>Synopsis:      tcpdump dumps core with long filter expression
>Category:      system library amd64
>Environment:
        System      : OpenBSD 7.1-current
        Details     : OpenBSD 7.1-current (GENERIC) #533: Thu May 26
12:06:14 MDT 2022

dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC

        Architecture: OpenBSD.amd64
        Machine     : amd64
>Description:
        tcpdump dumps core with a long filter expression.  (either on
        the command line or using the -F option)
>How-To-Repeat:
        # echo "port 0 or port 1 or port 2 or port 3 or port 4 or port
5 or port 6 or port 7 \
or port 8 or port 9 or port 10 or port 11 or port 12 or port 13 or
port 14" > /tmp/filter.cf

        # tcpdump -nl -i vio0 -F /tmp/filter.cf
        tcpdump(52915) in free(): bogus pointer (double free?)
0xdfdfdfdfdfdfdfdf

        Same behavior with p0f3 (also using libpcap), from packages:

        # p0f3 -i vio0 "$(cat /tmp/filter.cf)"
        p0f3(59041) in free(): bogus pointer (double free?) 0xdfdfdfdfdfdfdfdf
        Abort trap (core dumped)

>Fix:
        Unknown.

Reply via email to