https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2934
Summary: Assertion thrown in
get_field_hex_value/write_pdml_field_hex_value
Product: Wireshark
Version: 1.0.3
Platform: Macintosh
OS/Version: Mac OS X 10.4
Status: NEW
Severity: Normal
Priority: Low
Component: TShark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: dhelder@xxxxxxxxxxxxxx
Build Information:
TShark 1.0.3
Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GLib 2.14.4, with libpcap 0.9.5, with libz 1.2.3, without POSIX
capabilities, without libpcre, without SMI, without ADNS, without Lua, without
GnuTLS, with Gcrypt 1.2.4, with MIT Kerberos.
NOTE: this build doesn't support the "matches" operator for Wireshark filter
syntax.
Running on Darwin 8.11.1 (MacOS 10.4.11), with libpcap version 0.9.5.
Built using gcc 4.0.1 (Apple Computer, Inc. build 5367).
--
In get_field_hex_value/write_pdml_field_hex_value, if fi->ds_tvb is NULL,
tvb_length_remaining() will raise an assertion when called with the NULL TVB.
One solution is to check if fi->ds_tvb is NULL before calling. Another is to
update dissectors so ds_tvb is never NULL. I found this bug using an XDMCP
PCAP. The NULL ds_tvb is created in packet-xdmcp.c, line 331. There may be
similar issues in packet-kerberos.c and packet-spnego.c.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
