ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 7416] Wireshark crashes while editing capture filter "ethe

Date: Fri, 27 Jul 2012 10:48:06 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7416

Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jeff.morriss.ws@xxxxxxxxx

--- Comment #1 from Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> 2012-07-27 10:48:05 PDT ---
I could reproduce in the current trunk with libpcap 0.9.8(-3.fc10.x86_64).  I
mention the libpcap version because it appears to be a libpcap bug:

~~~
#0  0x00000031a0a32f05 in raise () from /lib64/libc.so.6
#1  0x00000031a0a34a73 in abort () from /lib64/libc.so.6
#2  0x00007fe6cafce1f6 in gen_host6 () from /usr/local/lib/libpcap.so.1
#3  0x00007fe6cafce532 in gen_mcode6 () from /usr/local/lib/libpcap.so.1
#4  0x00007fe6cafdaa89 in pcap_parse () from /usr/local/lib/libpcap.so.1
#5  0x00007fe6cafc9aaf in pcap_compile () from /usr/local/lib/libpcap.so.1
#6  0x00007fe6cafca40a in pcap_compile_nopcap ()
   from /usr/local/lib/libpcap.so.1
#7  0x00000000004f4331 in check_capture_filter_syntax (
    data=<value optimized out>) at ../../../ui/gtk/capture_dlg.c:371
#8  0x00000031a2260d64 in ?? () from /lib64/libglib-2.0.so.0
#9  0x00000031a16073da in start_thread () from /lib64/libpthread.so.0
#10 0x00000031a0ae62bd in clone () from /lib64/libc.so.6
~~~

I tried on another (Solaris SPARC) machine with an older Wireshark but a newer
libpcap (1.1.1 which matches your version) and it did not crash.

I don't understand why my libpcap-1.1.1 doesn't crash but yours does.  To prove
that /your/ crash is in libpcap, can you get a backtrace of the crash?  This
may be as simple as starting Wireshark under gdb:

% gdb wireshark

typing 'run' at the gdb prompt, executing the test, and then (once Wireshark
should have crashed but now appears hung), switching back to your terminal
window and typing "bt".

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.