Wireshark · Ethereal-dev: [Ethereal-dev] Bug report for ethereal-0.10.10 on Fedora x86_64 version

[Pierre JUHEN <pierre.juhen@xxxxxxxxxx>]

Bug symptom under gdb :

run gdb /usr/bin/ethereal

(gdb) b cf_callback_invoke
Breakpoint 1 at 0x426d50: file file.c, line 147.
(gdb) run

Starting program: /usr/bin/ethereal
[Thread debugging using libthread_db enabled]
[New Thread 182911462208 (LWP 29614)]
[Switching to Thread 182911462208 (LWP 29614)]

**** Lauch capture with

Breakpoint 1, cf_callback_invoke (event=6337248, data=0x5fb100) at 
file.c:147
147     {
(gdb) c
Continuing.

Breakpoint 1, cf_callback_invoke (event=6337248, data=0x5fb100) at 
file.c:147
147     {
(gdb) c
Continuing.

Breakpoint 1, cf_callback_invoke (event=6337248, data=0xc55210) at 
file.c:147
147     {
(gdb) c
Continuing.
Detaching after fork from child process 29616.

Breakpoint 1, cf_callback_invoke (event=10947280, data=0x5fb100) at 
file.c:147
147     {
(gdb) c
Continuing.

Breakpoint 1, cf_callback_invoke (event=10947280, data=0x5fb100) at 
file.c:147
147     {
(gdb) s 8160

Single stepping until exit from function g_free,
which has no line number information.
Single stepping until exit from function free,
which has no line number information.
[.....]
Single stepping until exit from function g_free,
which has no line number information.
Single stepping until exit from function free,
which has no line number information.

(gdb) s

********* Do a few single stepping until you get *****************

863         if ((menu_item = gtk_item_factory_get_widget(ifactory, dup)) 
!= NULL) {
(gdb) bt
#0  set_menu_sensitivity (ifactory=0x999d60, path=0x96dd1d "", val=1) at 
menu.c:863
#1  0x000000000043e4f5 in walk_menu_tree_for_selected_tree_row 
(node=0xc5cd1e, fi=0x0) at menu.c:1800
#2  0x000000000043e510 in walk_menu_tree_for_selected_tree_row 
(node=0xc5cd1e, fi=0x0) at menu.c:1789
#3  0x0000000000429cf1 in cf_reset_state (cf=0x5fb100) at file.c:286
#4  0x000000000042a59e in cf_open (cf=0x5fb100, fname=0xc55210 
"/tmp/etherXXXX4plsyR", is_tempfile=1, err=0x7fbfffd9a8) at file.c:194
#5  0x000000000042a746 in cf_start_tail (cf=0x5fb100, fname=0x96dd1e "", 
is_tempfile=12963100, err=0x0) at file.c:503
#6  0x0000000000424332 in sync_pipe_do_capture (capture_opts=0x60b2e0, 
is_tempfile=1) at capture_sync.c:496
#7  0x00000000004232f5 in do_capture (capture_opts=0x60b2e0) at 
capture.c:176
#8  0x0000000000455907 in capture_prep_ok_cb (ok_bt=0xc5cd1e, 
parent_w=0xc568c0) at capture_dlg.c:1471
#9  0x000000337db0bfaa in g_closure_invoke () from 
/usr/lib64/libgobject-2.0.so.0
#10 0x000000337db21fbd in g_signal_has_handler_pending () from 
/usr/lib64/libgobject-2.0.so.0
#11 0x000000337db23056 in g_signal_emit_valist () from 
/usr/lib64/libgobject-2.0.so.0
#12 0x000000337db233a3 in g_signal_emit () from 
/usr/lib64/libgobject-2.0.so.0
#13 0x000000344176fe48 in gtk_button_get_alignment () from 
/usr/lib64/libgtk-x11-2.0.so.0
#14 0x000000337db0bfaa in g_closure_invoke () from 
/usr/lib64/libgobject-2.0.so.0
#15 0x000000337db2188d in g_signal_has_handler_pending () from 
/usr/lib64/libgobject-2.0.so.0
#16 0x000000337db23056 in g_signal_emit_valist () from 
/usr/lib64/libgobject-2.0.so.0
#17 0x000000337db233a3 in g_signal_emit () from 
/usr/lib64/libgobject-2.0.so.0
#18 0x000000344176f309 in gtk_button_set_relief () from 
/usr/lib64/libgtk-x11-2.0.so.0
#19 0x000000344181b636 in gtk_marshal_VOID__UINT_STRING () from 
/usr/lib64/libgtk-x11-2.0.so.0
#20 0x000000337db0bfaa in g_closure_invoke () from 
/usr/lib64/libgobject-2.0.so.0
#21 0x000000337db21af5 in g_signal_has_handler_pending () from 
/usr/lib64/libgobject-2.0.so.0
#22 0x000000337db22cc2 in g_signal_emit_valist () from 
/usr/lib64/libgobject-2.0.so.0
#23 0x000000337db233a3 in g_signal_emit () from 
/usr/lib64/libgobject-2.0.so.0
#24 0x0000003441906350 in gtk_widget_activate () from 
/usr/lib64/libgtk-x11-2.0.so.0
#25 0x000000344181961e in gtk_propagate_event () from 
/usr/lib64/libgtk-x11-2.0.so.0
#26 0x00000034418199a5 in gtk_main_do_event () from 
/usr/lib64/libgtk-x11-2.0.so.0
#27 0x0000003441144b50 in gdk_event_get_graphics_expose () from 
/usr/lib64/libgdk-x11-2.0.so.0
#28 0x000000337d52675d in g_main_context_dispatch () from 
/usr/lib64/libglib-2.0.so.0
#29 0x000000337d528437 in g_main_context_acquire () from 
/usr/lib64/libglib-2.0.so.0
#30 0x000000337d5287d5 in g_main_loop_run () from 
/usr/lib64/libglib-2.0.so.0
#31 0x0000003441818e01 in gtk_main () from /usr/lib64/libgtk-x11-2.0.so.0
#32 0x000000000043c307 in main (argc=0, argv=0x7fbffff6d0) at main.c:2392
(gdb) s
864           if (GTK_IS_MENU(menu_item)) {
(gdb) bt
#0  set_menu_sensitivity (ifactory=0x999d60, path=0x9f5e60 "c\227", 
val=1) at menu.c:864
#1  0x000000000043e4f5 in walk_menu_tree_for_selected_tree_row 
(node=0x9f5e70, fi=0x0) at menu.c:1800
#2  0x000000000043e510 in walk_menu_tree_for_selected_tree_row 
(node=0x9f5e70, fi=0x0) at menu.c:1789
#3  0x0000000000429cf1 in cf_reset_state (cf=0x5fb100) at file.c:286
#4  0x000000000042a59e in cf_open (cf=0x5fb100, fname=0xc55210 
"/tmp/etherXXXX4plsyR", is_tempfile=1, err=0x7fbfffd9a8) at file.c:194
#5  0x000000000042a746 in cf_start_tail (cf=0x5fb100, fname=0x190 
<Address 0x190 out of bounds>, is_tempfile=-536870874, err=0x50) at 
file.c:503
#6  0x0000000000424332 in sync_pipe_do_capture (capture_opts=0x60b2e0, 
is_tempfile=1) at capture_sync.c:496
#7  0x00000000004232f5 in do_capture (capture_opts=0x60b2e0) at 
capture.c:176
#8  0x0000000000455907 in capture_prep_ok_cb (ok_bt=0x9f5e70, 
parent_w=0xc568c0) at capture_dlg.c:1471
#9  0x000000337db0bfaa in g_closure_invoke () from 
/usr/lib64/libgobject-2.0.so.0
#10 0x000000337db21fbd in g_signal_has_handler_pending () from 
/usr/lib64/libgobject-2.0.so.0
#11 0x000000337db23056 in g_signal_emit_valist () from 
/usr/lib64/libgobject-2.0.so.0
#12 0x000000337db233a3 in g_signal_emit () from 
/usr/lib64/libgobject-2.0.so.0
#13 0x000000344176fe48 in gtk_button_get_alignment () from 
/usr/lib64/libgtk-x11-2.0.so.0
#14 0x000000337db0bfaa in g_closure_invoke () from 
/usr/lib64/libgobject-2.0.so.0
#15 0x000000337db2188d in g_signal_has_handler_pending () from 
/usr/lib64/libgobject-2.0.so.0
#16 0x000000337db23056 in g_signal_emit_valist () from 
/usr/lib64/libgobject-2.0.so.0
#17 0x000000337db233a3 in g_signal_emit () from 
/usr/lib64/libgobject-2.0.so.0
#18 0x000000344176f309 in gtk_button_set_relief () from 
/usr/lib64/libgtk-x11-2.0.so.0
#19 0x000000344181b636 in gtk_marshal_VOID__UINT_STRING () from 
/usr/lib64/libgtk-x11-2.0.so.0
#20 0x000000337db0bfaa in g_closure_invoke () from 
/usr/lib64/libgobject-2.0.so.0
#21 0x000000337db21af5 in g_signal_has_handler_pending () from 
/usr/lib64/libgobject-2.0.so.0
#22 0x000000337db22cc2 in g_signal_emit_valist () from 
/usr/lib64/libgobject-2.0.so.0
#23 0x000000337db233a3 in g_signal_emit () from 
/usr/lib64/libgobject-2.0.so.0
#24 0x0000003441906350 in gtk_widget_activate () from 
/usr/lib64/libgtk-x11-2.0.so.0
#25 0x000000344181961e in gtk_propagate_event () from 
/usr/lib64/libgtk-x11-2.0.so.0
#26 0x00000034418199a5 in gtk_main_do_event () from 
/usr/lib64/libgtk-x11-2.0.so.0
#27 0x0000003441144b50 in gdk_event_get_graphics_expose () from 
/usr/lib64/libgdk-x11-2.0.so.0
#28 0x000000337d52675d in g_main_context_dispatch () from 
/usr/lib64/libglib-2.0.so.0
#29 0x000000337d528437 in g_main_context_acquire () from 
/usr/lib64/libglib-2.0.so.0
#30 0x000000337d5287d5 in g_main_loop_run () from 
/usr/lib64/libglib-2.0.so.0
#31 0x0000003441818e01 in gtk_main () from /usr/lib64/libgtk-x11-2.0.so.0
#32 0x000000000043c307 in main (argc=0, argv=0x7fbffff6d0) at main.c:2392

********************

You can see, in the two tt commands, that the cf_start_tail line has 
been altered way down the stack.

Thank you for your help.

Pierre JUHEN