Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 1001] free() invalid pointer in dissect_802_3 at packet-ie

Date: Sat, 29 Jul 2006 04:42:52 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1001





------- Comment #13 from dgautheron@xxxxxxxx  2006-07-29 04:42 GMT -------
(In reply to comment #11)
> (In reply to comment #10)
> > --a bug in SSP gcc,
> > Can you attache the gdb output of 
> > disas dissect_802_3
> 
> Attached.
No obvious error.

> 
> > --Does valgrind work with SSP? 
> 
> Not sure...  I've never used valgrind before (I'm far from an experienced
> programmer).  How would I test it?
It's easy :)
valgrind foo

In case of not installed software it's a bit harder because libtools does a lot
of stuff behind the scene. Some tips (I'm sure there's a faster way to do it
but I'm not a libtools expert).

1) if it also dumps core with tshark use this one you'll get fewer noise from
valgrind and won't need the dumcap magic.

2) run the code once, ie in the built directory  ./wireshark and try a capture,
otherwise you won't get lt-foo files.

3) go to .libs subdirectory you should have at least wireshark, lt-wireshark,
dumpcap, lt-dumpcap files.

4) copy lt-dumpcap to dumpcap, (lt-foo is foo with a modified libraries path
for package's libraries)   

5) double check that you can capture without valgrind:
./lt-wireshark

6) in .libs run 
valgrind lt-wireshark 
and try to capture
you may need 
valgrind --num-callers=30
You could get a lot of errors from the standart libs so run it without dumping
a core first (unplugging the ethernet cable?).

7) At least for me valgrind doesn't seem to work after the first captured
packet but it should be enough.

> Which reminds me that I haven't yet explained when Wireshark crashes:  It
> always crashes the instant a packet is supposed to be displayed.  If I have
> "Update list of packets in real time" checked, it crashes the instant a packet
> arrives.  If I don't have it checked, it crashes once I stop the capture
> (assuming a packet arrived while it was capturing).
Does it crashe if you open a previously captured file?


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.