Wireshark-bugs: [Wireshark-bugs] [Bug 2017] VoIP trace crashes Wireshark when specific RTP Player buttons are clicked

From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sat, 5 Jan 2008 02:55:58 +0000 (GMT)

http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2017


stephentfisher@xxxxxxxxx changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
              Group|private                     |




------- Comment #25 from stephentfisher@xxxxxxxxx  2008-01-05 02:55 GMT -------
Good point, Jaap.

As I've seen in other areas of the code while investigating this problem
before, the trigger of the crash is a loop running one too many times.  In the
case of freeing the pt_str, when using the capture file attached here as
"Subset of initial trace file - call #2 frames," it usually runs twice and
frees the string g711U.  After a few runs through opening the voip calls stats
window and closing it, I ran into a case where it did the free a third time of
a seemingly corrupted string (a CR and possibly other non-visible characters
ending in a U, the last time I ran it) and then glibc threw an error that a
double linked list was corrupted.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.