Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 7287] Buildbot crash output: fuzz-2012-05-25-11175.pcap

Date: Sun, 27 May 2012 14:04:03 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7287

Guy Harris <guy@xxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
          Component|TShark                      |Extras
           Platform|x86-64                      |All
         OS/Version|Ubuntu                      |All

--- Comment #9 from Guy Harris <guy@xxxxxxxxxxxx> 2012-05-27 14:04:02 PDT ---
editcap is, when reading 1946-sample_trace.cap and writing out a pcap-ng file,
not producing what Wireshark considers to be a *valid* pcap-ng file.  (I can
reproduce this without even fuzzing the file.)

Either the wiretap code for writing pcap-ng files is broken, so that we're
writing out, for example, a file with no Interface Description Blocks, or the
wiretap code for reading pcap-ng files is broken, so that it's rejecting valid
pcap-ng files.  I'm looking at that.  (My assumption is that the code writing
the files is broken.)

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.