Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 4379] New: Wireshark crash with new packet list if unknown

Date: Sun, 10 Jan 2010 19:19:44 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4379

           Summary: Wireshark crash with new packet list if unknown custom
                    column field
           Product: Wireshark
           Version: SVN
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: Major
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: jyoung@xxxxxxx


Jim Young <jyoung@xxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #4122|                            |review_for_checkin?
               Flag|                            |

Created an attachment (id=4122)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=4122)
Patch to new_packet_list.c to insure hfi is non-null

Build Information:
$ wireshark-gtk2/tshark -v
TShark 1.3.3 (SVN Rev 31483 from /trunk)

Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GLib 2.22.3, with WinPcap (version unknown), with libz 1.2.3,
without POSIX capabilities, without libpcre, with SMI 0.4.8, with c-ares 1.7.0,
with Lua 5.1, without Python, with GnuTLS 2.8.5, with Gcrypt 1.4.5, with MIT
Kerberos, with GeoIP.

Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.1.1
(packet.dll version 4.1.0.1753), based on libpcap version 1.0 branch 1_0_rel0b
(20091008), GnuTLS 2.8.5, Gcrypt 1.4.5.

Built using Microsoft Visual C++ 9.0 build 30729

--
Wireshark when using the New packet list can crash if dfilter field in custom
column references an unknown value.  In my case the crash would occur when I
attempted to switch between Configuration profiles.  The Configuration profile
I was attempting to switch to had a custom column that referenced an obsolete
dfilter field value.  I could also trigger a crash on Wireshark startup by
selecting the problem Configuration profile name by using the "-C profilename"
option.

This patch fixes a regression that appears to have crept in with enhancements
added with SVN 31093.

Attached patch insures "hfi" is non-NULL before setting tooltips for the Custom
Columns headers in the new packet list.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.