Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 6833] Buildbot crash output: fuzz-2012-02-10-14752.pcap

Date: Sat, 11 Feb 2012 20:11:21 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6833

--- Comment #3 from Guy Harris <guy@xxxxxxxxxxxx> 2012-02-11 20:11:20 PST ---
The build that failed was 40961.  The changes between that and 40978 are:

 some DIAMETER dictionary changes;

 a fix to a TShark bug where it wrote some startup messages to the standard
output rather than the standard error (which was just reverting another
change);

 adding support for the interface ID and comment information in pcap-ng files;

 adding the DVB-DATA MultiProtocol Encapsulation dissector;

 adding the MPEG2 Program Associate Table and Section dissectors;

 replacing a C++/C99-style commented-out call with an #if 0/#endiffed-out call
in the Netlogon dissector;

 replacing a C++/C99-style comment with a C89-style comment in the NTLMSSP
dissector;

 adding the USB interface class to the protocol tree for an isochronous USB
transfer;

 fixing a bug in the ANSI A interface dissector that was causing a crash (does
"ANSI" mean "Digital AMPS" here?);

 expanding some counter variables to 32 bits to prevent infinite loops in the
802.11 dissector.

There *were* some packets that were dissected as containing MPEG2 Transport
Stream stuff, as I remember; I guess if the lack of the two MPEG2 dissectors
caused the packet to go through some other code that somehow tried to allocate
a huge chunk of memory, the addition of those dissectors might have made the
problem go away.  I don't *think* I saw any mobile phone stuff, so I suspect
the ANSI A interface changes wouldn't have fixed this.

Then again, maybe we were just never lucky enough to get that particular packet
problem thrown at us before.

I'll try disabling the two MPEG2 dissectors and see what happens.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.