Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 4732] New: IEEE 802.11 RSSI in column terminates tshark/wi

Date: Fri, 30 Apr 2010 13:20:29 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4732

           Summary: IEEE 802.11 RSSI in column terminates tshark/wireshark
                    at column-utils.c:1539
           Product: Wireshark
           Version: 1.3.x (Experimental)
          Platform: x86
        OS/Version: Windows XP
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: TShark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: aaron@xxxxxxxxx


Created an attachment (id=4596)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=4596)
a preferences file that kills Wireshark/tshark

Build Information:
C:\tmp\PCROAK~1>tshark -v
TShark 1.3.4 (SVN Rev 32342 from /trunk)

Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GLib 2.22.4, with WinPcap (version unknown), with libz 1.2.3,
without POSIX capabilities, without libpcre, with SMI 0.4.8, with c-ares 1.7.1,
with Lua 5.1, without Python, with GnuTLS 2.8.5, with Gcrypt 1.4.5, with MIT
Kerberos, with GeoIP.

Running on Windows XP Service Pack 2, build 2600, with WinPcap version 4.1.1
(packet.dll version 4.1.0.1753), based on libpcap version 1.0 branch 1_0_rel0b
(20091008), GnuTLS 2.8.5, Gcrypt 1.4.5.

Built using Microsoft Visual C++ 9.0 build 30729
--
With Wireshark/tshark 1.3.4, if the preferences file has a column
whose Field type is IEEE 802.11 RSSI, then, when a capture file is read,
the program will terminate with a popup similar to the following:

  Microsoft visual C++ Runtime Library
  Runtime Error!

  Program: c:\progra~1\wireshark.exe

  This application has requested the Runtime to terminate it in an unusual way.
  Please contact the application's support team for more information.

The command window in which tshark was invoked will show:

C:\tmp\PCROAK~1>tshark -n -r failure-filtered.pcap
**
ERROR:column-utils.c:1539:???: code should not be reached

This is very simple to recreate - in Preferences -> User Interface ->
Columns, simply add a new column of Field Type "IEEE 802.11 RSSI",
then read in a capture file.

Attached are a preferences file (which differs from the stock one only
by the addition of the RSSI column), and a packet capture file, that
can be used to demonstrate the bug.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.