Wireshark

  • Riverbed Technology
  • WinPcap
SHARKFEST '12 - Wireshark Developer and User Conference - June 24-27, 2012 - UC Berkeley, Clark Kerr Campus
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: [Wireshark-dev] Wireshark 1.2.1 crash when Handing off dissector

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "jdhagen chorus.net" <jdhagen@xxxxxxxxxx>
Date: Mon, 31 Aug 2009 10:43:16 -0500

I'm running Wireshark 1.2.1 on Windows XP SP3.

When it starts, it gets to 51% while executing the "Handing
off dissector" logic, which happens to be 2dparityfec, and
then crashes.

The details are:

Unhandled exception at 0x007F3FC9: 0xC0000005: Access violation
reading location 0x02C8D000.

ecx == 0x02C8CFFD

007F3FC9  mov         eax,dword ptr [ecx]

Memory at 0x02C8CFFD:

31 00 00 ?? ?? ?? ?? ??


It appears the code is trying to do a DWORD fetch from
address 0x02C8CFFD, but the memory starting at 0x02C8D000
isn't mapped into the address space, so it faults.

Is there a way to determine the function that is executing?

I tried a build using VC6 and that build didn't exhibit the problem.

Thanks.


Joe Hagen
  • Prev by Date: Re: [Wireshark-dev] Wireshark on OSX Snow Leopard
  • Next by Date: Re: [Wireshark-dev] Autogen.sh error on ubuntu
  • Previous by thread: [Wireshark-dev] an FT_UINT8 hf that starts on a specific bit.
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation