Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 7676] New: tshark -q -z io, stat, 1 causes core dump for f

Date: Wed, 29 Aug 2012 12:36:25 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7676

           Summary: tshark -q -z io,stat,1 causes core dump for files
                    larger than ~2MB
           Product: Wireshark
           Version: 1.8.2
          Platform: x86
        OS/Version: Windows XP
            Status: NEW
          Severity: Major
          Priority: Low
         Component: TShark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: steve.magnuson2@xxxxxxxxxx


Build Information:
[steve@nms231s1 ~]$ tshark -v
TShark 1.8.2 (SVN Rev Unknown from unknown)

Copyright 1998-2012 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GLib 2.28.8, with libpcap, with libz 1.2.5, without
POSIX
capabilities, with SMI 0.4.8, without c-ares, with ADNS, with Lua 5.1, without
Python, with GnuTLS 2.12.18, with Gcrypt 1.5.0, with Heimdal Kerberos, with
GeoIP.

Running on FreeBSD 9.0-RELEASE-p3, without locale, with libpcap version 1.1.1,
with libz 1.2.5.

Built using gcc 4.2.1 20070831 patched [FreeBSD].

--
When I generate io stats on these files, only the 3 smaller files produce
output.  The 2 larger files cause a core dump.  Other files larger than ~2MB
also core dump.

[steve@nms231s1 ~]$ ll *BA*
-rw-------  1 steve  steve    391499 Feb 14  2012
20120214-BA_00001_20120214154705.pcap
-rw-------  1 steve  steve    481296 Feb 14  2012
20120214-BA_00001_20120214143943.pcap
-rw-------  1 steve  steve   1996458 Feb 14  2012
20120214-BA_00001_20120214151621.pcap
-rw-------  1 steve  steve   4122210 Feb 14  2012
20120214-BA_00001_20120214155239.pcap
-rw-------  1 steve  steve  51201925 Feb  7  2012
20120207-BA-itl-corenet_00001_20120207041605.pcap



============================================================
[steve@nms231s1 ~]$ tshark -n -r 20120214-BA_00001_20120214155239.pcap -q -z
io,stat,1

(process:1654): GLib-ERROR (recursed) **: gmem.c:240: failed to allocate 64
bytes
aborting...
Abort trap: 6 (core dumped)

============================================================

[steve@nms231s1 ~]$ tshark -n -r
20120207-BA-itl-corenet_00001_20120207041605.pcap -q -z io,stat,1

(process:98870): GLib-ERROR (recursed) **: gmem.c:240: failed to allocate 64
bytes
aborting...
Abort trap: 6 (core dumped)

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.