[Buildbot <buildbot-do-not-reply@xxxxxxxxxxxx>]

Problems have been found with the following capture file(s):

http://www.ethereal.com/distribution/buildbot-builds/randpkt/editcap.44539877.pcap


Error information:
Core was generated by `lt-tethereal'.
Program terminated with signal 11, Segmentation fault.
#0  0x2000000042b4d481 in strcmp () from /lib/libc.so.5
#0  0x2000000042b4d481 in strcmp () from /lib/libc.so.5
No symbol table info available.
#1  0x2000000041339c70 in decode_sdp_fmtp (tree=0x20000000007131d0, 
    tvb=0x2000000000675500, offset=1160856288, tokenlen=14, mime_type=0x0)
    at packet-sdp.c:1096
	next_offset = 12
	end_offset = 14
	field_name = (guint8 *) 0x20000000453142e0 "QCIF"
	item = (proto_item *) 0x20000000453142e0
#2  0x200000004133a5a0 in dissect_sdp_media_attribute (tvb=0x2000000000675500, 
    ti=0x8, transport_info=0x9fffffffffffcae0) at packet-sdp.c:1252
	sdp_media_attribute_tree = (proto_tree *) 0x20000000007083c0
	offset = 8
	next_offset = 14
	tokenlen = 6
	n = 7373760
	field_name = (guint8 *) 0x6 <Address 0x6 out of bounds>
	payload_type = (guint8 *) 0xe <Address 0xe out of bounds>
	encoding_name = (guint8 *) 0x20000000421618c8 ""
	key = (gint *) 0x2000000000675500
#3  0x20000000413384e0 in call_sdp_subdissector (tvb=0x2000000000675500, 
    hf=35108, ti=0x20000000007083c0, transport_info=0x9fffffffffffcae0)
    at packet-sdp.c:507
No locals.
#4  0x2000000041337810 in dissect_sdp (tvb=0x20000000006753a0, 
    pinfo=0x20000000005fdc10, tree=0x8924) at packet-sdp.c:377
	sdp_tree = (proto_tree *) 0x2000000000712f00
	sub_ti = (proto_item *) 0x20000000007083c0
	offset = 40
	next_offset = 57
	linelen = 16
	in_media_description = 1
	type = 14 '\016'
	datalen = 1160856288
	tokenoffset = 14
	hf = 35108
	string = 0x20000000007083c0 "�*q"
	src_addr = {type = 1634497891, len = 1701650546, 
  data = 0x636570732d616964 <Address 0x636570732d616964 out of bounds>}
	transport_info = {connection_address = 0x0, connection_type = 0x0, 
  media_port = {0x2000000045314288 "2", 0x0, 0x0, 0x0}, media_proto = {
    0x2000000045314298 "H223", 0x0, 0x0, 0x0}, media = {{pt = {538976288, 
        538976288, 538976288, 1998594080, 1869116521, 1847620725, 1667855471, 
        538979941, 1953068369, 1718558821, 745432436, 1830838560, 1634296933, 
        1701868333, 1768319331, 1229791331, 175318850, 538976288, 538976288, 
        538976288}, pt_count = 0 '\0', rtp_dyn_payload = 0x20000000006a6b80}, {
      pt = {1734964083, 1852140910, 1769414772, 1852401780, 1112100128, 
        659114285, 1948721267, 1936613746, 1936943469, 661548905, 538976266, 
        538976288, 538976288, 538976288, 1952609651, 543516018, 1819044215, 
        543515168, 543516788, 1701667187}, pt_count = 0 '\0', 
      rtp_dyn_payload = 0x20000000006a6bc0}, {pt = {1702194273, 538970670, 
        538976288, 538976288, 538976288, 2003781664, 1919252069, 1852383276, 
        1835991040, 1768104037, 1836409714, 1851880563, 544407552, 1936287860, 
        1818851104, 1869488236, -13248, -1610612737, 0, 0}, pt_count = 0 '\0', 
      rtp_dyn_payload = 0x20000000006a6c00}, {pt = {7180160, 536870912, 15, 0, 
        -13006, -1610612737, 2, 0, 1629513069, 537557358, 538976288, 
        538976288, 538968064, 1886593056, 1718182757, 1914725225, 1952541797, 
        1936617321, 544237928, 2004116834}, pt_count = 0 '\0', 
      rtp_dyn_payload = 0x20000000006a6c40}}, media_count = 1 '\001'}
	port = 0
	is_rtp = 0
	is_t38 = 0
	set_rtp = 1
	is_ipv4_addr = 0
	is_ipv6_addr = 0
	ipaddr = {1097581112, 536870912, 1, 0}
	n = 1099992520
	i = 14
	sdp_pi = (sdp_packet_info *) 0x2000000045314208
#5  0x2000000040ac50d0 in call_dissector_through_handle (
    handle=0x20000000004bc040, tvb=0x20000000006753a0, 
    pinfo=0x20000000005fdc10, tree=0x2000000000712ed0) at packet.c:386
	saved_proto = 0x2000000041908238 "SDP"
	ret = 1160856288
#6  0x2000000040ac5ef0 in call_dissector_work (handle=0x20000000004bc040, 
    tvb=0x20000000006753a0, pinfo_arg=0x20000000005fdc10, 
    tree=0x2000000000712ed0) at packet.c:561
	pinfo = (packet_info * volatile) 0x20000000005fdc10
	saved_proto = 0x20000000451d4060 "MEGACO"
	saved_can_desegment = 0
	ret = 0
	save_writable = 91
	save_dl_src = {type = 1702125925, len = 1847615776, 
  data = 0x6174736e69207765 <Address 0x6174736e69207765 out of bounds>}
	save_dl_dst = {type = 543515502, len = 1629513327, 
  data = 0x202020202020200a <Address 0x202020202020200a out of bounds>}
	save_net_src = {type = 538976288, len = 538976288, 
  data = 0x7065636e6f632020 <Address 0x7065636e6f632020 out of bounds>}
	save_net_dst = {type = 1818326388, len = 2003792416, 
  data = 0x206f7420646e6120 <Address 0x206f7420646e6120 out of bounds>}
	save_src = {type = 842203240, len = 1937008928, 
  data = 0x2073757461747320 <Address 0x2073757461747320 out of bounds>}
	save_dst = {type = 1869873249, len = 1769234797, 
  data = 0x657320796c6c6163 <Address 0x657320796c6c6163 out of bounds>}
	saved_layer_names_len = 18
	__PRETTY_FUNCTION__ = "call_dissector_work"
#7  0x2000000040ac8ef0 in call_dissector (handle=0x20000000004bc040, 
    tvb=0x20000000006753a0, pinfo=0x20000000005fdc10, tree=0x2000000000712ed0)
    at packet.c:1704
	ret = 1160856288
	__PRETTY_FUNCTION__ = "call_dissector"
#8  0x20000000451d2c60 in dissect_megaco_Localdescriptor (
    tvb=0x20000000006752f0, megaco_mediadescriptor_tree=0x2000000000712ed0, 
    pinfo=0x20000000005fdc10, tvb_next_offset=91, tvb_current_offset=200)
    at packet-megaco.c:2428
	tokenlen = 91
	megaco_localdescriptor_tree = (proto_tree *) 0x2000000000712ed0
#9  0x20000000451d00c0 in dissect_megaco_mediadescriptor (
    tvb=0x20000000006752f0, megaco_tree_command_line=0xc8, 
    pinfo=0x20000000005fdc10, tvb_RBRKT=298, tvb_previous_offset=190)
    at packet-megaco.c:1410
	tokenlen = 199
	tvb_next_offset = 291
	tvb_current_offset = 200
	tvb_offset = 196
	tvb_help_offset = 190
	megaco_mediadescriptor_tree = (proto_tree *) 0x2000000000713140
#10 0x20000000451cf5a0 in dissect_megaco_descriptors (tvb=0x20000000006752f0, 
    megaco_tree_command_line=0x2000000000708750, pinfo=0x20000000005fdc10, 
    tvb_descriptors_start_offset=298, tvb_descriptors_end_offset=301)
    at packet-megaco.c:1155
	tvb_len = 350
	tvb_current_offset = 304
	tvb_previous_offset = 171
	tvb_RBRKT = 298
	tvb_LBRKT = -1
	tempchar = 224 '�'
#11 0x20000000451cf010 in dissect_megaco_text (tvb=0x20000000006752f0, 
    pinfo=0x20000000005fdc10, tree=0xc6) at packet-megaco.c:1033
	tvb_len = 350
	len = 301
	tvb_offset = 169
	tvb_current_offset = 168
	tvb_previous_offset = 58
	tvb_next_offset = 168
	tokenlen = 6
	tvb_command_start_offset = 153
	tvb_command_end_offset = 304
	tvb_descriptors_start_offset = 169
	tvb_descriptors_end_offset = 301
	megaco_tree = (proto_tree *) 0x2000000000712b10
	megaco_tree_command_line = (proto_tree *) 0x2000000000708750
	my_proto_tree_add_string = (proto_item *(*)(proto_tree *, int, 
    tvbuff_t *, gint, gint, const char *)) 0x2000000044d732f0
	word = "MEGACO"
	transaction = "Transaction = 1724 {\nC\000\000\000\000\000\000\000"
	TermID = '\0' <repeats 16 times>, "M\000\000\000\000\000\000\000\020]q\000\000"
	tempchar = 45 '-'
	tvb_RBRKT = 169
	tvb_LBRKT = 198
	RBRKT_counter = 7374672
	LBRKT_counter = 0
#12 0x2000000040ac50d0 in call_dissector_through_handle (
    handle=0x20000000006615e0, tvb=0x20000000006752f0, 
    pinfo=0x20000000005fdc10, tree=0x2000000000708810) at packet.c:386
	saved_proto = 0x20000000451d4060 "MEGACO"
	ret = 1160856288
#13 0x2000000040ac5ef0 in call_dissector_work (handle=0x20000000006615e0, 
    tvb=0x20000000006752f0, pinfo_arg=0x20000000005fdc10, 
    tree=0x2000000000708810) at packet.c:561
	pinfo = (packet_info * volatile) 0x20000000005fdc10
	saved_proto = 0x2000000041520d30 "SCTP"
	saved_can_desegment = 0
	ret = 0
	save_writable = 0
	save_dl_src = {type = 1074660352, len = 536870912, 
  data = 0x20000000416bc238 "s"}
	save_dl_dst = {type = 6282256, len = 536870912, 
  data = 0x20276563000000b4 <Address 0x20276563000000b4 out of bounds>}
	save_net_src = {type = 1633747055, len = 538976288, 
  data = 0x3031333636202020 <Address 0x3031333636202020 out of bounds>}
	save_net_dst = {type = 808792881, len = 774333814, 
  data = 0x3120746168542020 <Address 0x3120746168542020 out of bounds>}
	save_src = {type = 876085302, len = 544105832, 
  data = 0x3164656972657571 <Address 0x3164656972657571 out of bounds>}
	save_dst = {type = 876085302, len = 1936291941, 
  data = 0x37366635676e6974 <Address 0x37366635676e6974 out of bounds>}
	saved_layer_names_len = 11
	__PRETTY_FUNCTION__ = "call_dissector_work"
#14 0x2000000040ac6880 in dissector_try_port (
    sub_dissectors=0x200000000041dfc0, port=7, tvb=0x20000000006752f0, 
    pinfo=0x20000000005fdc10, tree=0x2000000000708810) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x20000000453142e0
	handle = (struct dissector_handle *) 0x20000000006615e0
	saved_match_port = 132
#15 0x20000000413327a0 in dissect_payload (payload_tvb=0x20000000006752f0, 
    pinfo=0x20000000005fdc10, tree=0x2000000000708810, ppi=7)
    at packet-sctp.c:1520
	low_port = 7
	high_port = 7
#16 0x2000000041332ef0 in dissect_data_chunk (chunk_tvb=0x2000000000675348, 
    chunk_length=366, pinfo=0x20000000005fdc10, tree=0x2000000000708810, 
    chunk_tree=0x20000000007081b0, chunk_item=0x20000000007081b0, 
    flags_item=0x2000000000712c00) at packet-sctp.c:1648
	number_of_ppid = 1108535384
	payload_proto_id = 7
	flags_tree = (proto_tree *) 0x0
	e_bit = 40 '('
	b_bit = 0 '\0'
#17 0x2000000041334fe0 in dissect_sctp_chunk (chunk_tvb=0x2000000000675348, 
    pinfo=0x20000000005fdc10, tree=0x2000000000708810, 
    sctp_tree=0x20000000007081b0, useinfo=1) at packet-sctp.c:2210
	type = 0 '\0'
	length = 366
	padding_length = 2
	result = 0
	flags_item = (proto_item *) 0x2000000000712c00
	chunk_item = (proto_item *) 0x20000000007081b0
	chunk_tree = (proto_tree *) 0x20000000007081b0
	type_tree = (proto_tree *) 0x20000000007080f0
#18 0x2000000041335650 in dissect_sctp_chunks (tvb=0x2000000000675298, 
    pinfo=0x20000000005fdc10, tree=0x2000000000708810, 
    sctp_item=0x2000000000713020, sctp_tree=0x2000000000713020, 
    encapsulated=368) at packet-sctp.c:2319
	chunk_tvb = (tvbuff_t *) 0x20000000453142e0
	length = 17120
	total_length = 368
	remaining_length = 500
	last_offset = 0
	offset = 12
	sctp_item_length_set = 0
#19 0x2000000041336340 in dissect_sctp_packet (tvb=0x2000000000675298, 
    pinfo=0x20000000005fdc10, tree=0x2000000000708810, encapsulated=0)
    at packet-sctp.c:2449
	checksum = 2944
	calculated_crc32c = 1600625789
	calculated_adler32 = 0
	length = 7417888
	crc32c_correct = 0
	adler32_correct = 0
	sctp_item = (proto_item *) 0x2000000000713020
	sctp_tree = (proto_tree *) 0x2000000000713020
#20 0x2000000041336640 in dissect_sctp (tvb=0x2000000000675298, 
    pinfo=0x20000000005fdc10, tree=0x2000000000708810) at packet-sctp.c:2488
	number_of_ppid = 1108535384
#21 0x2000000040ac50d0 in call_dissector_through_handle (
    handle=0x200000000061adc0, tvb=0x2000000000675298, 
    pinfo=0x20000000005fdc10, tree=0x2000000000708810) at packet.c:386
	saved_proto = 0x2000000041520d30 "SCTP"
	ret = 1160856288
#22 0x2000000040ac5ef0 in call_dissector_work (handle=0x200000000061adc0, 
    tvb=0x2000000000675298, pinfo_arg=0x20000000005fdc10, 
    tree=0x2000000000708810) at packet.c:561
	pinfo = (packet_info * volatile) 0x20000000005fdc10
	saved_proto = 0x20000000417f5328 "IP"
	saved_can_desegment = 0
	ret = 0
	save_writable = 536870912
	save_dl_src = {type = 1864368246, len = 1752637542, 
  data = 0x6874207265687465 <Address 0x6874207265687465 out of bounds>}
	save_dl_dst = {type = AT_NONE, len = 1936029036, 
  data = 0x7461687420666f20 <Address 0x7461687420666f20 out of bounds>}
	save_net_src = {type = 6282256, len = 536870912, 
  data = 0x20202020000000dc <Address 0x20202020000000dc out of bounds>}
	save_net_dst = {type = 538976288, len = 538976288, 
  data = 0x7065636e6f632020 <Address 0x7065636e6f632020 out of bounds>}
	save_src = {type = 811663476, len = 2003792416, 
  data = 0x6261206572612073 <Address 0x6261206572612073 out of bounds>}
	save_dst = {type = 845492577, len = 1700929647, 
  data = 0x65696669646f6d20 <Address 0x65696669646f6d20 out of bounds>}
	saved_layer_names_len = 6
	__PRETTY_FUNCTION__ = "call_dissector_work"
#23 0x2000000040ac6880 in dissector_try_port (
    sub_dissectors=0x20000000001c0360, port=132, tvb=0x2000000000675298, 
    pinfo=0x20000000005fdc10, tree=0x2000000000708810) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x20000000453142e0
	handle = (struct dissector_handle *) 0x200000000061adc0
	saved_match_port = 2048
#24 0x2000000040fe1d10 in dissect_ip (tvb=0x2000000000675240, 
    pinfo=0x20000000005fdc10, parent_tree=0x2000000000708810)
    at packet-ip.c:1186
	ip_tree = (proto_tree *) 0x2000000000708360
	field_tree = (proto_tree *) 0x20000000005fdcec
	ti = (proto_item *) 0x2000000000708360
	tf = (proto_item *) 0x2000000042174b36
	addr = 1823171714
	offset = 20
	hlen = 20
	optlen = 1108822841
	flags = 132
	nxt = 132 '\204'
	ipsum = 65363
	ipfd_head = (fragment_data *) 0x0
	next_tvb = (tvbuff_t *) 0x2000000000675298
	update_col_info = 1
	save_fragmented = 0
	eip_arr = {{ip_v_hl = 69 'E', ip_tos = 0 '\0', ip_len = 124, 
    ip_id = 3149, ip_off = 0, ip_ttl = 0 '\0', ip_p = 132 '\204', 
    ip_sum = 5906, ip_src = {type = AT_IPv4, len = 4, 
      data = 0x200000000067481a "\202d�j\202d�l\v\200@"}, ip_dst = {
      type = AT_IPv4, len = 4, data = 0x200000000067481e "\202d�l\v\200@"}}, {
    ip_v_hl = 69 'E', ip_tos = 0 '\0', ip_len = 532, ip_id = 7140, 
    ip_off = 16384, ip_ttl = 0 '\0', ip_p = 132 '\204', ip_sum = 44514, 
    ip_src = {type = AT_IPv4, len = 4, 
      data = 0x200000000067481a "\202d�j\202d�l\v\200@"}, ip_dst = {
      type = AT_IPv4, len = 4, data = 0x200000000067481e "\202d�l\v\200@"}}, {
    ip_v_hl = 69 'E', ip_tos = 0 '\0', ip_len = 164, ip_id = 3147, ip_off = 0, 
    ip_ttl = 0 '\0', ip_p = 132 '\204', ip_sum = 5868, ip_src = {
      type = AT_IPv4, len = 4, 
      data = 0x200000000067481a "\202d�j\202d�l\v\200@"}, ip_dst = {
      type = AT_IPv4, len = 4, data = 0x200000000067481e "\202d�l\v\200@"}}, {
    ip_v_hl = 69 'E', ip_tos = 0 '\0', ip_len = 37, ip_id = 29440, 
    ip_off = 16384, ip_ttl = 0 '\0', ip_p = 132 '\204', ip_sum = 9587, 
    ip_src = {type = AT_IPv4, len = 4, 
      data = 0x200000000067481a "\202d�j\202d�l\v\200@"}, ip_dst = {
      type = AT_IPv4, len = 4, data = 0x200000000067481e "\202d�l\v\200@"}}}
	eip_current = 1
	iph = (e_ip *) 0x2000000042174b30
	src_addr = (const guchar *) 0x2000000000675298 "\001"
	dst_addr = (const guchar *) 0x2000000000675298 "\001"
	src32 = 2187635562
	dst32 = 2187635564
	tree = (proto_tree *) 0x0
	item = (proto_item *) 0x20000000453142e0
	checksum_tree = (proto_tree *) 0x2000000042174b39
#25 0x2000000040ac50d0 in call_dissector_through_handle (
    handle=0x20000000001c0380, tvb=0x2000000000675240, 
    pinfo=0x20000000005fdc10, tree=0x2000000000708810) at packet.c:386
	saved_proto = 0x20000000417f5328 "IP"
	ret = 1160856288
#26 0x2000000040ac5ef0 in call_dissector_work (handle=0x20000000001c0380, 
    tvb=0x2000000000675240, pinfo_arg=0x20000000005fdc10, 
    tree=0x2000000000708810) at packet.c:561
	pinfo = (packet_info * volatile) 0x20000000005fdc10
	saved_proto = 0x20000000417c2588 "Ethernet"
	saved_can_desegment = 0
	ret = 0
	save_writable = 0
	save_dl_src = {type = 7536755, len = 29555, 
  data = 0x1003e <Address 0x1003e out of bounds>}
	save_dl_dst = {type = 1299185789, len = 1866678857, 
  data = 0x65636e61696c706d <Address 0x65636e61696c706d out of bounds>}
	save_net_src = {type = 3435921523, len = 214748364, 
  data = 0x313238390001003e <Address 0x313238390001003e out of bounds>}
	save_net_dst = {type = 1715024185, len = 0, 
  data = 0x1003a <Address 0x1003a out of bounds>}
	save_src = {type = AT_NONE, len = -1577058288, 
  data = 0x10018 <Address 0x10018 out of bounds>}
	save_dst = {type = AT_NONE, len = -1879048192, 
  data = 0xffec <Address 0xffec out of bounds>}
	saved_layer_names_len = 3
	__PRETTY_FUNCTION__ = "call_dissector_work"
#27 0x2000000040ac6880 in dissector_try_port (
    sub_dissectors=0x20000000000ab340, port=2048, tvb=0x2000000000675240, 
    pinfo=0x20000000005fdc10, tree=0x2000000000708810) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x20000000453142e0
	handle = (struct dissector_handle *) 0x20000000001c0380
	saved_match_port = 1
#28 0x2000000040e2aea0 in ethertype (etype=2048, tvb=0x20000000006751e8, 
    offset_after_etype=14, pinfo=0x20000000005fdc10, tree=0x2000000000708810, 
    fh_tree=0x20000000007089c0, etype_id=8432, trailer_id=8434, fcs_len=-1)
    at packet-ethertype.c:192
	except_sn = {except_down = 0x9fffffffffffe2c0, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffda00, except_cleanup = 0x9fffffffffffda00}}
	except_ch = {except_id = 0x20000000416e61a0, except_size = 1, 
  except_obj = {except_id = {except_group = 1, except_code = 2}, 
    except_message = 0x0, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 0, 
        <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 0, 0, 0}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	description = 0x20000000453142e0 "QCIF"
	next_tvb = (tvbuff_t *) 0x2000000000675240
	length_before = 532
	dissector_found = 0
	saved_proto = 0x20000000417c2588 "Ethernet"
	__PRETTY_FUNCTION__ = "ethertype"
#29 0x2000000040e26a70 in dissect_eth_common (tvb=0x20000000006751e8, 
    pinfo=0x20000000005fdc10, parent_tree=0x2000000000708810, fcs_len=-1)
    at packet-eth.c:344
	ehdr = (eth_hdr * volatile) 0x2000000042170500
	is_802_2 = 1634300517
	fh_tree = (proto_tree * volatile) 0x20000000007089c0
	src_addr = (const guint8 *) 0x2000000000674806 ""
	dst_addr = (const guint8 *) 0x2000000000674800 "\b"
	ehdrs = {{dst = {type = AT_ETHER, len = 6, 
      data = 0x2000000000674800 "\b"}, src = {type = AT_ETHER, len = 6, 
      data = 0x2000000000674806 ""}, type = 2048}, {dst = {type = AT_ETHER, 
      len = 6, data = 0x2000000000674800 "\b"}, src = {type = AT_ETHER, 
      len = 6, data = 0x2000000000674806 ""}, type = 2048}, {dst = {
      type = AT_ETHER, len = 6, data = 0x2000000000674800 "\b"}, src = {
      type = AT_ETHER, len = 6, data = 0x2000000000674806 ""}, type = 2048}, {
    dst = {type = AT_ETHER, len = 6, data = 0x2000000000674800 "\b"}, src = {
      type = AT_ETHER, len = 6, data = 0x2000000000674806 ""}, type = 2048}}
	ehdr_num = 1
	tree = (proto_tree * volatile) 0x2000000000708810
	addr_item = (proto_item *) 0x20000000453142e0
	addr_tree = (proto_tree *) 0x2000000000708a20
#30 0x2000000040e26dc0 in dissect_eth_maybefcs (tvb=0x20000000006751e8, 
    pinfo=0x20000000005fdc10, tree=0x2000000000708810) at packet-eth.c:440
No locals.
#31 0x2000000040ac50d0 in call_dissector_through_handle (
    handle=0x20000000005f9680, tvb=0x20000000006751e8, 
    pinfo=0x20000000005fdc10, tree=0x2000000000708810) at packet.c:386
	saved_proto = 0x20000000417c2588 "Ethernet"
	ret = 1160856288
#32 0x2000000040ac5ef0 in call_dissector_work (handle=0x20000000005f9680, 
    tvb=0x20000000006751e8, pinfo_arg=0x20000000005fdc10, 
    tree=0x2000000000708810) at packet.c:561
	pinfo = (packet_info * volatile) 0x20000000005fdc10
	saved_proto = 0x20000000416d0868 "Frame"
	saved_can_desegment = 0
	ret = 0
	save_writable = 0
	save_dl_src = {type = 538976288, len = 538976288, 
  data = 0x7473655466692020 <Address 0x7473655466692020 out of bounds>}
	save_dl_dst = {type = 1701707776, len = 540876914, 
  data = 0x612d50492d796d27 <Address 0x612d50492d796d27 out of bounds>}
	save_net_src = {type = 1701995620, len = 690451315, 
  data = 0x4c494146203d3d20 <Address 0x4c494146203d3d20 out of bounds>}
	save_net_dst = {type = 4294901760, len = -1610612737, data = 0x0}
	save_src = {type = 909391120, len = 536870912, 
  data = 0x1 <Address 0x1 out of bounds>}
	save_dst = {type = 909391328, len = -1610612737, data = 0x0}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#33 0x2000000040ac6880 in dissector_try_port (
    sub_dissectors=0x20000000000ab660, port=1, tvb=0x20000000006751e8, 
    pinfo=0x20000000005fdc10, tree=0x2000000000708810) at packet.c:836
	dtbl_entry = (dtbl_entry_t *) 0x20000000453142e0
	handle = (struct dissector_handle *) 0x20000000005f9680
	saved_match_port = 0
#34 0x2000000040e68310 in dissect_frame (tvb=0x20000000006751e8, 
    pinfo=0x20000000005fdc10, parent_tree=0x2000000000708810)
    at packet-frame.c:284
	except_sn = {except_down = 0x9fffffffffffe860, 
  except_type = XCEPT_CATCHER, except_info = {
    except_catcher = 0x9fffffffffffe2e0, except_cleanup = 0x9fffffffffffe2e0}}
	except_ch = {except_id = 0x20000000417013f8, except_size = 1, 
  except_obj = {except_id = {except_group = 1, except_code = 1}, 
    except_message = 0x0, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 0, 
        <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 0, 0, 
        <invalid float value>}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	fh_tree = (proto_tree *) 0x2000000000708720
	ti = (proto_item * volatile) 0x2000000000708930
	ts = {secs = 5, nsecs = 317378000}
	cap_len = 546
	pkt_len = 546
	tree = (proto_tree *) 0x2000000000708810
	item = (proto_item *) 0x20000000453142e0
#35 0x2000000040ac50d0 in call_dissector_through_handle (
    handle=0x20000000000ab680, tvb=0x20000000006751e8, 
    pinfo=0x20000000005fdc10, tree=0x2000000000708810) at packet.c:386
	saved_proto = 0x20000000416d0868 "Frame"
	ret = 1160856288
#36 0x2000000040ac5ef0 in call_dissector_work (handle=0x20000000000ab680, 
    tvb=0x20000000006751e8, pinfo_arg=0x20000000005fdc10, 
    tree=0x2000000000708810) at packet.c:561
	pinfo = (packet_info * volatile) 0x20000000005fdc10
	saved_proto = 0x2000000041520f48 "<Missing Protocol Name>"
	saved_can_desegment = 0
	ret = 0
	save_writable = 0
	save_dl_src = {type = AT_NONE, len = 0, data = 0x9fffffffffffe590 ""}
	save_dl_dst = {type = 909391152, len = -1610612737, 
  data = 0x313930363271957e <Address 0x313930363271957e out of bounds>}
	save_net_src = {type = 909391157, len = -1610612737, data = 0x0}
	save_net_dst = {type = 1159528544, len = 536870912, 
  data = 0x6 <Address 0x6 out of bounds>}
	save_src = {type = AT_NONE, len = 0, data = 0x0}
	save_dst = {type = AT_NONE, len = 0, 
  data = 0x1 <Address 0x1 out of bounds>}
	saved_layer_names_len = 0
	__PRETTY_FUNCTION__ = "call_dissector_work"
#37 0x2000000040ac8ef0 in call_dissector (handle=0x20000000000ab680, 
    tvb=0x20000000006751e8, pinfo=0x20000000005fdc10, tree=0x2000000000708810)
    at packet.c:1704
	ret = 1160856288
	__PRETTY_FUNCTION__ = "call_dissector"
#38 0x2000000040ac4ca0 in dissect_packet (edt=0x20000000005fdc00, 
    pseudo_header=0x20000000005fdc10, pd=0x2000000000674800 "\b", 
    fd=0x9fffffffffffeae0, cinfo=0x0) at packet.c:325
	except_sn = {except_down = 0x0, except_type = XCEPT_CATCHER, 
  except_info = {except_catcher = 0x9fffffffffffe880, 
    except_cleanup = 0x9fffffffffffe880}}
	except_ch = {except_id = 0x2000000041521138, except_size = 1, 
  except_obj = {except_id = {except_group = 0, except_code = 0}, 
    except_message = 0x0, except_dyndata = 0x0}, except_jmp = {{buf = {0, 0, 
        <invalid float value>, <invalid float value>, 0, -inf, 
        <invalid float value>, 0, 0, <invalid float value>, 0, 0, 0, 0, -0, 0, 
        <invalid float value>, -nan(0x4928824398483892), -inf, 
        <invalid float value>, 0, <invalid float value>, inf, inf, -0, -0, 
        <invalid float value>, <invalid float value>, 0, 
        <invalid float value>, 0, 0}}}}
	exc = (except_t *) 0x0
	except_state = 0
	catch_spec = {{except_group = 1, except_code = 0}}
	__PRETTY_FUNCTION__ = "dissect_packet"
#39 0x2000000040abdb20 in epan_dissect_run (edt=0x20000000005fdc00, 
    pseudo_header=0x20000000005fd648, data=0x2000000000674800 "\b", 
    fd=0x9fffffffffffeae0, cinfo=0x0) at epan.c:161
No locals.
#40 0x200000000003cb50 in process_packet (cf=0x2000000000097138, 
    offset=2305843009219976192, whdr=0x20000000005fd628, 
    pseudo_header=0x20000000005fd648, pd=0x2000000000674800 "\b")
    at tethereal.c:2293
	fdata = {next = 0x0, prev = 0x0, pfd = 0x0, num = 37, pkt_len = 546, 
  cap_len = 546, cum_bytes = 8810, abs_ts = {secs = 1040375113, 
    nsecs = 374696000}, rel_ts = {secs = 5, nsecs = 317378000}, del_ts = {
    secs = 0, nsecs = 56436000}, file_off = 8880, lnk_t = 1, flags = {
    passed_dfilter = 0, encoding = 0, visited = 0, marked = 0, ref_time = 0}, 
  color_filter = 0x0}
	create_proto_tree = 6282240
	edt = (epan_dissect_t *) 0x20000000005fdc00
	passed = 618808
#41 0x200000000003c010 in load_cap_file (cf=0x2000000000097138, save_file=0x0, 
    out_file_type=2) at tethereal.c:2108
	linktype = 6280744
	snapshot_length = 6280776
	pdh = (wtap_dumper *) 0x0
	err = 1462964150
	err_info = (gchar *) 0x1003e <Address 0x1003e out of bounds>
	data_offset = 8880
	save_file_string = 0x0
#42 0x2000000000039bc0 in main (argc=6, argv=0x28) at tethereal.c:1424
	opt = 1160856288
	i = 6
	gpf_path = 0x0
	pf_path = 0x0
	gdp_path = 0x0
	dp_path = 0x0
	gpf_open_errno = 0
	gpf_read_errno = -2147483648
	pf_open_errno = 0
	pf_read_errno = -2147483648
	gdp_open_errno = 65598
	gdp_read_errno = 0
	dp_open_errno = 65516
	dp_read_errno = 0
	err = 0
	capture_filter_specified = 6900968
	list_link_layer_types = 0
	start_capture = 0
	quiet = 0
	out_file_type = 2
	cf_name = (
    gchar *) 0x2000000000694b80 "/home/buildbot/ethereal/random/editcap.out"
	rfilter = (gchar *) 0x0
	fcode = {bf_len = 4026531840, bf_insns = 0x10003}
	rfcode = (dfilter_t *) 0x0
	prefs = (e_prefs *) 0x200000004217e698
	status = 1160856288
	optstring = "a:b:c:d:Df:F:hi:lLnN:o:pqr:R:s:St:T:vVw:xX:y:z:"
	__PRETTY_FUNCTION__ = "main"


(no stderr output)


Bug 906 posted.