ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 6568] New: ERF file reader buffer overflow - still segfaul

Date: Fri, 11 Nov 2011 06:25:46 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6568

           Summary: ERF file reader buffer overflow - still segfaults
           Product: Wireshark
           Version: 1.4.6
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Blocker
          Priority: Low
         Component: Wireshark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: doktor5000@xxxxxxxx


Build Information:
$ wireshark -v
wireshark 1.4.6

Copyright 1998-2011 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.24.4, with GLib 2.28.6, with libpcap 1.1.1, with
libz 1.2.5, with POSIX capabilities (Linux), with libpcre (version unknown),
with SMI 0.4.8, without c-ares, without ADNS, with Lua 5.1, without Python,
with
GnuTLS 2.10.5, with Gcrypt 1.4.6, with MIT Kerberos, with GeoIP, with PortAudio
V19-devel (built Jan 13 2011), without AirPcap.

Running on Linux 2.6.38.8-desktop-6.mga, with libpcap version 1.1.1, with libz
1.2.5, GnuTLS 2.10.5, Gcrypt 1.4.6.

Built using gcc 4.5.2.
--
After applying the patch resulting from
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6479 (
http://anonsvn.wireshark.org/viewvc/trunk/wiretap/erf.c?r1=39508&r2=39507&pathrev=39508
) wireshark still segfaults when opening the sample capture file from said
bugreport.

Is there any other change which needs backporting to fix this segfault?

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.