Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] wireshark crashing

From: Ed Beroset <beroset@xxxxxxxxxxxxxx>
Date: Thu, 12 Sep 2013 15:48:35 -0400 (GMT-04:00)
In working through the tutorial for ns3 (see http://www.nsnam.org/docs/release/3.14/tutorial/singlehtml/index.html ) I've created two simple pcap files.  When I try to look at them using wireshark, I get a signal 11 (segmentation fault). I've done a backtrace and the last function call is tvb_get_guint8 from tvbuff.c. Apparently, fast_ensure_contiguous() returns NULL, which then gets dereferenced.  The particularly strage part is that if I use the installed wireshark (that is, the one I just built and installed at /usr/local/bin/wireshark) I get this fault, but if I run it from the build directory, it works just fine.  I've configured with --enable-setcap-install and I"m running on Fedora 19 if that matters.

I'm using the very latest trunk build:

wireshark 1.11.0 (SVN Rev 51971 from /trunk)

Copyright 1998-2013 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 3.8.4, with Cairo 1.12.14, with Pango 1.34.1, with
GLib 2.36.3, with libpcap, with libz 1.2.7, with POSIX capabilities (Linux),
without libnl, without SMI, without c-ares, without ADNS, with Lua 5.1, without
Python, with GnuTLS 3.1.11, with Gcrypt 1.5.3, with MIT Kerberos, with GeoIP,
with PortAudio V19-devel (built May  4 2013 13:59:07), with AirPcap.

Running on Linux 3.10.10-200.fc19.x86_64, with locale en_US.utf8, with libpcap
version 1.4.0, with libz 1.2.7, GnuTLS 3.1.11, Gcrypt 1.5.3, without AirPcap.
       Intel(R) Core(TM) i5-2540M CPU @ 2.60GHz

Built using gcc 4.8.1 20130603 (Red Hat 4.8.1-1).

Ed