ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 7486] New: Possible NULL dereference in packet-pop

Date: Mon, 16 Jul 2012 14:39:14 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7486

           Summary: Possible NULL dereference in packet-pop
           Product: Wireshark
           Version: SVN
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Dissection engine (libwireshark)
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: darkjames-ws@xxxxxxxxxxxx


Created attachment 8781
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=8781
Capture file which cause NULL dereference

Build Information:
TShark 1.9.0/r43756
--
Hi,

It's possible to crash wireshark with null dereference of data_val.
Attaching sample capture file.

Reverting r43230 (bug #3317) fix the problem.

If you run tshark please note that crash will occur on second dissection of
packet. i.e. tshark -r /tmp/test won't crash, but tshark -r /tmp/test -2 will.

Or skip -2 and just run wireshark.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.