Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 976] Buildbot crash output: fuzz-2006-06-26-2594.pcap

Date: Fri, 21 Jul 2006 09:01:42 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=976





------- Comment #4 from martin.mathieson@xxxxxxxxxxxx  2006-07-21 09:01 GMT -------
As I say, I don't get the crash here.

The fuzz testing generated a %s inside the parameter name.  This means that its
looking for a string arg that doesn't exist.  Which means that although the
patch that's been applied makes the string display better, it doesn't fix the
bug for implementations of vsnprintf() that can't cope with missing args for
specifiers.

proto_tree_add_text() is called in thousands of places - are they all
vulnerable to deliberately added specifiers?


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.