Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 145974 - net-analyzer/wireshark-0.99.3 abnormally terminates after 802.3 packet capture
Summary: net-analyzer/wireshark-0.99.3 abnormally terminates after 802.3 packet capture
Status: RESOLVED DUPLICATE of bug 133092
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal major (vote)
Assignee: Gentoo Netmon project
URL: http://dev.gentoo.org/~dragonheart/pc...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-09-02 04:08 UTC by Eugeniy Khabarov aka ShadOS
Modified: 2006-11-12 03:33 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
wireshark-except-double-free.diff (wireshark-except-double-free.diff,664 bytes, patch)
2006-11-11 06:14 UTC, Frederic Heem
Details | Diff
wireshark-except-double-free.diff (wireshark-except-double-free.diff,664 bytes, patch)
2006-11-11 06:20 UTC, Frederic Heem
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Eugeniy Khabarov aka ShadOS 2006-09-02 04:08:02 UTC
emerge --info
Portage 2.1.1_rc1-r2 (default-linux/x86/2006.0, gcc-4.1.1/vanilla, glibc-2.4-r3, 2.6.17-gentoo-r5 i686)
=================================================================
System uname: 2.6.17-gentoo-r5 i686 AMD Athlon(tm) XP 1500+
Gentoo Base System version 1.12.2
Last Sync: Fri, 01 Sep 2006 01:54:01 +0000
distcc 2.18.3 i586-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
ccache version 2.4 [disabled]
app-admin/eselect-compiler: 2.0.0_rc2-r1
dev-lang/python:     2.4.3-r3
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     2.4-r2
dev-util/confcache:  [Not Present]
sys-apps/sandbox:    1.2.18.1
sys-devel/autoconf:  2.13, 2.60
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2
sys-devel/binutils:  2.17
sys-devel/gcc-config: 1.3.13-r3
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.4.19-r1, 2.6.17
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CBUILD="i586-pc-linux-gnu"
CFLAGS="-march=athlon-xp -O3 -fexceptions -funroll-loops -pipe -fstack-protector-all"
CHOST="i586-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/etc /usr/lib/fax /usr/share/X11/xkb /usr/share/config /var/lib/postgresql /var/spool/fax/etc"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/eselect/compiler /etc/gconf /etc/java-config/vms/ /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-march=athlon-xp -O3 -fexceptions -funroll-loops -pipe -fstack-protector-all"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks metadata-transfer sandbox sfperms strict"
GENTOO_MIRRORS="ftp://ftp.gtlib.cc.gatech.edu/pub/gentoo http://open-systems.ufl.edu/mirrors/gentoo http://www.gtlib.cc.gatech.edu/pub/gentoo http://adelie.polymtl.ca/ ftp://gentoo.netnitco.net/pub/mirrors/gentoo/source/"
LANG="ru_RU.UTF-8"
LC_ALL=""
LINGUAS="ru"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 3dnow X Xaw3d alsa amr apache2 bash-completion binary-drivers bind-mysql bitmap-fonts bootsplash buttons bzip2 ccache clamav cli cracklib crypt cups dlloader dri elibc_glibc esd ethereal expat extensions fam firefox fortran ftp fuse gif gkrellm glibc-omitfp gnome gpm gstreamer gtk gtk-oss gtk2 h323 hardened hardenedphp hddtemp imlib imlib2 input_devices_evdev input_devices_keyboard input_devices_mouse ipv6 isdnlog jabber java jpeg kernel_linux kqemu libg++ libwww linguas_ru mad mikmod mmx mp3 mpeg mppe-mppc mudflap mysql ncurses nls nptl nptlonly objc objc++ ogg opengl openssl opera pam paste64 pcap pcre pdf perl png pppd prelude python qt3 qt4 readline reflection samba sdl session sftp sguil sndfile snmp snortsam socks5 spell spl sse ssl syslog tcp tcpd threads toolbar truetype truetype-fonts type1-fonts udev unicode userland_GNU userlocales video_cards_radeon virus-scan vnc vorbis wxwindows xchat xfs xml xmms xorg xprint xscreensaver xv zip zlib"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LDFLAGS, MAKEOPTS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 1 Eugeniy Khabarov aka ShadOS 2006-09-02 04:09:31 UTC
*** glibc detected *** wireshark: double free or corruption (out): 0xbff4ece8 ***
======= Backtrace: =========
/lib/libc.so.6[0xb5f86de1]
/lib/libc.so.6(__libc_free+0x89)[0xb5f878b9]
/usr/lib/libwireshark.so.0(except_free+0x2e)[0xb6d5bc8e]
/usr/lib/libwireshark.so.0(dissect_802_3+0x190)[0xb713b550]
/usr/lib/libwireshark.so.0[0xb701a400]
/usr/lib/libwireshark.so.0[0xb701a65f]
/usr/lib/libwireshark.so.0[0xb6d61405]
/usr/lib/libwireshark.so.0(dissector_try_port+0x81)[0xb6d62541]
/usr/lib/libwireshark.so.0[0xb704b6ae]
/usr/lib/libwireshark.so.0[0xb6d61405]
/usr/lib/libwireshark.so.0(call_dissector+0x49)[0xb6d61a89]
/usr/lib/libwireshark.so.0(dissect_packet+0x403)[0xb6d61f73]
/usr/lib/libwireshark.so.0(epan_dissect_run+0x60)[0xb6d5b710]
wireshark[0x806d9ce]
wireshark[0x806dc66]
wireshark(cf_read+0x1e3)[0x806e183]
wireshark(capture_input_closed+0x1ba)[0x8069c8a]
wireshark[0x806bf01]
wireshark[0x8085f2f]
/usr/lib/libgdk-x11-2.0.so.0[0xb63b3bc8]
/usr/lib/libglib-2.0.so.0[0xb61a9aed]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x179)[0xb617bac9]
/usr/lib/libglib-2.0.so.0[0xb617c308]
/usr/lib/libglib-2.0.so.0(g_main_loop_run+0x1a7)[0xb617c6a7]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xc1)[0xb65bd021]
wireshark(main+0x1d4f)[0x808d89f]
/lib/libc.so.6(__libc_start_main+0xe6)[0xb5f39886]
wireshark(register_all_protocol_handoffs+0xcb5)[0x8061171]
======= Memory map: ========
08048000-081a4000 r-xp 00000000 03:01 30427466   /usr/bin/wireshark
081a4000-081b4000 rw-p 0015c000 03:01 30427466   /usr/bin/wireshark
081b4000-0890a000 rw-p 081b4000 00:00 0          [heap]
b2f00000-b2f21000 rw-p b2f00000 00:00 0
b2f21000-b3000000 ---p b2f21000 00:00 0
b30b5000-b30c0000 r-xp 00000000 03:01 33809600   /usr/lib/gcc/i586-pc-linux-gnu/ 4.1.1/libgcc_s.so.1
b30c0000-b30c1000 rw-p 0000a000 03:01 33809600   /usr/lib/gcc/i586-pc-linux-gnu/ 4.1.1/libgcc_s.so.1
b30d5000-b30ef000 r--p 00000000 03:01 29463271   /usr/share/fonts/corefonts/anda lemo.ttf
b30ef000-b30fc000 r--p 00000000 03:01 21106543   /usr/share/fonts/ttf-bitstream- vera/VeraMono.ttf
b30fc000-b30fd000 rw-p b30fc000 00:00 0
b30fd000-b30fe000 ---p b30fd000 00:00 0
b30fe000-b3afb000 rw-p b30fe000 00:00 0
b3afb000-b3afc000 ---p b3afb000 00:00 0
b3aff000-b3b00000 rw-p b3aff000 00:00 0
b3b00000-b3b01000 ---p b3b00000 00:00 0
b3b01000-b44fe000 rw-p b3b01000 00:00 0
b44fe000-b44ff000 ---p b44fe000 00:00 0
b44ff000-b47c6000 r--p 00000000 03:01 21705483   /usr/share/icons/hicolor/icon-t heme.cache
b47c6000-b514c000 r--p 00000000 03:01 9431652    /usr/share/icons/gnome/icon-the me.cache
b514c000-b56c1000 r--p 00000000 03:01 5223728    /usr/share/icons/Rodent/icon-th eme.cache
b56c1000-b56e4000 r--p 00000000 03:01 29479248   /usr/share/fonts/corefonts/verd ana.ttf
b56e4000-b5744000 rw-s 00000000 00:07 5931034    /SYSV00000000 (deleted)
b5744000-b574a000 r--p 00000000 03:01 63433693   /usr/share/locale/ru/LC_MESSAGE S/glib20.mo
b574a000-b5753000 r-xp 00000000 03:01 12738748   /usr/lib/wireshark/plugins/0.99 .3/v5ua.so
b5753000-b5756000 rw-p 00008000 03:01 12738748   /usr/lib/wireshark/plugins/0.99 .3/v5ua.so
b5756000-b5758000 r-xp 00000000 03:01 12738746   /usr/lib/wireshark/plugins/0.99 .3/stats_tree.so
b5758000-b5759000 rw-p 00001000 03:01 12738746   /usr/lib/wireshark/plugins/0.99 .3/stats_tree.so
b5759000-b5761000 r-xp 00000000 03:01 12738744   /usr/lib/wireshark/plugins/0.99 .3/sbus.so
b5761000-b5763000 rw-p 00007000 03:01 12738744   /usr/lib/wireshark/plugins/0.99 .3/sbus.so
b5763000-b5768000 r-xp 00000000 03:01 12738740   /usr/lib/wireshark/plugins/0.99 .3/rtnet.so
b5768000-b576a000 rw-p 00004000 03:01 12738740   /usr/lib/wireshark/plugins/0.99 .3/rtnet.so
b576a000-b579b000 rw-p b59e8000 00:00 0
b579b000-b579f000 r-xp 00000000 03:01 12738727   /usr/lib/wireshark/plugins/0.99 .3/opsi.so
b579f000-b57a1000 rw-p 00004000 03:01 12738727   /usr/lib/wireshark/plugins/0.99 .3/opsi.so
b57a1000-b57aa000 r-xp 00000000 03:01 12738725   /usr/lib/wireshark/plugins/0.99 .3/mgcp.so
b57aa000-b57ac000 rw-p 00009000 03:01 12738725   /usr/lib/wireshark/plugins/0.99 .3/mgcp.so
b57ac000-b57bb000 r-xp 00000000 03:01 12738723   /usr/lib/wireshark/plugins/0.99 .3/megaco.so
b57bb000-b57bc000 rw-p 0000f000 03:01 12738723   /usr/lib/wireshark/plugins/0.99 .3/megaco.so
b57bc000-b57d5000 r-xp 00000000 03:01 12738721   /usr/lib/wireshark/plugins/0.99 .3/mate.so
b57d5000-b57d6000 rw-p 00019000 03:01 12738721   /usr/lib/wireshark/plugins/0.99 .3/mate.so
b57d6000-b57e8000 rw-p b57d6000 00:00 0
b57e8000-b57ed000 r-xp 00000000 03:01 12738719   /usr/lib/wireshark/plugins/0.99 .3/lwres.so
b57ed000-b57ee000 rw-p 00005000 03:01 12738719   /usr/lib/wireshark/plugins/0.99 .3/lwres.so
b57ee000-b57f8000 r-xp 00000000 03:01 12738717   /usr/lib/wireshark/plugins/0.99 .3/irda.so
b57f8000-b57fa000 rw-p 0000a000 03:01 12738717   /usr/lib/wireshark/plugins/0.99 .3/irda.so
b57fa000-b57fc000 rw-p b57fa000 00:00 0
b57fc000-b5804000 r-xp 00000000 03:01 12738715   /usr/lib/wireshark/plugins/0.99 .3/h223.so
b5804000-b5805000 rw-p 00008000 03:01 12738715   /usr/lib/wireshark/plugins/0.99 .3/h223.so
b5805000-b5814000 r-xp 00000000 03:01 12738713   /usr/lib/wireshark/plugins/0.99 .3/gryphon.so
b5814000-b5816000 rw-p 0000e000 03:01 12738713   /usr/lib/wireshark/plugins/0.99 .3/gryphon.so
b5816000-b5964000 r-xp 00000000 03:01 12738711   /usr/lib/wireshark/plugins/0.99 .3/parlay.so
b5964000-b5966000 rw-p 0014e000 03:01 12738711   /usr/lib/wireshark/plugins/Аварийный останов
Comment 2 Daniel Black (RETIRED) gentoo-dev 2006-11-01 02:15:18 UTC
couldn't reproduce on 0.99.4 - can you please confirm?

Running "valgrind wireshark" will give a good analysis of memory problems (even if it takes ages).

Mine showed:
==5365== ERROR SUMMARY: 59 errors from 7 contexts (suppressed: 318 from 1)
==5365== malloc/free: in use at exit: 6,184,177 bytes in 78,842 blocks.
==5365== malloc/free: 356,789 allocs, 277,947 frees, 49,654,978 bytes allocated.
==5365== For counts of detected errors, rerun with: -v
==5365== searching for pointers to 78,842 not-freed blocks.
==5365== checked 29,994,832 bytes.
==5365==
==5365== LEAK SUMMARY:
==5365==    definitely lost: 49,647 bytes in 2,416 blocks.
==5365==      possibly lost: 975,832 bytes in 3,009 blocks.
==5365==    still reachable: 5,158,698 bytes in 73,417 blocks.
==5365==         suppressed: 0 bytes in 0 blocks.
==5365== Use --leak-check=full to see details of leaked memory.


Not great but at least it didn't crash (this was a simple load up, capture and exit).
Comment 3 Daniel Black (RETIRED) gentoo-dev 2006-11-04 04:37:09 UTC
# gdb /var/tmp/portage/net-analyzer/wireshark-0.99.4/work/wireshark-0.99.4/.libs/wireshark
GNU gdb 6.5
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i686-pc-linux-gnu"...Using host libthread_db library "/lib/libthread_db.so.1".

(gdb) run
Starting program: /var/tmp/portage/net-analyzer/wireshark-0.99.4/work/wireshark-0.99.4/.libs/wireshark
Failed to read a valid object file image from memory.
[Thread debugging using libthread_db enabled]
[New Thread -1244846400 (LWP 948)]

Program received signal SIGINT, Interrupt.
[Switching to Thread -1244846400 (LWP 948)]
0xb7fb6410 in ?? ()
(gdb) bg
Undefined command: "bg".  Try "help".
(gdb) bt
#0  0xb7fb6410 in ?? ()
#1  0xbfbfb878 in ?? ()
#2  0x000002ee in ?? ()
#3  0x00000001 in ?? ()
#4  0xb61cdb79 in poll () from /lib/libc.so.6
#5  0xb6381362 in g_main_context_acquire () from /usr/lib/libglib-2.0.so.0
#6  0x08234b68 in ?? ()
#7  0x00000001 in ?? ()
#8  0x000002ee in ?? ()
#9  0x08234b68 in ?? ()
#10 0x00000001 in ?? ()
#11 0x00000000 in ?? ()
(gdb) cont
Continuing.
*** glibc detected *** /var/tmp/portage/net-analyzer/wireshark-0.99.4/work/wireshark-0.99.4/.libs/wireshark: free(): invalid pointer: 0xbfbf8ee8 ***
======= Backtrace: =========
/lib/libc.so.6[0xb617e5af]
/lib/libc.so.6(__libc_free+0x8a)[0xb617f03e]
/usr/lib/libwireshark.so.0(except_free+0x2e)[0xb6e58ffe]
/usr/lib/libwireshark.so.0(dissect_802_3+0x18f)[0xb7207277]
/usr/lib/libwireshark.so.0[0xb70fe809]
/usr/lib/libwireshark.so.0[0xb70fea60]
/usr/lib/libwireshark.so.0[0xb6e5dd2b]
/usr/lib/libwireshark.so.0[0xb6e5e1c5]
/usr/lib/libwireshark.so.0(dissector_try_port+0x6d)[0xb6e5ef4e]
/usr/lib/libwireshark.so.0[0xb712c154]
/usr/lib/libwireshark.so.0[0xb6e5dd2b]
/usr/lib/libwireshark.so.0[0xb6e5e1c5]
/usr/lib/libwireshark.so.0(call_dissector+0x49)[0xb6e5e4f2]
/usr/lib/libwireshark.so.0(dissect_packet+0x407)[0xb6e5e9d3]
/usr/lib/libwireshark.so.0(epan_dissect_run+0x60)[0xb6e58acc]
/var/tmp/portage/net-analyzer/wireshark-0.99.4/work/wireshark-0.99.4/.libs/wireshark[0x806d609]
/var/tmp/portage/net-analyzer/wireshark-0.99.4/work/wireshark-0.99.4/.libs/wireshark[0x806d8c4]
/var/tmp/portage/net-analyzer/wireshark-0.99.4/work/wireshark-0.99.4/.libs/wireshark(cf_read+0x20c)[0x806dcb3]
/var/tmp/portage/net-analyzer/wireshark-0.99.4/work/wireshark-0.99.4/.libs/wireshark(capture_input_closed+0x1d2)[0x80692af]
/var/tmp/portage/net-analyzer/wireshark-0.99.4/work/wireshark-0.99.4/.libs/wireshark[0x806b855]
/var/tmp/portage/net-analyzer/wireshark-0.99.4/work/wireshark-0.99.4/.libs/wireshark[0x8082e2d]
/usr/lib/libgdk-x11-2.0.so.0[0xb654fc61]
/usr/lib/libglib-2.0.so.0[0xb63a8cdd]
======= Memory map: ========
08048000-0818a000 r-xp 00000000 03:03 33927      /var/tmp/portage/net-analyzer/wireshark-0.99.4/work/wireshark-0.99.4/.libs/wireshark
0818a000-0819c000 rw-p 00141000 03:03 33927      /var/tmp/portage/net-analyzer/wireshark-0.99.4/work/wireshark-0.99.4/.libs/wireshark
0819c000-087ba000 rw-p 0819c000 00:00 0          [heap]
b3b00000-b3b21000 rw-p b3b00000 00:00 0
b3b21000-b3c00000 ---p b3b21000 00:00 0
b3c9e000-b3ca6000 r-xp 00000000 03:03 442669     /usr/lib/gcc/i686-pc-linux-gnu/3.4.6/libgcc_s.so.1
b3ca6000-b3ca7000 rw-p 00007000 03:03 442669     /usr/lib/gcc/i686-pc-linux-gnu/3.4.6/libgcc_s.so.1
b3cc5000-b3cc6000 rw-p b3cc5000 00:00 0
b3cc6000-b3cc7000 ---p b3cc6000 00:00 0
b3cc7000-b46c4000 rw-p b3cc7000 00:00 0
b46c4000-b46c5000 ---p b46c4000 00:00 0
b46c5000-b46c7000 rw-p b46c5000 00:00 0
b46c7000-b4ea3000 r--p 00000000 03:03 1046540    /usr/share/icons/gnome/icon-theme.cache
b4ea3000-b4f0e000 r--p 00000000 03:03 1095631    /usr/share/icons/hicolor/icon-theme.cache
b4f0e000-b4f6e000 rw-s 00000000 00:07 3145731    /SYSV00000000 (deleted)
b4f6e000-b4f6f000 rw-p b4f6e000 00:00 0
b4f6f000-b4f70000 ---p b4f6f000 00:00 0
b4f70000-b596d000 rw-p b4f70000 00:00 0
b596d000-b596e000 ---p b596d000 00:00 0
b596e000-b5976000 r-xp 00000000 03:03 199860     /usr/lib/wireshark/plugins/0.99.4/v5ua.so
b5976000-b5979000 rw-p 00007000 03:03 199860     /usr/lib/wireshark/plugins/0.99.4/v5ua.so
b5979000-b597b000 r-xp 00000000 03:03 199858     /usr/lib/wireshark/plugins/0.99.4/stats_tree.so
b597b000-b597c000 rw-p 00001000 03:03 199858     /usr/lib/wireshark/plugins/0.99.4/stats_tree.so
b597c000-b5983000 r-xp 00000000 03:03 199856     /usr/lib/wireshark/plugins/0.99.4/sbus.so
b5983000-b5985000 rw-p 00006000 03:03 199856     /usr/lib/wireshark/plugins/0.99.4/sbus.so
b5985000-b5987000 r-xp 00000000 03:03 199854     /usr/lib/wireshark/plugins/0.99.4/rudp.so
b5987000-b5988000 rw-p 00001000 03:03 199854     /usr/lib/wireshark/plugins/0.99.4/rudp.so
b5988000-b598d000 r-xp 00000000 03:03 199852     /usr/lib/wireshark/plugins/0.99.4/rtnet.so
b598d000-b598f000 rw-p 00004000 03:03 199852     /usr/lib/wireshark/plugins/0.99.4/rtnet.so
b598f000-b5991000 r-xp 00000000 03:03 199850     /usr/lib/wireshark/plugins/0.99.4/rlm.so
b5991000-b5992000 rw-p 00001000 03:03 199850     /usr/lib/wireshark/plugins/0.99.4/rlm.so
b5992000-b59ac000 r-xp 00000000 03:03 199848     /usr/lib/wireshark/plugins/0.99.4/profinet.so
b59ac000-b59b3000 rw-p 00019000 03:03 199848     /usr/lib/wireshark/plugins/0.99.4/profinet.so
b59b3000-b59b5000 r-xp 00000000 03:03 199846     /
Program received signal SIGABRT, Aborted.
0xb7fb6410 in ?? ()
Comment 4 Daniel Black (RETIRED) gentoo-dev 2006-11-04 04:38:23 UTC
(gdb) bt
#0  0xb7fb6410 in ?? ()
#1  0xbfbf85a0 in ?? ()
#2  0x00000006 in ?? ()
#3  0x000003b4 in ?? ()
#4  0xb6144b9d in raise () from /lib/libc.so.6
#5  0xb61462e9 in abort () from /lib/libc.so.6
#6  0xb6178903 in __fsetlocking () from /lib/libc.so.6
#7  0xb617e5af in malloc_usable_size () from /lib/libc.so.6
#8  0xb617f03e in free () from /lib/libc.so.6
#9  0xb6e58ffe in except_free () from /usr/lib/libwireshark.so.0
#10 0xb7207277 in dissect_802_3 () from /usr/lib/libwireshark.so.0
#11 0xb70fe809 in capture_eth () from /usr/lib/libwireshark.so.0
#12 0xb70fea60 in add_ethernet_trailer () from /usr/lib/libwireshark.so.0
#13 0xb6e5dd2b in final_registration_all_protocols () from /usr/lib/libwireshark.so.0
#14 0xb6e5e1c5 in final_registration_all_protocols () from /usr/lib/libwireshark.so.0
#15 0xb6e5ef4e in dissector_try_port () from /usr/lib/libwireshark.so.0
#16 0xb712c154 in show_exception () from /usr/lib/libwireshark.so.0
#17 0xb6e5dd2b in final_registration_all_protocols () from /usr/lib/libwireshark.so.0
#18 0xb6e5e1c5 in final_registration_all_protocols () from /usr/lib/libwireshark.so.0
#19 0xb6e5e4f2 in call_dissector () from /usr/lib/libwireshark.so.0
#20 0xb6e5e9d3 in dissect_packet () from /usr/lib/libwireshark.so.0
#21 0xb6e58acc in epan_dissect_run () from /usr/lib/libwireshark.so.0
#22 0x0806d609 in add_packet_to_packet_list (fdata=0x81b07d8, cf=0x81a06c0, pseudo_header=0x8763e84, buf=0x0, refilter=1) at file.c:831
#23 0x0806d8c4 in read_packet (cf=0x81a06c0, offset=100) at file.c:955
#24 0x0806dcb3 in cf_read (cf=0x81a06c0) at file.c:459
#25 0x080692af in capture_input_closed (capture_opts=0x81b0820) at capture.c:202
#26 0x0806b855 in sync_pipe_input_cb (source=9, user_data=0x81b0820) at capture_sync.c:649
#27 0x08082e2d in pipe_input_cb (data=0x819c39c, source=9, condition=GDK_INPUT_READ) at gui_utils.c:717
#28 0xb654fc61 in gdk_get_show_events () from /usr/lib/libgdk-x11-2.0.so.0
#29 0x0819c39c in icon_mask.6 ()
#30 0x00000009 in ?? ()
#31 0x00000001 in ?? ()
#32 0xb63e86b8 in ?? () from /usr/lib/libglib-2.0.so.0
#33 0x08756c20 in ?? ()
#34 0x087641f8 in ?? ()
#35 0xb654fbec in gdk_get_show_events () from /usr/lib/libgdk-x11-2.0.so.0
#36 0xb63a8cdd in g_vasprintf () from /usr/lib/libglib-2.0.so.0
#37 0x087656f0 in ?? ()
#38 0x00000010 in ?? ()
#39 0x087641f8 in ?? ()
#40 0xb63e86b8 in ?? () from /usr/lib/libglib-2.0.so.0
#41 0x00000000 in ?? ()
# wireshark --version
wireshark 0.99.4
Compiled with GTK+ 2.10.6, with GLib 2.12.4, with libpcap 0.9.5, with libz
1.2.3, with libpcre 6.6, with Net-SNMP 5.3.1, with ADNS, without Lua, with
GnuTLS 1.4.4, with Gcrypt 1.2.3, without Kerberos, without PortAudio, without
AirPcap.

Running on Linux 2.6.18-gentoo-r1, with libpcap version 0.9.5.

Built using gcc 3.4.6 (Gentoo 3.4.6-r2, HTB-3.4.4-1.00, ssp-3.4.6-1.0,
pie-8.7.9).
lapy ~ # emerge --info
Portage 2.1.2_rc1-r3 (default-linux/x86/2006.0, gcc-3.4.6, glibc-2.5-r0, 2.6.18-gentoo-r1 i686)
=================================================================
System uname: 2.6.18-gentoo-r1 i686 Intel(R) Celeron(R) CPU 2.40GHz
Gentoo Base System version 1.12.6

Was collecting tor traffic if that makes a diffence
Comment 5 Daniel Black (RETIRED) gentoo-dev 2006-11-04 05:34:32 UTC
running under valgring hinted at the 802_3 disector. Comfirmed by reloading the pcap without valgrinds assistant where it failed. PCAP comming to URL soon.

==9686== Invalid free() / delete / delete[]
==9686==    at 0x4020220: free (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
==9686==    by 0x43ACFFD: except_free (in /usr/lib/libwireshark.so.0.0.1)
==9686==    by 0x475B276: dissect_802_3 (in /usr/lib/libwireshark.so.0.0.1)
==9686==    by 0x4652808: (within /usr/lib/libwireshark.so.0.0.1)
==9686==    by 0x4652A5F: (within /usr/lib/libwireshark.so.0.0.1)
==9686==    by 0x43B1D2A: (within /usr/lib/libwireshark.so.0.0.1)
==9686==    by 0x43B21C4: (within /usr/lib/libwireshark.so.0.0.1)
==9686==    by 0x43B2F4D: dissector_try_port (in /usr/lib/libwireshark.so.0.0.1)
==9686==    by 0x4680153: (within /usr/lib/libwireshark.so.0.0.1)
==9686==    by 0x43B1D2A: (within /usr/lib/libwireshark.so.0.0.1)
==9686==    by 0x43B21C4: (within /usr/lib/libwireshark.so.0.0.1)
==9686==    by 0x43B24F1: call_dissector (in /usr/lib/libwireshark.so.0.0.1)
==9686==  Address 0xBEDD5AE8 is on thread 1's stack
00:30:39          Warn Dissector bug, protocol LLC, in packet 1: tvbuff.c:387: failed assertion "tvb && tvb->initialized"
00:30:41          Warn Dissector bug, protocol LLC, in packet 1: tvbuff.c:387: failed assertion "tvb && tvb->initialized"
00:30:45          Warn Dissector bug, protocol LLC, in packet 2: tvbuff.c:387: failed assertion "tvb && tvb->initialized"
00:30:45          Warn Dissector bug, protocol LLC, in packet 3: tvbuff.c:387: failed assertion "tvb && tvb->initialized"
Comment 6 Daniel Black (RETIRED) gentoo-dev 2006-11-04 05:54:34 UTC
Upstream:
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1202
Comment 7 Frederic Heem 2006-11-11 06:14:53 UTC
Created attachment 101677 [details, diff]
wireshark-except-double-free.diff

Set catcher->except_obj.except_dyndata to NULL after beeing freed
Comment 8 Frederic Heem 2006-11-11 06:17:23 UTC
http://bugs.gentoo.org/show_bug.cgi?id=133092 is a duplicate of this bug
Please try the attached patch. It sets catcher->except_obj.except_dyndata to NULL after beeing freed
Comment 9 Frederic Heem 2006-11-11 06:20:29 UTC
Created attachment 101678 [details, diff]
wireshark-except-double-free.diff

It sets catcher->except_obj.except_dyndata to NULL after beeing freed
Comment 10 sfp-a7x 2006-11-11 09:50:58 UTC
(In reply to comment #8)
> http://bugs.gentoo.org/show_bug.cgi?id=133092 is a duplicate of this bug
> Please try the attached patch. It sets catcher->except_obj.except_dyndata to
> NULL after beeing freed

This bug appears to be a duplicate of bug #133092, which has already been fully resolved as a flaw in the SSP patch to gcc.  The resolution was to turn off SSP when compiling Wireshark.  However, the ebuild has "filter-flags -fstack-protector", so SSP should already be turned off.  So, this may be unrelated to bug #133092.

See also http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1001
Comment 11 Daniel Black (RETIRED) gentoo-dev 2006-11-12 03:33:54 UTC

*** This bug has been marked as a duplicate of 133092 ***