["McQuiggan, Mark xt46480" <Mark_McQuiggan@xxxxxxx>]

Folks:

I believe that a bug in the MQ dissector (or a bug caused by the MQ
dissector) is causing a segmentation fault error in Ethereal/Tethereal.

Am I off base here?  I disabled the MQ Protocol and haven't had an issue
since.

Here is the gdb trace:


Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread -151039328 (LWP 10660)]
0x00314726 in free () from /lib/tls/libc.so.6
(gdb) backtrace
#0  0x00314726 in free () from /lib/tls/libc.so.6
#1  0x001536c4 in g_free () from /usr/lib/libglib-2.0.so.0
#2  0x007d4ff4 in dissect_mq_pdu (tvb=0x8a6d2c8, pinfo=0x8a3baf8, tree=0x0)
    at packet-mq.c:2258
#3  0x0092934a in tcp_dissect_pdus (tvb=0x8a69778, pinfo=0x8a3baf8,
tree=0x0,
    proto_desegment=1, fixed_len=28, get_pdu_len=0x7d9780 <get_mq_pdu_len>,
    dissect_pdu=0x7d9450 <reassemble_mq>) at packet-tcp.c:2089
#4  0x007d9854 in dissect_mq_tcp (tvb=0x0, pinfo=0x0, tree=0x0)
    at packet-mq.c:2411
#5  0x0054c604 in call_dissector_through_handle (handle=0x85c6580,
    tvb=0x8a69778, pinfo=0x8a3baf8, tree=0x0) at packet.c:365
#6  0x0054c970 in call_dissector_work (handle=0x85c6580, tvb=0x8a69778,
    pinfo=0x8a3baf8, tree=0x0) at packet.c:515
#7  0x0054e3ba in call_dissector (handle=0x0, tvb=0x8a69778,
pinfo=0x8a3baf8,
    tree=0x0) at packet.c:1616
#8  0x005475d7 in try_conversation_dissector (addr_a=0x0, addr_b=0x0,
    ptype=PT_NONE, port_a=0, port_b=0, tvb=0x0, pinfo=0x0, tree=0x0)
    at conversation.c:957
#9  0x00929b79 in decode_tcp_ports (tvb=0x0, offset=0, pinfo=0x8a3baf8,
    tree=0x0, src_port=61234, dst_port=1417) at packet-tcp.c:2367
#10 0x00929de8 in process_tcp_payload (tvb=0x8a69744, offset=20,
    pinfo=0x8a3baf8, tree=0x0, tcp_tree=0x0, src_port=61234, dst_port=1417,
    seq=0, nxtseq=0, is_tcp_segment=0) at packet-tcp.c:2450
#11 0x00929127 in desegment_tcp (tvb=0x8a69744, pinfo=0x8a3baf8, offset=20,
    seq=1550470469, nxtseq=1550471073, sport=61234, dport=1417, tree=0x0,
    tcp_tree=0x0) at packet-tcp.c:1645
#12 0x0092adb1 in dissect_tcp (tvb=0x8a69744, pinfo=0x8a3baf8, tree=0x0)
    at packet-tcp.c:2954
#13 0x0054c604 in call_dissector_through_handle (handle=0x85cd1d8,
    tvb=0x8a69744, pinfo=0x8a3baf8, tree=0x0) at packet.c:365
#14 0x0054c970 in call_dissector_work (handle=0x85cd1d8, tvb=0x8a69744,
    pinfo=0x8a3baf8, tree=0x0) at packet.c:515
#15 0x0054ce77 in dissector_try_port (sub_dissectors=0x0, port=6, tvb=0x0,
    pinfo=0x8a3baf8, tree=0x0) at packet.c:778
#16 0x0077b8cd in dissect_ip (tvb=0x8a69710, pinfo=0x8a3baf8, tree=0x0)
    at packet-ip.c:1098
#17 0x0054c604 in call_dissector_through_handle (handle=0x85305f0,
    tvb=0x8a69710, pinfo=0x8a3baf8, tree=0x0) at packet.c:365
#18 0x0054c970 in call_dissector_work (handle=0x85305f0, tvb=0x8a69710,
    pinfo=0x8a3baf8, tree=0x0) at packet.c:515
---Type <return> to continue, or q <return> to quit---
#19 0x0054ce77 in dissector_try_port (sub_dissectors=0x0, port=2048,
tvb=0x0,
    pinfo=0x8a3baf8, tree=0x0) at packet.c:778
#20 0x006b5ac0 in ethertype (etype=2048, tvb=0x8a696dc,
offset_after_etype=14,
    pinfo=0x8a3baf8, tree=0x0, fh_tree=0x0, etype_id=0, trailer_id=3733,
    fcs_len=-17492084) at packet-ethertype.c:179
#21 0x006b27d5 in dissect_eth_common (tvb=0x8a696dc, pinfo=0x8a3baf8,
    tree=0x0, fcs_len=-17492084) at packet-eth.c:292
#22 0x006b2d78 in dissect_eth_maybefcs (tvb=0x0, pinfo=0x5d6465, tree=0x0)
    at packet-eth.c:387
#23 0x0054c604 in call_dissector_through_handle (handle=0x85c24d8,
    tvb=0x8a696dc, pinfo=0x8a3baf8, tree=0x0) at packet.c:365
#24 0x0054c970 in call_dissector_work (handle=0x85c24d8, tvb=0x8a696dc,
    pinfo=0x8a3baf8, tree=0x0) at packet.c:515
#25 0x0054ce77 in dissector_try_port (sub_dissectors=0x0, port=1, tvb=0x0,
    pinfo=0x8a3baf8, tree=0x0) at packet.c:778
#26 0x006dad94 in dissect_frame (tvb=0x8a696dc, pinfo=0x8a3baf8, tree=0x0)
    at packet-frame.c:184
#27 0x0054c604 in call_dissector_through_handle (handle=0x850f4a0,
    tvb=0x8a696dc, pinfo=0x8a3baf8, tree=0x0) at packet.c:365
#28 0x0054c970 in call_dissector_work (handle=0x850f4a0, tvb=0x8a696dc,
    pinfo=0x8a3baf8, tree=0x0) at packet.c:515
#29 0x0054e3ba in call_dissector (handle=0x0, tvb=0x8a696dc,
pinfo=0x8a3baf8,
    tree=0x0) at packet.c:1616
#30 0x0054c57c in dissect_packet (edt=0x8a3baf0, pseudo_header=0x0,
    pd=0x8607282 "", fd=0xfef516c0, cinfo=0x8a3baf8) at packet.c:313
#31 0x0054a2ab in epan_dissect_run (edt=0x0, pseudo_header=0x0, data=0x0,
    fd=0x0, cinfo=0x0) at epan.c:153
#32 0x0805d6a1 in ?? ()
#33 0x08a3baf0 in ?? ()
#34 0xfef51760 in ?? ()
#35 0x08607282 in ?? ()
#36 0xfef516c0 in ?? ()
#37 0x080779cc in ?? ()
#38 0x0000001a in ?? ()
#39 0x0001000d in ?? ()
#40 0x003ca780 in __after_morecore_hook () from /lib/tls/libc.so.6
#41 0x00000000 in ?? ()
(gdb)

_
This message and any attachments are intended only for the use of the addressee and
may contain information that is privileged and confidential. If the reader of the 
message is not the intended recipient or an authorized representative of the
intended recipient, you are hereby notified that any dissemination of this
communication is strictly prohibited. If you have received this communication in
error, please notify us immediately by e-mail and delete the message and any
attachments from your system.

<<application/ms-tnef>>