[Buildbot <buildbot-do-not-reply@xxxxxxxxxxxx>]

Problems have been found with the following capture file(s):

http://www.ethereal.com/distribution/buildbot-builds/randpkt/editcap.44538b12.pcap


Error information:
Core was generated by `lt-tethereal'.
Program terminated with signal 11, Segmentation fault.
#0  0x2000000042b4b481 in strcmp () from /lib/libc.so.5
#0  0x2000000042b4b481 in strcmp () from /lib/libc.so.5
No symbol table info available.
#1  0x2000000041338780 in decode_sdp_fmtp (tree=0x2000000000715020, 
    tvb=0x2000000000673348, offset=1160839960, tokenlen=14, mime_type=0x0)
    at packet-sdp.c:1096
	next_offset = 12
	end_offset = 14
	field_name = (guint8 *) 0x2000000045310318 "QCIF"
	item = (proto_item *) 0x2000000045310318
#2  0x20000000413390b0 in dissect_sdp_media_attribute (tvb=0x2000000000673348, 
    ti=0x8, transport_info=0x9fffffffffffcae0) at packet-sdp.c:1252
	sdp_media_attribute_tree = (proto_tree *) 0x2000000000715140
	offset = 8
	next_offset = 14
	tokenlen = 6
	n = 7426368
	field_name = (guint8 *) 0x6 <Address 0x6 out of bounds>
	payload_type = (guint8 *) 0xe <Address 0xe out of bounds>
	encoding_name = (guint8 *) 0x200000004215ef78 ""
	key = (gint *) 0x2000000000673348
#3  0x2000000041336ff0 in call_sdp_subdissector (tvb=0x2000000000673348, 
    hf=35093, ti=0x2000000000715140, transport_info=0x9fffffffffffcae0)
    at packet-sdp.c:507
No locals.
#4  0x2000000041336320 in dissect_sdp (tvb=0x20000000006731e8, 
    pinfo=0x20000000005fdc10, tree=0x8915) at packet-sdp.c:377
	sdp_tree = (proto_tree *) 0x20000000007084b0
	sub_ti = (proto_item *) 0x2000000000715140
	offset = 54
	next_offset = 70
	linelen = 16
	in_media_description = 1
	type = 14 '\016'
	datalen = 1160839960
	tokenoffset = 14
	hf = 35093
	string = 0x2000000000715140 "�Pq"
	src_addr = {type = AT_IPv4, len = 4, data = 0x9fffffffffffccc0 "X�kA"}
	transport_info = {
  connection_address = 0x2000000045310288 "130.100.171.108", 
  connection_type = 0x2000000045310278 "IP4", media_port = {
    0x20000000453102c0 "20002", 0x0, 0x0, 0x0}, media_proto = {
    0x20000000453102d0 "VTP/AVP", 0x0, 0x0, 0x0}, media = {{pt = {8, 
        538976288, 538976288, 1998594080, 1869116521, 1847620725, 1667855471, 
        538979941, 1953068369, 1718558821, 745432436, 1830838560, 1634296933, 
        1701868333, 1768319331, 1229791331, 175318850, 538976288, 538976288, 
        538976288}, pt_count = 0 '\0', rtp_dyn_payload = 0x20000000006a6b80}, {
      pt = {1734964083, 1852140910, 1769414772, 1852401780, 1112100128, 
        659114285, 1948721267, 1936613746, 1936943469, 661548905, 538976266, 
        538976288, 538976288, 538976288, 1952609651, 543516018, 1819044215, 
        543515168, 543516788, 1701667187}, pt_count = 0 '\0', 
      rtp_dyn_payload = 0x20000000006a6c00}, {pt = {1702194273, 538970670, 
        538976288, 538976288, 538976288, 2003781664, 1919252069, 1852383276, 
        1835991040, 1768104037, 1836409714, 1851880563, 544407552, 1936287860, 
        1818851104, 1869488236, -13248, -1610612737, 0, 0}, pt_count = 0 '\0', 
      rtp_dyn_payload = 0x20000000006a6c40}, {pt = {6642176, 536870912, 15, 0, 
        -13006, -1610612737, 2, 0, 1629513069, 537557358, 538976288, 
        538976288, 538968064, 1886593056, 1718182757, 1914725225, 1952541797, 
        1936617321, 544237928, 2004116834}, pt_count = 0 '\0', 
      rtp_dyn_payload = 0x20000000006a6c80}}, media_count = 1 '\001'}
	port = 0
	is_rtp = 0
	is_t38 = 0
	set_rtp = 1
	is_ipv4_addr = 0
	is_ipv6_addr = 0
	ipaddr = {1097575768, 536870912, 1, 0}
	n = 1099983696
	i = 14
	sdp_pi = (sdp_packet_info *) 0x2000000045310208
#5  0x2000000040ac46d0 in call_dissector_through_handle (
    handle=0x20000000004bc040, tvb=0x20000000006731e8, 
    pinfo=0x20000000005fdc10, tree=0x2000000000709020) at packet.c:386
	saved_proto = 0x2000000041905fc0 "SDP"
	ret = 1160839960
#6  0x2000000040ac54f0 in call_dissector_work (handle=0x20000000004bc040, 
    tvb=0x20000000006731e8, pinfo_arg=0x20000000005fdc10, 
    tree=0x2000000000709020) at packet.c:561
	pinfo = (packet_info * volatile) 0x20000000005fdc10
	saved_proto = 0x20000000451d0060 "MEGACO"
	saved_can_desegment = 0
	ret = 0
	save_writable = 70
	save_dl_src = {type = 1702125925, len = 1847615776, 
  data = 0x6174736e69207765 <Address 0x6174736e69207765 out of bounds>}
	save_dl_dst = {type = 543515502, len = 1629513327, 
  data = 0x202020202020200a <Address 0x202020202020200a out of bounds>}
	save_net_src = {type = 538976288, len = 538976288, 
  data = 0x7065636e6f632020 <Address 0x7065636e6f632020 out of bounds>}
	save_net_dst = {type = 1818326388, len = 2003792416, 
  data = 0x206f7420646e6120 <Address 0x206f7420646e6120 out of bounds>}
	save_src = {type = 926023784, len = 1937008928, 
  data = 0x2073757461747320 <Address 0x2073757461747320 out of bounds>}
	save_dst = {type = 1869873249, len = 1769234797, 
  data = 0x657320796c6c6163 <Address 0x657320796c6c6163 out of bounds>}
	saved_layer_names_len = 18
	__PRETTY_FUNCTION__ = "call_dissector_work"
#7  0x2000000040ac84f0 in call_dissector (handle=0x20000000004bc040, 
    tvb=0x20000000006731e8, pinfo=0x20000000005fdc10, tree=0x2000000000709020)
    at packet.c:1704
	ret = 1160839960
	__PRETTY_FUNCTION__ = "call_dissector"
#8  0x20000000451cec60 in dissect_megaco_Localdescriptor (
    tvb=0x2000000000673190, megaco_mediadescriptor_tree=0x2000000000709020, 
    pinfo=0x20000000005fdc10, tvb_next_offset=70, tvb_current_offset=120)
    at packet-megaco.c:2428
	tokenlen = 70
	megaco_localdescriptor_tree = (proto_tree *) 0x2000000000709020
#9  0x20000000451cc0c0 in dissect_megaco_mediadescriptor (
    tvb=0x2000000000673190, megaco_tree_command_line=0x78, 
    pinfo=0x20000000005fdc10, tvb_RBRKT=196, tvb_previous_offset=111)
    at packet-megaco.c:1410
	tokenlen = 119
	tvb_next_offset = 190
	tvb_current_offset = 120
	tvb_offset = 117
	tvb_help_offset = 111
	megaco_mediadescriptor_tree = (proto_tree *) 0x20000000007081b0
#10 0x20000000451cb5a0 in dissect_megaco_descriptors (tvb=0x2000000000673190, 
    megaco_tree_command_line=0x20000000007081e0, pinfo=0x20000000005fdc10, 
    tvb_descriptors_start_offset=196, tvb_descriptors_end_offset=198)
    at packet-megaco.c:1155
	tvb_len = 204
	tvb_current_offset = 198
	tvb_previous_offset = 93
	tvb_RBRKT = 196
	tvb_LBRKT = -1
	tempchar = 24 '\030'
#11 0x20000000451cb010 in dissect_megaco_text (tvb=0x2000000000673190, 
    pinfo=0x20000000005fdc10, tree=0x76) at packet-megaco.c:1033
	tvb_len = 204
	len = 198
	tvb_offset = 91
	tvb_current_offset = 91
	tvb_previous_offset = 50
	tvb_next_offset = 91
	tokenlen = 8
	tvb_command_start_offset = 73
	tvb_command_end_offset = 204
	tvb_descriptors_start_offset = 91
	tvb_descriptors_end_offset = 198
	megaco_tree = (proto_tree *) 0x2000000000708c30
	megaco_tree_command_line = (proto_tree *) 0x20000000007081e0
	my_proto_tree_add_string = (proto_item *(*)(proto_tree *, int, 
    tvbuff_t *, gint, gint, const char *)) 0x2000000044d6f2f0
	word = "MEGACO"
	transaction = "�������\237\006\000\000\000\000\000\000\00020 {\nC\000\000\000\000\000\000\000"
	TermID = '\0' <repeats 16 times>, "\"\001\000\000\000\000\000\000\200{q\000\000"
	tempchar = 198 '�'
	tvb_RBRKT = 91
	tvb_LBRKT = 118
	RBRKT_counter = 7373280
	LBRKT_counter = 0
#12 0x2000000040ac46d0 in call_dissector_through_handle (
    handle=0x20000000006615c0, tvb=0x2000000000673190, 
    pinfo=0x20000000005fdc10, tree=0x20000000007086f0) at packet.c:386
	saved_proto = 0x20000000451d0060 "MEGACO"
	ret = 1160839960
#13 0x2000000040ac54f0 in call_dissector_work (handle=0x20000000006615c0, 
    tvb=0x2000000000673190, pinfo_arg=0x20000000005fdc10, 
    tree=0x20000000007086f0) at packet.c:561
	pinfo = (packet_info * volatile) 0x20000000005fdc10
	saved_proto = 0x200000004151f850 "SCTP"
	saved_can_desegment = 0
	ret = 0
	save_writable = 0
	save_dl_src = {type = 1074660352, len = 536870912, 
  data = 0x2c27796461655274 <Address 0x2c27796461655274 out of bounds>}
	save_dl_dst = {type = 1869504544, len = 1399736692, 
  data = 0x2027656369767265 <Address 0x2027656369767265 out of bounds>}
	save_net_src = {type = 537555567, len = 538976288, 
  data = 0x3437333636202020 <Address 0x3437333636202020 out of bounds>}
	save_net_dst = {type = 875573809, len = 774333814, 
  data = 0x3120746168542020 <Address 0x3120746168542020 out of bounds>}
	save_src = {type = 875823154, len = 544105832, 
  data = 0x3164656972657571 <Address 0x3164656972657571 out of bounds>}
	save_dst = {type = 875823154, len = 1936291941, 
  data = 0x37353236676e6974 <Address 0x37353236676e6974 out of bounds>}
	saved_layer_names_len = 11
	__PRETTY_FUNCTION__ = "call_dissector_work"
#14 0x2000000040ac5e80 in dissector_try_port (
    sub_dissectors=0x200000000041dfc0, port=7, tvb=0x2000000000673190, 
    pinfo=0x20000000005fdc10, tree=0x20000000007086f0) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x2000000045310318
	handle = (struct dissector_handle *) 0x20000000006615c0
	saved_match_port = 132
#15 0x20000000413312b0 in dissect_payload (payload_tvb=0x2000000000673190, 
    pinfo=0x20000000005fdc10, tree=0x20000000007086f0, ppi=7)
    at packet-sctp.c:1520
	low_port = 7
	high_port = 7
#16 0x2000000041331a00 in dissect_data_chunk (chunk_tvb=0x2000000000673138, 
    chunk_length=220, pinfo=0x20000000005fdc10, tree=0x20000000007086f0, 
    chunk_tree=0x20000000007083f0, chunk_item=0x20000000007083f0, 
    flags_item=0x20000000007090b0) at packet-sctp.c:1648
	number_of_ppid = 1108524872
	payload_proto_id = 7
	flags_tree = (proto_tree *) 0x0
	e_bit = 150 '\226'
	b_bit = 0 '\0'
#17 0x2000000041333af0 in dissect_sctp_chunk (chunk_tvb=0x2000000000673138, 
    pinfo=0x20000000005fdc10, tree=0x20000000007086f0, 
    sctp_tree=0x20000000007083f0, useinfo=1) at packet-sctp.c:2210
	type = 0 '\0'
	length = 220
	padding_length = 0
	result = 0
	flags_item = (proto_item *) 0x20000000007090b0
	chunk_item = (proto_item *) 0x20000000007083f0
	chunk_tree = (proto_tree *) 0x20000000007083f0
	type_tree = (proto_tree *) 0x2000000000708ba0
#18 0x2000000041334160 in dissect_sctp_chunks (tvb=0x20000000006730e0, 
    pinfo=0x20000000005fdc10, tree=0x20000000007086f0, 
    sctp_item=0x2000000000708270, sctp_tree=0x2000000000708270, 
    encapsulated=220) at packet-sctp.c:2319
	chunk_tvb = (tvbuff_t *) 0x2000000045310318
	length = 792
	total_length = 220
	remaining_length = 220
	last_offset = 0
	offset = 12
	sctp_item_length_set = 0
#19 0x2000000041334e50 in dissect_sctp_packet (tvb=0x20000000006730e0, 
    pinfo=0x20000000005fdc10, tree=0x20000000007086f0, encapsulated=0)
    at packet-sctp.c:2449
	checksum = 16384
	calculated_crc32c = 1649913260
	calculated_adler32 = 0
	length = 7373424
	crc32c_correct = 0
	adler32_correct = 0
	sctp_item = (proto_item *) 0x2000000000708270
	sctp_tree = (proto_tree *) 0x2000000000708270
#20 0x2000000041335150 in dissect_sctp (tvb=0x20000000006730e0, 
    pinfo=0x20000000005fdc10, tree=0x20000000007086f0) at packet-sctp.c:2488
	number_of_ppid = 1108524872
#21 0x2000000040ac46d0 in call_dissector_through_handle (
    handle=0x200000000061adc0, tvb=0x20000000006730e0, 
    pinfo=0x20000000005fdc10, tree=0x20000000007086f0) at packet.c:386
	saved_proto = 0x200000004151f850 "SCTP"
	ret = 1160839960
#22 0x2000000040ac54f0 in call_dissector_work (handle=0x200000000061adc0, 
    tvb=0x20000000006730e0, pinfo_arg=0x20000000005fdc10, 
    tree=0x20000000007086f0) at packet.c:561
	pinfo = (packet_info * volatile) 0x20000000005fdc10
	saved_proto = 0x20000000417f30b0 "IP"
	saved_can_desegment = 0
	ret = 0
	save_writable = 536870912
	save_dl_src = {type = 1864368246, len = 1752637542, 
  data = 0x6874207265687465 <Address 0x6874207265687465 out of bounds>}
	save_dl_dst = {type = 1635131493, len = 1936029036, 
  data = 0x7461687420666f20 <Address 0x7461687420666f20 out of bounds>}
	save_net_src = {type = 1650553888, len = 1931961708, 
  data = 0x202020202020200a <Address 0x202020202020200a out of bounds>}
	save_net_dst = {type = 538976288, len = 538976288, 
  data = 0x7065636e6f632020 <Address 0x7065636e6f632020 out of bounds>}
	save_src = {type = 1818296436, len = 2003792416, 
  data = 0x6261206572612073 <Address 0x6261206572612073 out of bounds>}
	save_dst = {type = 960050737, len = 1700929647, 
  data = 0x65696669646f6d20 <Address 0x65696669646f6d20 out of bounds>}
	saved_layer_names_len = 6
	__PRETTY_FUNCTION__ = "call_dissector_work"
#23 0x2000000040ac5e80 in dissector_try_port (
    sub_dissectors=0x20000000001c0340, port=132, tvb=0x20000000006730e0, 
    pinfo=0x20000000005fdc10, tree=0x20000000007086f0) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x2000000045310318
	handle = (struct dissector_handle *) 0x200000000061adc0
	saved_match_port = 2048
#24 0x2000000040fe0820 in dissect_ip (tvb=0x2000000000673088, 
    pinfo=0x20000000005fdc10, parent_tree=0x20000000007086f0)
    at packet-ip.c:1186
	ip_tree = (proto_tree *) 0x2000000000708120
	field_tree = (proto_tree *) 0x20000000005fdcec
	ti = (proto_item *) 0x2000000000708120
	tf = (proto_item *) 0x2000000042172216
	addr = 1789617282
	offset = 20
	hlen = 20
	optlen = 1108812313
	flags = 132
	nxt = 132 '\204'
	ipsum = 0
	ipfd_head = (fragment_data *) 0x0
	next_tvb = (tvbuff_t *) 0x20000000006730e0
	update_col_info = 1
	save_fragmented = 0
	eip_arr = {{ip_v_hl = 5 '\005', ip_tos = 0 '\0', ip_len = 144, 
    ip_id = 3141, ip_off = 0, ip_ttl = 0 '\0', ip_p = 132 '\204', 
    ip_sum = 5894, ip_src = {type = AT_IPv4, len = 4, 
      data = 0x200000000067281a "\202d�l\202d�j@"}, ip_dst = {type = AT_IPv4, 
      len = 4, data = 0x200000000067281e "\202d�j@"}}, {ip_v_hl = 69 'E', 
    ip_tos = 0 '\0', ip_len = 324, ip_id = 7132, ip_off = 16384, 
    ip_ttl = 0 '\0', ip_p = 132 '\204', ip_sum = 698, ip_src = {
      type = AT_IPv4, len = 4, data = 0x200000000067281a "\202d�l\202d�j@"}, 
    ip_dst = {type = AT_IPv4, len = 4, data = 0x200000000067281e "\202d�j@"}}, 
  {ip_v_hl = 69 'E', ip_tos = 0 '\0', ip_len = 252, ip_id = 3142, ip_off = 0, 
    ip_ttl = 0 '\0', ip_p = 132 '\204', ip_sum = 5785, ip_src = {
      type = AT_IPv4, len = 4, data = 0x200000000067281a "\202d�l\202d�j@"}, 
    ip_dst = {type = AT_IPv4, len = 4, data = 0x200000000067281e "\202d�j@"}}, 
  {ip_v_hl = 69 'E', ip_tos = 0 '\0', ip_len = 340, ip_id = 7130, 
    ip_off = 16384, ip_ttl = 0 '\0', ip_p = 132 '\204', ip_sum = 684, 
    ip_src = {type = AT_IPv4, len = 4, 
      data = 0x200000000067281a "\202d�l\202d�j@"}, ip_dst = {type = AT_IPv4, 
      len = 4, data = 0x200000000067281e "\202d�j@"}}}
	eip_current = 2
	iph = (e_ip *) 0x2000000042172210
	src_addr = (const guchar *) 0x20000000006730e0 "\001"
	dst_addr = (const guchar *) 0x20000000006730e0 "\001"
	src32 = 2187635564
	dst32 = 2187635562
	tree = (proto_tree *) 0x0
	item = (proto_item *) 0x2000000045310318
	checksum_tree = (proto_tree *) 0x2000000042172219
#25 0x2000000040ac46d0 in call_dissector_through_handle (
    handle=0x20000000001c0360, tvb=0x2000000000673088, 
    pinfo=0x20000000005fdc10, tree=0x20000000007086f0) at packet.c:386
	saved_proto = 0x20000000417f30b0 "IP"
	ret = 1160839960
#26 0x2000000040ac54f0 in call_dissector_work (handle=0x20000000001c0360, 
    tvb=0x2000000000673088, pinfo_arg=0x20000000005fdc10, 
    tree=0x20000000007086f0) at packet.c:561
	pinfo = (packet_info * volatile) 0x20000000005fdc10
	saved_proto = 0x20000000417c0310 "Ethernet"
	saved_can_desegment = 0
	ret = 0
	save_writable = 0
	save_dl_src = {type = 7536755, len = 29555, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	save_dl_dst = {type = 1299185789, len = 1866678857, 
  data = 0x65636e61696c706d <Address 0x65636e61696c706d out of bounds>}
	save_net_src = {type = 3435921523, len = 214748364, 
  data = 0x616364610001003e <Address 0x616364610001003e out of bounds>}
	save_net_dst = {type = AT_NONE, len = 0, 
  data = 0x1003a <Address 0x1003a out of bounds>}
	save_src = {type = AT_NONE, len = -1577058288, 
  data = 0x10018 <Address 0x10018 out of bounds>}
	save_dst = {type = AT_NONE, len = -1879048192, 
  data = 0xffec <Address 0xffec out of bounds>}
	saved_layer_names_len = 3
	__PRETTY_FUNCTION__ = "call_dissector_work"
#27 0x2000000040ac5e80 in dissector_try_port (
    sub_dissectors=0x20000000000ab340, port=2048, tvb=0x2000000000673088, 
    pinfo=0x20000000005fdc10, tree=0x20000000007086f0) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x2000000045310318
	handle = (struct dissector_handle *) 0x20000000001c0360
	saved_match_port = 1
#28 0x2000000040e2a4a0 in ethertype (etype=2048, tvb=0x2000000000673030, 
    offset_after_etype=14, pinfo=0x20000000005fdc10, tree=0x20000000007086f0, 
    fh_tree=0x20000000007088d0, etype_id=8432, trailer_id=8434, fcs_len=-1)
    at packet-ethertype.c:192
	except_sn = {except_down = 0x9fffffffffffe2c0, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffda00, except_cleanup = 0x9fffffffffffda00}}
	except_ch = {except_id = 0x20000000416e4cc0, except_size = 1, 
  except_obj = {except_id = {except_group = 1, except_code = 2}, 
    except_message = 0x0, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 0, 
        <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 0, 0, 0}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	description = 0x2000000045310318 "QCIF"
	next_tvb = (tvbuff_t *) 0x2000000000673088
	length_before = 252
	dissector_found = 0
	saved_proto = 0x20000000417c0310 "Ethernet"
	__PRETTY_FUNCTION__ = "ethertype"
#29 0x2000000040e26070 in dissect_eth_common (tvb=0x2000000000673030, 
    pinfo=0x20000000005fdc10, parent_tree=0x20000000007086f0, fcs_len=-1)
    at packet-eth.c:344
	ehdr = (eth_hdr * volatile) 0x200000004216db88
	is_802_2 = 1634300517
	fh_tree = (proto_tree * volatile) 0x20000000007088d0
	src_addr = (const guint8 *) 0x2000000000672806 "\b"
	dst_addr = (const guint8 *) 0x2000000000672800 ""
	ehdrs = {{dst = {type = AT_ETHER, len = 6, 
      data = 0x2000000000672800 ""}, src = {type = AT_ETHER, len = 6, 
      data = 0x2000000000672806 "\b"}, type = 2048}, {dst = {type = AT_ETHER, 
      len = 6, data = 0x2000000000672800 ""}, src = {type = AT_ETHER, len = 6, 
      data = 0x2000000000672806 "\b"}, type = 2048}, {dst = {type = AT_ETHER, 
      len = 6, data = 0x2000000000672800 ""}, src = {type = AT_ETHER, len = 6, 
      data = 0x2000000000672806 "\b"}, type = 2048}, {dst = {type = AT_ETHER, 
      len = 6, data = 0x2000000000672800 ""}, src = {type = AT_ETHER, len = 6, 
      data = 0x2000000000672806 "\b"}, type = 2048}}
	ehdr_num = 0
	tree = (proto_tree * volatile) 0x20000000007086f0
	addr_item = (proto_item *) 0x2000000045310318
	addr_tree = (proto_tree *) 0x20000000007089c0
#30 0x2000000040e263c0 in dissect_eth_maybefcs (tvb=0x2000000000673030, 
    pinfo=0x20000000005fdc10, tree=0x20000000007086f0) at packet-eth.c:440
No locals.
#31 0x2000000040ac46d0 in call_dissector_through_handle (
    handle=0x20000000005f9680, tvb=0x2000000000673030, 
    pinfo=0x20000000005fdc10, tree=0x20000000007086f0) at packet.c:386
	saved_proto = 0x20000000417c0310 "Ethernet"
	ret = 1160839960
#32 0x2000000040ac54f0 in call_dissector_work (handle=0x20000000005f9680, 
    tvb=0x2000000000673030, pinfo_arg=0x20000000005fdc10, 
    tree=0x20000000007086f0) at packet.c:561
	pinfo = (packet_info * volatile) 0x20000000005fdc10
	saved_proto = 0x20000000416cf388 "Frame"
	saved_can_desegment = 0
	ret = 0
	save_writable = 0
	save_dl_src = {type = 538976288, len = 538976288, 
  data = 0x7473655466692020 <Address 0x7473655466692020 out of bounds>}
	save_dl_dst = {type = 1701707776, len = 540876914, 
  data = 0x612d50492d796d27 <Address 0x612d50492d796d27 out of bounds>}
	save_net_src = {type = 1701995620, len = 690451315, 
  data = 0x4c494146203d3d20 <Address 0x4c494146203d3d20 out of bounds>}
	save_net_dst = {type = 4294901760, len = -1610612737, data = 0x0}
	save_src = {type = 909521424, len = 536870912, 
  data = 0x1 <Address 0x1 out of bounds>}
	save_dst = {type = 909521632, len = -1610612737, data = 0x0}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#33 0x2000000040ac5e80 in dissector_try_port (
    sub_dissectors=0x20000000000ab660, port=1, tvb=0x2000000000673030, 
    pinfo=0x20000000005fdc10, tree=0x20000000007086f0) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x2000000045310318
	handle = (struct dissector_handle *) 0x20000000005f9680
	saved_match_port = 0
#34 0x2000000040e66e20 in dissect_frame (tvb=0x2000000000673030, 
    pinfo=0x20000000005fdc10, parent_tree=0x20000000007086f0)
    at packet-frame.c:284
	except_sn = {except_down = 0x9fffffffffffe860, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffe2e0, except_cleanup = 0x9fffffffffffe2e0}}
	except_ch = {except_id = 0x20000000416ff180, except_size = 1, 
  except_obj = {except_id = {except_group = 1, except_code = 1}, 
    except_message = 0x0, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 0, 
        <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 0, 0, 0}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	fh_tree = (proto_tree *) 0x20000000007086c0
	ti = (proto_item * volatile) 0x2000000000708870
	ts = {secs = 4, nsecs = 913059000}
	cap_len = 266
	pkt_len = 266
	tree = (proto_tree *) 0x20000000007086f0
	item = (proto_item *) 0x2000000045310318
#35 0x2000000040ac46d0 in call_dissector_through_handle (
    handle=0x20000000000ab680, tvb=0x2000000000673030, 
    pinfo=0x20000000005fdc10, tree=0x20000000007086f0) at packet.c:386
	saved_proto = 0x20000000416cf388 "Frame"
	ret = 1160839960
#36 0x2000000040ac54f0 in call_dissector_work (handle=0x20000000000ab680, 
    tvb=0x2000000000673030, pinfo_arg=0x20000000005fdc10, 
    tree=0x20000000007086f0) at packet.c:561
	pinfo = (packet_info * volatile) 0x20000000005fdc10
	saved_proto = 0x200000004151fa68 "<Missing Protocol Name>"
	saved_can_desegment = 0
	ret = 0
	save_writable = 0
	save_dl_src = {type = 6282752, len = 536870912, 
  data = 0xc00000000000040e <Address 0xc00000000000040e out of bounds>}
	save_dl_dst = {type = 909521472, len = 536870912, 
  data = 0x4200 <Address 0x4200 out of bounds>}
	save_net_src = {type = 909521536, len = -1610612737, data = 0x0}
	save_net_dst = {type = 1701052493, len = 1699946554, 
  data = 0x766965636552646e <Address 0x766965636552646e out of bounds>}
	save_src = {type = 101, len = 0, data = 0x0}
	save_dst = {type = AT_NONE, len = 0, 
  data = 0x1 <Address 0x1 out of bounds>}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#37 0x2000000040ac84f0 in call_dissector (handle=0x20000000000ab680, 
    tvb=0x2000000000673030, pinfo=0x20000000005fdc10, tree=0x20000000007086f0)
    at packet.c:1704
	ret = 1160839960
	__PRETTY_FUNCTION__ = "call_dissector"
#38 0x2000000040ac42a0 in dissect_packet (edt=0x20000000005fdc00, 
    pseudo_header=0x20000000005fdc10, pd=0x2000000000672800 "", 
    fd=0x9fffffffffffeae0, cinfo=0x0) at packet.c:325
	except_sn = {except_down = 0x0, except_type = XCEPT_CATCHER, 
  except_info = {except_catcher = 0x9fffffffffffe880, 
    except_cleanup = 0x9fffffffffffe880}}
	except_ch = {except_id = 0x200000004151fc58, except_size = 1, 
  except_obj = {except_id = {except_group = 0, except_code = 0}, 
    except_message = 0x0, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 0, 
        <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 
        <invalid float value>, 0, 0}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	__PRETTY_FUNCTION__ = "dissect_packet"
#39 0x2000000040abd120 in epan_dissect_run (edt=0x20000000005fdc00, 
    pseudo_header=0x20000000005fd648, data=0x2000000000672800 "", 
    fd=0x9fffffffffffeae0, cinfo=0x0) at epan.c:161
No locals.
#40 0x200000000003cb50 in process_packet (cf=0x2000000000097138, 
    offset=2305843009219976192, whdr=0x20000000005fd628, 
    pseudo_header=0x20000000005fd648, pd=0x2000000000672800 "")
    at tethereal.c:2293
	fdata = {next = 0x0, prev = 0x0, pfd = 0x0, num = 28, pkt_len = 266, 
  cap_len = 266, cum_bytes = 6404, abs_ts = {secs = 1040375112, 
    nsecs = 970377000}, rel_ts = {secs = 4, nsecs = 913059000}, del_ts = {
    secs = 0, nsecs = 3880000}, file_off = 6610, lnk_t = 1, flags = {
    passed_dfilter = 0, encoding = 0, visited = 0, marked = 0, ref_time = 0}, 
  color_filter = 0x0}
	create_proto_tree = 6282240
	edt = (epan_dissect_t *) 0x20000000005fdc00
	passed = 618808
#41 0x200000000003c010 in load_cap_file (cf=0x2000000000097138, save_file=0x0, 
    out_file_type=2) at tethereal.c:2108
	linktype = 6280744
	snapshot_length = 6280776
	pdh = (wtap_dumper *) 0x0
	err = 1462964150
	err_info = (gchar *) 0x1003e <Address 0x1003e out of bounds>
	data_offset = 6610
	save_file_string = 0x0
#42 0x2000000000039bc0 in main (argc=6, argv=0x28) at tethereal.c:1424
	opt = 1160839960
	i = 6
	gpf_path = 0x0
	pf_path = 0x0
	gdp_path = 0x0
	dp_path = 0x0
	gpf_open_errno = 0
	gpf_read_errno = -2147483648
	pf_open_errno = 0
	pf_read_errno = -2147483648
	gdp_open_errno = 65598
	gdp_read_errno = 0
	dp_open_errno = 65516
	dp_read_errno = 0
	err = 0
	capture_filter_specified = 6900968
	list_link_layer_types = 0
	start_capture = 0
	quiet = 0
	out_file_type = 2
	cf_name = (
    gchar *) 0x2000000000694b80 "/home/buildbot/ethereal/random/editcap.out"
	rfilter = (gchar *) 0x0
	fcode = {bf_len = 4026531840, bf_insns = 0x10003}
	rfcode = (dfilter_t *) 0x0
	prefs = (e_prefs *) 0x200000004217bd48
	status = 1160839960
	optstring = "a:b:c:d:Df:F:hi:lLnN:o:pqr:R:s:St:T:vVw:xX:y:z:"
	__PRETTY_FUNCTION__ = "main"


(no stderr output)


Bug 905 posted.