Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 6172] Crash in "Follow TCP Stream"

Date: Tue, 2 Aug 2011 08:46:48 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6172

--- Comment #8 from Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx> 2011-08-02 09:46:47 MDT ---
(In reply to comment #7)

> Thanks.  That makes sense, since the second tab on the bottom of the hex dump
> is: "Reassembled TCP (11673 bytes)"

Normally, there are two tabs on that frame as seen visually and with debugging
code in gtk/main_proto_draw.c's add_byte_views() function (inserted at line
763):

09:43:50          Warn *** get_data_src_name(src) = Frame (191 bytes)
09:43:50          Warn *** get_data_src_name(src) = Reassembled TCP (11673
bytes)

But when doing Follow TCP stream, only the first is displayed before
crashing...

09:44:54          Warn *** get_data_src_name(src) = Frame (191 bytes)

Program received signal SIGBUS, Bus error.
[Switching to Thread 8098041c0 (LWP 100155)]
0x0000000805ae0b27 in strlen () from /lib/libc.so.7
(gdb)

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.