Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-dev: Re: [Ethereal-dev] Crash by AJP13 protocol

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Wed, 26 Mar 2003 13:12:49 -0800
On Wed, Mar 26, 2003 at 02:06:44PM -0700, Greg Morris wrote:
> I just removed my development version of Ethereal and reinstalled the
> binary from the Ethereal website.

That's what I'm running, too.

> dissect_ajp13_tcp_pdu(tvbuff * 0x01e14850, _packet_info * 0x01e138e0,
> _GNode * 0x01e13ea8) line 667 + 3 bytes

The only way that would crash would be if "cd" were NULL - that
statement *CANNOT* crash if "cd->content_length" is 0, unless it's
running on a processor that crashes whenever you fetch a zero value from
memory.

> dissect_packet(_epan_dissect_t * 0x01e138d8, wtap_pseudo_header *
> 0x01dcf4fc, const unsigned char * 0x01dee170, _frame_data * 0x01e03a14,
> _column_info * 0x009e9a18) line 319 + 32 bytes
> epan_dissect_run(_epan_dissect_t * 0x01e138d8, void * 0x01dcf4fc, const
> unsigned char * 0x01dee170, _frame_data * 0x01e03a14, _column_info *
> 0x009e9a18) line 103 + 25 bytes
> add_packet_to_packet_list(_frame_data * 0x01e03a14, _capture_file *
> 0x009d9900, wtap_pseudo_header * 0x01dcf4fc, const unsigned char *
> 0x01dee170, int 1) line 712 + 31 bytes
> read_packet(_capture_file * 0x009d9900, long 851) line 831 + 23 bytes

You have something (a color filter, or a read filter?) enabled that
causes packets to be dissected on the first pass through the capture -
but even if I use a read filter when reading the capture, I still don't
see a crash.