Bug#446206: wireshark: SegFault on a two frames portmap dump

2007-10-11 Thread Benoit SIBAUD
Package: wireshark
Version: 0.99.6rel-5

wireshark segfaults on a Statistics/RTP/Show all streams (the original
source is a 500MB dump from 2 hours of intranet traffic, including a
ToIP conference). I reduced the case to a two portmap frames dump (see
attachment).

The backtrace contains a lot of functions, probably a loop.

Core was generated by `wireshark'.
Program terminated with signal 11, Segmentation fault.
#0  0xb637a6f5 in g_hash_table_lookup () from /usr/lib/libglib-2.0.so.0
#1  0xb6e7087c in conversation_lookup_hashtable (hashtable=0x8a293a0,
frame_num=2, addr1=0x89b5870, addr2=0xb7f2ea30,
ptype=PT_UDP, port1=111, port2=0) at conversation.c:655
655 match = g_hash_table_lookup(hashtable, key);
#2  0xb6e70e9c in find_conversation (frame_num=2, addr_a=0x89b5870,
addr_b=0xb7f2ea30, ptype=PT_UDP, port_a=111, port_b=0,
options=1) at conversation.c:929
929conversation =
#3  0xb722bf75 in dissect_rpc_indir_reply (tvb=0x88b9f68,
pinfo=0x89b5820, tree=0x0, offset=593036, result_id=32340,
prog_id=32333, vers_id=32337, proc_id=32335) at packet-rpc.c:1529
1529conversation = find_conversation(pinfo-fd-num,
pinfo-dst, null_address,
#4  0xb71f19fc in dissect_callit_reply (tvb=0x88b9f68, offset=593036,
pinfo=0x89b5820, tree=0x0) at packet-portmap.c:344
344 offset = dissect_rpc_indir_reply(tvb, pinfo, tree, offset,
#5  0xb7229fab in call_dissect_function (tvb=0x88b9f68, pinfo=0x89b5820,
tree=0x89b5870, offset=593032,
dissect_function=0xb71f1950 dissect_callit_reply,
progname=0xbf7a9024 ) at packet-rpc.c:1272
1272offset = dissect_function(tvb, offset, pinfo, tree);
#6  0xb71f19fc in dissect_callit_reply (tvb=0x88b9f68, offset=593028,
pinfo=0x89b5820, tree=0x0) at packet-portmap.c:344
344 offset = dissect_rpc_indir_reply(tvb, pinfo, tree, offset,

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.15-1-686-smp (SMP w/1 CPU core)
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)
(ignored: LC_ALL set to [EMAIL PROTECTED])
Shell: /bin/sh linked to /bin/bash

Versions of packages wireshark depends on:
ii  libadns11.4-0.1  Asynchronous-capable DNS
client li
ii  libatk1.0-0 1.20.0-1 The ATK accessibility toolkit
ii  libc6   2.6.1-1+b1   GNU C Library: Shared libraries
ii  libcairo2   1.4.10-1 The Cairo 2D vector
graphics libra
ii  libcap1 1:1.10-14support for getting/setting
POSIX.
ii  libcomerr2  1.40.2-1 common error description
library
ii  libfontconfig1  2.4.2-1.2generic font configuration
library
ii  libgcrypt11 1.2.4-2  LGPL Crypto library -
runtime libr
ii  libglib2.0-02.14.0-2 The GLib library of C routines
ii  libgnutls13 1.7.19-1 the GNU TLS library -
runtime libr
ii  libgtk2.0-0 2.10.13-1The GTK+ graphical user
interface
ii  libkrb531.6.dfsg.1-7 MIT Kerberos runtime libraries
ii  libpango1.0-0   1.18.2-1 Layout and rendering of
internatio
ii  libpcap0.8  0.9.7-1  System interface for
user-level pa
ii  libpcre36.7-1Perl 5 Compatible Regular
Expressi
ii  libportaudio2   19+svn20070125-1 Portable audio I/O - shared
librar
ii  libx11-62:1.0.3-7X11 client-side library
ii  libxcursor1 1:1.1.9-1X cursor management library
ii  libxext61:1.0.3-2X11 miscellaneous extension
librar
ii  libxfixes3  1:4.0.3-2X11 miscellaneous 'fixes'
extensio
ii  libxi6  2:1.1.3-1X11 Input extension library
ii  libxinerama11:1.0.2-1X11 Xinerama extension library
ii  libxrandr2  2:1.2.2-1X11 RandR extension library
ii  libxrender1 1:0.9.4-1X Rendering Extension
client libra
ii  wireshark-common0.99.6rel-5  network traffic analyser
(common f
ii  zlib1g  1:1.2.3.3.dfsg-5 compression library - runtime

Versions of packages wireshark recommends:
pn  gksu  none (no description available)

-- no debconf information

-- 
BenoƮt Sibaud


dump.crash.wireshark
Description: Binary data


Bug#446206: wireshark: SegFault on a two frames portmap dump

2007-10-11 Thread Frederic Peters
forwarded 446206 http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1906
stop

Benoit SIBAUD wrote:
 Package: wireshark
 Version: 0.99.6rel-5
 
 wireshark segfaults on a Statistics/RTP/Show all streams (the original
 source is a 500MB dump from 2 hours of intranet traffic, including a
 ToIP conference). I reduced the case to a two portmap frames dump (see
 attachment).

Thanks for your report, I reproduced it and forwarded it upstream.


Frederic



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]