Wireshark-bugs: [Wireshark-bugs] [Bug 10476] Consistent crashes reading PCAP from tPacketCapture

Date: Wed, 17 Sep 2014 17:13:33 +0000

Comment # 16 on bug 10476 from
Bill was correct on both fronts. Landed now, and it was in fact Frame 412.

Identical crash when running with "-C Default". I didn't think I had made any
config changes on that particular installation.

As for that pointer - invalid as in NULL, or pointing off somewhere wonky in
memory? If the latter, my immediate thought would be to see if the value
retrieved looks like it came from that frame, because if that's the case, it's
most likely exploitable.


You are receiving this mail because:
  • You are watching all bug changes.