ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 11198] New: Dissector bug, proto SunRPC: reassemble.c:121

Date: Thu, 14 May 2015 20:56:12 +0000
Bug ID 11198
Summary Dissector bug, proto SunRPC: reassemble.c:121 0: failed assertion "tvb_bytes_exist(tvb, offset, frag_data_len)
Product Wireshark
Version 1.10.3
Hardware x86
OS Red Hat
Status UNCONFIRMED
Severity Major
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Created attachment 13611 [details]
Pcap that triggers the assertion failure.

Build Information:
tshark -v
TShark 1.10.3 (SVN Rev Unknown from unknown)

Copyright 1998-2013 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GLib 2.22.5, with libpcap, with libz 1.2.3, without
POSIX
capabilities, without libnl, without SMI, without c-ares, without ADNS, without
Lua, without Python, with GnuTLS 2.8.5, with Gcrypt 1.4.5, with MIT Kerberos,
without GeoIP.

Running on Linux 2.6.32-504.12.2.el6.x86_64, with locale en_US.UTF-8, with
libpcap version 1.3.0, with libz 1.2.3.
Intel(R) Xeon(R) CPU           E5620  @ 2.40GHz

Built using gcc 4.4.7 20120313 (Red Hat 4.4.7-3).

------

OS: RHEL 6.6


--
tshark -r foo.pcap
  1 0.000000000 0.000000000 0.000000000 10.133.249.21 -> 10.133.249.217 624
2049 236 306 1 204
8 0x6ac84fd8  V4 Call NFS41OpRead READ StateID: 0xb8bf Offset: 54419456 Len:
4096
  2 0.000008000 0.000008000 0.000008000 10.133.249.21 -> 10.133.249.217 624
2049 472 306 237 2
048   [TCP segment of a reassembled PDU] [ETHERNET FRAME CHECK SEQUENCE
INCORRECT]
  3 0.000016000 0.000008000 0.000008000 10.133.249.21 -> 10.133.249.217 624
2049 708 306 473 2
048   624 > 2049 [PSH, ACK] Seq=473 Ack=1 Win=2048 Len=236 TSval=84867
TSecr=696375233


----------
# tshark+: Thu May 14 12:12:26 PDT 2015
# cmd: /usr/local/bin/tshark -r nfsv41.ipv4.rw=R.bs=4k.82599.1500.c=1M.pcap.gz 
-Y '(nfs.proce
dure_v4==1) && (nfs.opcode==25)' -o tcp.desegment_tcp_streams:FALSE -Tfields
-Eheader=y -e fra
me.time_relative -e ip.src -e tcp.srcport -e ip.dst -e tcp.dstport -e rpc.xid
-z io,stat,0 > /
tmp/nfs-packet-analysis.tmp.1605/nfsv41.ipv4.rw=R.bs=4k.82599.1500.c=1M.pcap.gz.call-reply.txt
.

** (process:1612): WARNING **: Dissector bug, protocol RPC, in packet 743918:
reassemble.c:121
0: failed assertion "tvb_bytes_exist(tvb, offset, frag_data_len)"
# tshark-: Thu May 14 12:14:00 PDT 2015


You are receiving this mail because:
  • You are watching all bug changes.