Ethereal-users: [Ethereal-users] 10.0 dumps core on particular packet: XP and FreeBSD 4.9

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "McMahon, Chris" <CMcMahon@xxxxxxxxxxx>
Date: Thu, 18 Dec 2003 11:26:32 -0700

Hello... 
	I'm new to Ethereal, and I have a particular packet on my network
that is unviewable because any attempt to display the entire packet causes
Ethereal to crash.  
	The packet in question is sent to a multicast address with Protocol:
PGM; Info: ODATA sqn 0x718 (or whatever) gsi 000000000000 tsdulen 1400 (or
728 or 724)
	The core dump message in XP is: "file proto.c: line 1668: assertion
failed: ((guint)hfindex < gpa_hfinfo.len) 
	The core dump message in FreeBSD is: "** ERROR **: file proto.c:
line 446 (proto_registrar_get_nth: assertion failed: (hfindex >=0 && (guint)
hfindex < gpa_hfinfo -> len)"
	If I truncate the capture length to 68 bytes, Ethereal will display
those bytes without crashing.  It is the whole packet that causes the
problem.  If there's something illegal about this packet, I would very much
like to know it.  If the problem is with Ethereal, it would be good to find
a workaround.  
	And again, this occurs with Ethereal on both Windows XP and FreeBSD
4.9.   
-Chris