Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 9761] Null pointer dereference in Cairo if 50, 000 charact

Date: Sat, 18 Jun 2016 20:03:06 +0000

Comment # 8 on bug 9761 from
(In reply to Gerrit Code Review from comment #7)
> Change 16005 had a related patch set uploaded by Gerald Combs:
> GTK+: Truncate simple_message_box messages.
> 
> https://code.wireshark.org/review/16005

This fixes the problem for me on:

- Windows 7 x64, GTK+ 2.24.23, Cairo 1.12.16, Pango 1.36.8, GLib 2.42.0.

- OS X 10.10.5, GTK+ 2.24.30, Cairo 1.14.6, Pango 1.38.1, GLib 2.46.2. 


I was unable to duplicate the crash on 

- Ubuntu 14.04 x64, GTK+ 3.10.8, Cairo 1.13.1, Pango 1.36.3, GLib 2.40.2.
Complained with

(wireshark-gtk:3145): Gdk-WARNING **: Native Windows wider or taller than 32767
pixels are not supported

- OS X 10.11.5, GTK+ 3.18.9, Cairo 1.14.6, Pango 1.38.1, GLib 2.46.2. Took a
very long time, but no crash.

There appear to be two issues: Creating a window with an unsupported width and
a possible vasprintf/vprintf overrun. Change 16005 fixes the first but might
not do much about the second.


(In case it's of any use you can get 50,000 'a's on OS X using `printf "a%.0x"
{1..50000} | pbcopy` or `seq -f 'a' -s '' 50000 | pbcopy`)


You are receiving this mail because:
  • You are watching all bug changes.