Wireshark-bugs: [Wireshark-bugs] [Bug 5760] Buildbot crash output: fuzz-2011-03-16-6919.pcap

Date: Tue, 29 Mar 2011 12:07:46 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5760

Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |anders.broman@xxxxxxxxxxxx,
                   |                            |jeff.morriss.ws@xxxxxxxxx

--- Comment #3 from Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> 2011-03-29 12:07:43 PDT ---
backtrace is:

~~~
#0  bssgp_suspend_ack (tvb=0x260a760, tree=0x2609950, offset=12, len=1)
    at ../../../epan/dissectors/packet-bssgp.c:4203
#1  0x00007f062925cc78 in be_fe_gprs_suspend_info (tvb=0x260a760, 
    tree=0x2609950, offset=31, len=1, 
    add_string=0x3e <Address 0x3e out of bounds>, string_len=12)
    at ../../../epan/dissectors/packet-gsm_a_bssmap.c:4111
#2  0x00007f062925cbab in be_field_element_dissect (tvb=0x260a760, 
    tree=0x2609860, offset=<value optimized out>, len=14, 
    add_string=<value optimized out>, string_len=<value optimized out>)
    at ../../../epan/dissectors/packet-gsm_a_bssmap.c:4306
#3  0x00007f062925f212 in bssmap_old_bss_to_new_bss_info (tvb=0x260a760, 
    tree=0x2609860, pinfo=<value optimized out>)
    at ../../../epan/dissectors/packet-gsm_a_bssmap.c:2856
#4  0x00007f06296f4657 in dissect_ranap_OldBSS_ToNewBSS_Information ()
    at ranap.cnf:249
~~~

The problem is that 'gpinfo' (a global copy of 'pinfo') is NULL.  That's
because the gsm_a_bssmap() dissector is calling bssgp_suspend_ack()
directly--not going through dissect_bssgp() which sets gpinfo.

The problem comes from rev 36142.  Anders, are you still overhauling this/these
dissectors?

I suppose a good solution would be to change the prototype for all the bssgp
functions to include pinfo in the parameter list.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.