10 in dissect_begin_impl (pinfo=0x200000000059dc10, 
    tree=0x20000000006fa210, tvb=0x2000000000690b48, offset=0) at tcap.cnf:253
No locals.
#6  0x2000000040c140b0 in dissect_ber_choice (pinfo=0x200000000059dc10, 
    parent_tree=0x20000000006fa210, tvb=0x2000000000690af0, 
    offset=1107450984, choice=0x2000000042025c50, hf_id=-1, ett_id=11599, 
    branch_taken=0x0) at packet-ber.c:1628
	class = 1 '\001'
	pc = 1
	ind = 0
	tag = 2
	len = 115
	ch = (const ber_choice_t *) 0x2000000042025c68
	tree = (proto_tree *) 0x20000000006fa210
	end_offset = 117
	start_offset = 2
	count = 100
	hoffset = 2
	hfinfo = (header_field_info *) 0x64
	length = 6884168
	length_remaining = 6884168
	next_tvb = (tvbuff_t *) 0x2000000000690b48
	first_pass = 1
#7  0x20000000413eac10 in dissect_tcap_MessageType (implicit_tag=0, 
    tvb=0x2000000000690af0, offset=0, pinfo=0x200000000059dc10, 
    tree=0x20000000006fa210, hf_index=-1) at tcap.cnf:311
No locals.
#8  0x20000000413eadf0 in dissect_tcap (tvb=0x2000000000690af0, 
    pinfo=0x200000000059dc10, parent_tree=0x20000000006fb290)
    at packet-tcap-template.c:147
	tree = (proto_tree *) 0x20000000006fa210
#9  0x2000000040aa8df0 in call_dissector_through_handle (
    handle=0x20000000004c6540, tvb=0x2000000000690af0, 
    pinfo=0x200000000059dc10, tree=0x20000000006fb290) at packet.c:386
	saved_proto = 0x20000000418c4a08 "TCAP"
	ret = 100
#10 0x2000000040aa9c10 in call_dissector_work (handle=0x20000000004c6540, 
    tvb=0x2000000000690af0, pinfo_arg=0x200000000059dc10, 
    tree=0x20000000006fb290) at packet.c:561
	pinfo = (packet_info * volatile) 0x200000000059dc10
	saved_proto = 0x20000000417acb40 "SCCP"
	saved_can_desegment = 0
	ret = 0
	save_writable = 1
	save_dl_src = {type = AT_NONE, len = -1879048192, 
  data = 0x10006 <Address 0x10006 out of bounds>}
	save_dl_dst = {type = 3340530119, len = 29826161, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	save_net_src = {type = 2175940607, len = -477218589, 
  data = 0x10037 <Address 0x10037 out of bounds>}
	save_net_dst = {type = AT_NONE, len = -512225278, 
  data = 0x1001a <Address 0x1001a out of bounds>}
	save_src = {type = 892534784, len = -264241152, 
  data = 0xffec <Address 0xffec out of bounds>}
	save_dst = {type = 4294902015, len = -1, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	saved_layer_names_len = 14
	__PRETTY_FUNCTION__ = "call_dissector_work"
#11 0x2000000040aaa5a0 in dissector_try_port (
    sub_dissectors=0x200000000041dda0, port=8, tvb=0x2000000000690af0, 
    pinfo=0x200000000059dc10, tree=0x20000000006fb290) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x64
	handle = (struct dissector_handle *) 0x20000000004c6540
	saved_match_port = 3
#12 0x20000000412ea190 in dissect_sccp_data_param (tvb=0x2000000000690af0, 
    pinfo=0x200000000059dc10, tree=0x20000000006fb290) at packet-sccp.c:1407
	ssn = 8 '\b'
#13 0x20000000412ead90 in dissect_sccp_parameter (tvb=0x20000000006908e0, 
    pinfo=0x200000000059dc10, sccp_tree=0x20000000006fa960, 
    tree=0x20000000006fb290, parameter_type=15 '\017', offset=16, 
    parameter_length=117) at packet-sccp.c:1615
	parameter_tvb = (tvbuff_t *) 0x64
#14 0x20000000412eb150 in dissect_sccp_variable_parameter (
    tvb=0x20000000006908e0, pinfo=0x200000000059dc10, 
    sccp_tree=0x20000000006fa960, tree=0x20000000006fb290, 
    parameter_type=15 '\017', offset=15) at packet-sccp.c:1702
	parameter_length = 117
	length_length = 1 '\001'
#15 0x20000000412ec420 in dissect_sccp_message (tvb=0x20000000006908e0, 
    pinfo=0x200000000059dc10, sccp_tree=0x20000000006fa960, 
    tree=0x20000000006fb290) at packet-sccp.c:1981
	variable_pointer1 = 5
	variable_pointer2 = 8
	variable_pointer3 = 15
	optional_pointer = 0
	offset = 1
	save_fragmented = 1107903416
	new_tvb = (tvbuff_t *) 0xf
	frag_msg = (fragment_data *) 0x5
	source_local_ref = 8
	more = 15 '\017'
#16 0x20000000412ee150 in dissect_sccp (tvb=0x20000000006908e0, 
    pinfo=0x200000000059dc10, tree=0x20000000006fb290) at packet-sccp.c:2340
	sccp_tree = (proto_tree *) 0x20000000006fa960
	mtp3_addr_p = (const mtp3_addr_pc_t *) 0x7300000004
#17 0x2000000040aa8df0 in call_dissector_through_handle (
    handle=0x200000000041dd40, tvb=0x20000000006908e0, 
    pinfo=0x200000000059dc10, tree=0x20000000006fb290) at packet.c:386
	saved_proto = 0x20000000417acb40 "SCCP"
	ret = 100
#18 0x2000000040aa9c10 in call_dissector_work (handle=0x200000000041dd40, 
    tvb=0x20000000006908e0, pinfo_arg=0x200000000059dc10, 
    tree=0x20000000006fb290) at packet.c:561
	pinfo = (packet_info * volatile) 0x200000000059dc10
	saved_proto = 0x20000000417c67f8 "MTP3"
	saved_can_desegment = 0
	ret = 0
	save_writable = 1
	save_dl_src = {type = 1946168947, len = 1936744818, data = 0x0}
	save_dl_dst = {type = 538976288, len = 538976288, 
  data = 0x6173696420656220 <Address 0x6173696420656220 out of bounds>}
	save_net_src = {type = 1684368482, len = 537528878, 
  data = 0x2020202020202020 <Address 0x2020202020202020 out of bounds>}
	save_net_dst = {type = 4294957520, len = -1610612737, 
  data = 0x9fffffffffffd9d4 ""}
	save_src = {type = 4294957528, len = -1610612737, 
  data = 0x9fffffffffffd9dc ""}
	save_dst = {type = 4294957536, len = -1610612737, 
  data = 0x4000 <Address 0x4000 out of bounds>}
	saved_layer_names_len = 9
	__PRETTY_FUNCTION__ = "call_dissector_work"
#19 0x2000000040aaa5a0 in dissector_try_port (
    sub_dissectors=0x20000000001c2ca0, port=3, tvb=0x20000000006908e0, 
    pinfo=0x200000000059dc10, tree=0x20000000006fb290) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x64
	handle = (struct dissector_handle *) 0x200000000041dd40
	saved_match_port = 42
#20 0x20000000410a2f50 in dissect_mtp3_payload (tvb=0x200000000059dc18, 
    pinfo=0x200000000059dc10, tree=0x20000000006fb290) at packet-mtp3.c:492
	service_indicator = 3 '\003'
	payload_tvb = (tvbuff_t *) 0x20000000006908e0
#21 0x20000000410a33c0 in dissect_mtp3 (tvb=0x2000000000690888, 
    pinfo=0x200000000059dc10, tree=0x20000000006fb290) at packet-mtp3.c:550
	tap_rec = {addr_opc = {type = MTP3_ADDR_FMT_DEC, pc = 12000, 
    ni = 2 '\002'}, addr_dpc = {type = MTP3_ADDR_FMT_DEC, pc = 9371, 
    ni = 2 '\002'}, si_code = 3 '\003', size = 138}
	mtp3_item = (proto_item *) 0x2000000042133be8
	mtp3_tree = (proto_tree *) 0x2000000042133bd2
#22 0x2000000040aa8df0 in call_dissector_through_handle (
    handle=0x20000000001c2c80, tvb=0x2000000000690888, 
    pinfo=0x200000000059dc10, tree=0x20000000006fb290) at packet.c:386
	saved_proto = 0x20000000417c67f8 "MTP3"
	ret = 100
#23 0x2000000040aa9c10 in call_dissector_work (handle=0x20000000001c2c80, 
    tvb=0x2000000000690888, pinfo_arg=0x200000000059dc10, 
    tree=0x20000000006fb290) at packet.c:561
	pinfo = (packet_info * volatile) 0x200000000059dc10
	saved_proto = 0x20000000417ab370 "MTP2"
	saved_can_desegment = 0
	ret = 0
	save_writable = 1
	save_dl_src = {type = 538976288, len = 538976288, 
  data = 0x6e69646f636e6520 <Address 0x6e69646f636e6520 out of bounds>}
	save_dl_dst = {type = 811999335, len = 170814834, 
  data = 0x202020202020200a <Address 0x202020202020200a out of bounds>}
	save_net_src = {type = 1866858528, len = 2019893362, 
  data = 0x74202c656c706d61 <Address 0x74202c656c706d61 out of bounds>}
	save_net_dst = {type = 1109419368, len = 1931498053, 
  data = 0x617a696c61697265 <Address 0x617a696c61697265 out of bounds>}
	save_src = {type = 1852795252, len = 543584032, 
  data = 0x32312065756c6176 <Address 0x32312065756c6176 out of bounds>}
	save_dst = {type = 538970675, len = 538976288, 
  data = 0x797420666f202020 <Address 0x797420666f202020 out of bounds>}
	saved_layer_names_len = 4
	__PRETTY_FUNCTION__ = "call_dissector_work"
#24 0x2000000040aacc10 in call_dissector (handle=0x20000000001c2c80, 
    tvb=0x2000000000690888, pinfo=0x200000000059dc10, tree=0x20000000006fb290)
    at packet.c:1704
	ret = 100
	__PRETTY_FUNCTION__ = "call_dissector"
#25 0x20000000410a1380 in dissect_mtp2_msu (su_tvb=0x2000000000690830, 
    pinfo=0x200000000059dc10, mtp2_item=0x20000000006faf30, 
    tree=0x20000000006fb290) at packet-mtp2.c:186
	sif_sio_length = 7320208
	sif_sio_tvb = (tvbuff_t *) 0x64
#26 0x20000000410a1550 in dissect_mtp2_su (su_tvb=0x2000000000690830, 
    pinfo=0x200000000059dc10, mtp2_item=0x20000000006faf30, 
    mtp2_tree=0x20000000006faf30, tree=0x20000000006fb290)
    at packet-mtp2.c:215
	li = 100
#27 0x20000000410a1720 in dissect_mtp2 (tvb=0x2000000000690830, 
    pinfo=0x200000000059dc10, tree=0x20000000006fb290) at packet-mtp2.c:239
	mtp2_item = (proto_item *) 0x20000000006faf30
	mtp2_tree = (proto_tree *) 0x20000000006faf30
#28 0x2000000040aa8df0 in call_dissector_through_handle (
    handle=0x20000000005aee00, tvb=0x2000000000690830, 
    pinfo=0x200000000059dc10, tree=0x20000000006fb290) at packet.c:386
	saved_proto = 0x20000000417ab370 "MTP2"
	ret = 100
#29 0x2000000040aa9c10 in call_dissector_work (handle=0x20000000005aee00, 
    tvb=0x2000000000690830, pinfo_arg=0x200000000059dc10, 
    tree=0x20000000006fb290) at packet.c:561
	pinfo = (packet_info * volatile) 0x200000000059dc10
	saved_proto = 0x20000000416a4290 "Frame"
	saved_can_desegment = 0
	ret = 0
	save_writable = 0
	save_dl_src = {type = 538976288, len = 538976288, 
  data = 0x7473655466692020 <Address 0x7473655466692020 out of bounds>}
	save_dl_dst = {type = 1701707776, len = 540876914, 
  data = 0x612d50492d796d27 <Address 0x612d50492d796d27 out of bounds>}
	save_net_src = {type = 1701995620, len = 690451315, 
  data = 0x4c494146203d3d20 <Address 0x4c494146203d3d20 out of bounds>}
	save_net_dst = {type = AT_NONE, len = 0, data = 0x0}
	save_src = {type = 825504016, len = 536870912, 
  data = 0x1 <Address 0x1 out of bounds>}
	save_dst = {type = 825504240, len = -1610612737, data = 0x0}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#30 0x2000000040aaa5a0 in dissector_try_port (
    sub_dissectors=0x20000000000ab620, port=42, tvb=0x2000000000690830, 
    pinfo=0x200000000059dc10, tree=0x20000000006fb290) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x64
	handle = (struct dissector_handle *) 0x20000000005aee00
	saved_match_port = 0
#31 0x2000000040e4a160 in dissect_frame (tvb=0x2000000000690830, 
    pinfo=0x200000000059dc10, parent_tree=0x20000000006fb290)
    at packet-frame.c:272
	except_sn = {except_down = 0x9fffffffffffe870, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffe2f0, except_cleanup = 0x9fffffffffffe2f0}}
	except_ch = {except_id = 0x20000000416d3c58, except_size = 1, 
  except_obj = {except_id = {except_group = 2314885530818453536, 
      except_code = 2314885530818453536}, 
    except_message = 0x2020202020202020 <Address 0x2020202020202020 out of bounds>, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 
        0, <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 0, 0, 0}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	fh_tree = (proto_tree *) 0x20000000006fa9f0
	ti = (proto_item * volatile) 0x20000000006faf90
	ts = {secs = 0, nsecs = 45000}
	cap_len = 141
	pkt_len = 141
	tree = (proto_tree *) 0x20000000006fb290
	item = (proto_item *) 0x64
#32 0x2000000040aa8df0 in call_dissector_through_handle (
    handle=0x20000000000ab640, tvb=0x2000000000690830, 
    pinfo=0x200000000059dc10, tree=0x20000000006fb290) at packet.c:386
	saved_proto = 0x20000000416a4290 "Frame"
	ret = 100
#33 0x2000000040aa9c10 in call_dissector_work (handle=0x20000000000ab640, 
    tvb=0x2000000000690830, pinfo_arg=0x200000000059dc10, 
    tree=0x20000000006fb290) at packet.c:561
	pinfo = (packet_info * volatile) 0x200000000059dc10
	saved_proto = 0x20000000414f54d8 "<Missing Protocol Name>"
	saved_can_desegment = 0
	ret = 0
	save_writable = 0
	save_dl_src = {type = 1119184540, len = 536870912, 
  data = 0x2000000042b566a0 "\210\b\001"}
	save_dl_dst = {type = 825504168, len = 536870912, 
  data = 0x4200 <Address 0x4200 out of bounds>}
	save_net_src = {type = 825504144, len = -1610612737, data = 0x0}
	save_net_dst = {type = 1870004329, len = 536896875, 
  data = 0x30307830 <Address 0x30307830 out of bounds>}
	save_src = {type = AT_NONE, len = 0, data = 0x0}
	save_dst = {type = 4294960576, len = -1610612737, 
  data = 0x1 <Address 0x1 out of bounds>}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#34 0x2000000040aacc10 in call_dissector (handle=0x20000000000ab640, 
    tvb=0x2000000000690830, pinfo=0x200000000059dc10, tree=0x20000000006fb290)
    at packet.c:1704
	ret = 100
	__PRETTY_FUNCTION__ = "call_dissector"
#35 0x2000000040aa89c0 in dissect_packet (edt=0x200000000059dc00, 
    pseudo_header=0x200000000059dc10, 
    pd=0x2000000000690000 "��?\203\233$��\t", fd=0x9fffffffffffeaf0, 
    cinfo=0x0) at packet.c:325
	except_sn = {except_down = 0x0, except_type = XCEPT_CATCHER, 
  except_info = {except_catcher = 0x9fffffffffffe890, 
    except_cleanup = 0x9fffffffffffe890}}
	except_ch = {except_id = 0x20000000414f56c8, except_size = 1, 
  except_obj = {except_id = {except_group = 0, except_code = 0}, 
    except_message = 0x0, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 
        0, <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 
        <invalid float value>, 0, 0}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	__PRETTY_FUNCTION__ = "dissect_packet"
#36 0x2000000040aa1870 in epan_dissect_run (edt=0x200000000059dc00, 
    pseudo_header=0x200000000059d648, 
    data=0x2000000000690000 "��?\203\233$��\t", fd=0x9fffffffffffeaf0, 
    cinfo=0x0) at epan.c:161
No locals.
#37 0x200000000003ca70 in process_packet (cf=0x20000000000970b8, 
    offset=2305843009219582976, whdr=0x200000000059d628, 
    pseudo_header=0x200000000059d648, 
    pd=0x2000000000690000 "��?\203\233$��\t") at tethereal.c:2291
	fdata = {next = 0x0, prev = 0x0, pfd = 0x0, num = 22, pkt_len = 141, 
  cap_len = 141, cum_bytes = 3102, abs_ts = {secs = 1121412027, 
    nsecs = 86000}, rel_ts = {secs = 0, nsecs = 45000}, del_ts = {secs = 0, 
    nsecs = 1000}, file_off = 3337, lnk_t = 42, flags = {passed_dfilter = 0, 
    encoding = 0, visited = 0, marked = 0, ref_time = 0}, color_filter = 0x0}
	create_proto_tree = 5889024
	edt = (epan_dissect_t *) 0x200000000059dc00
	passed = 618680
#38 0x200000000003bf30 in load_cap_file (cf=0x20000000000970b8, 
    save_file=0x0, out_file_type=2) at tethereal.c:2106
	linktype = 5887528
	snapshot_length = 5887560
	pdh = (wtap_dumper *) 0x0
	err = 1462964150
	err_info = (gchar *) 0x1003e <Address 0x1003e out of bounds>
	data_offset = 3337
	save_file_string = 0x0
#39 0x2000000000039b10 in main (argc=6, argv=0x28) at tethereal.c:1423
	opt = 100
	i = 6
	gpf_path = 0x0
	pf_path = 0x0
	gdp_path = 0x0
	dp_path = 0x0
	gpf_open_errno = 0
	gpf_read_errno = -2147483648
	pf_open_errno = 0
	pf_read_errno = -2147483648
	gdp_open_errno = 65598
	gdp_read_errno = 0
	dp_open_errno = 65516
	dp_read_errno = 0
	err = 0
	capture_filter_specified = 6818408
	list_link_layer_types = 0
	start_capture = 0
	quiet = 0
	out_file_type = 2
	cf_name = (
    gchar *) 0x2000000000680900 "/home/buildbot/ethereal/random/editcap.out"
	rfilter = (gchar *) 0x0
	fcode = {bf_len = 4026531840, bf_insns = 0x10003}
	rfcode = (dfilter_t *) 0x0
	prefs = (e_prefs *) 0x200000004213cb60
	status = 100
	optstring = "a:b:c:d:Df:F:hi:lLnN:o:pqr:R:s:St:T:vVw:xX:y:z:"
	__PRETTY_FUNCTION__ = "main"


(no stderr output)


Bug 819 posted.