[Wireshark-bugs] [Bug 14966] Wireshark dies in dissect_coap

2018-07-11 Thread bugzilla-daemon 
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14966

--- Comment #1 from Alexis La Goutte  ---
Crash also for me :

hread 0 Crashed:: Dispatch queue: com.apple.main-thread
0   libwireshark.0.0.0.dylib0x000101e011af dissect_coap + 143
(packet-coap.c:1014)
1   libwireshark.0.0.0.dylib0x000102a98296
call_dissector_through_handle + 102 (packet.c:692)
2   libwireshark.0.0.0.dylib0x000102a98c1e call_dissector_work
+ 270 (packet.c:777)
3   libwireshark.0.0.0.dylib0x000102a993d9 dissector_try_uint +
105 (packet.c:1360)
4   libwireshark.0.0.0.dylib0x000102514771 decode_udp_ports +
657 (packet-udp.c:670)
5   libwireshark.0.0.0.dylib0x00010251553c dissect + 3004
(packet-udp.c:953)
6   libwireshark.0.0.0.dylib0x000102513ae9 dissect_udp + 25
(packet-udp.c:1133)
7   libwireshark.0.0.0.dylib0x000102a98296
call_dissector_through_handle + 102 (packet.c:692)
8   libwireshark.0.0.0.dylib0x000102a98c1e call_dissector_work
+ 270 (packet.c:777)
9   libwireshark.0.0.0.dylib0x000102a99280
dissector_try_uint_new + 112 (packet.c:1360)
10  libwireshark.0.0.0.dylib0x000102094c88 ip_try_dissect + 104
(packet-ip.c:1831)
11  libwireshark.0.0.0.dylib0x0001020922ac dissect_ip_v4 + 5564
(packet-ip.c:2287)
12  libwireshark.0.0.0.dylib0x000102a98296
call_dissector_through_handle + 102 (packet.c:692)
13  libwireshark.0.0.0.dylib0x000102a98c1e call_dissector_work
+ 270 (packet.c:777)
14  libwireshark.0.0.0.dylib0x000102a993d9 dissector_try_uint +
105 (packet.c:1360)
15  libwireshark.0.0.0.dylib0x000101f1df51 dissect_ethertype +
353 (packet-ethertype.c:260)
16  libwireshark.0.0.0.dylib0x000102a98296
call_dissector_through_handle + 102 (packet.c:692)
17  libwireshark.0.0.0.dylib0x000102a98c1e call_dissector_work
+ 270 (packet.c:777)
18  libwireshark.0.0.0.dylib0x000102a98fe2
call_dissector_with_data + 50 (packet.c:3103)
19  libwireshark.0.0.0.dylib0x000101f1d4fa dissect_eth_common +
3066 (packet-eth.c:526)
20  libwireshark.0.0.0.dylib0x000101f1c685 dissect_eth + 373
(packet-eth.c:802)
21  libwireshark.0.0.0.dylib0x000102a98296
call_dissector_through_handle + 102 (packet.c:692)
22  libwireshark.0.0.0.dylib0x000102a98c1e call_dissector_work
+ 270 (packet.c:777)
23  libwireshark.0.0.0.dylib0x000102a99280
dissector_try_uint_new + 112 (packet.c:1360)
24  libwireshark.0.0.0.dylib0x000101f5213f dissect_frame + 3439
(packet-frame.c:579)
25  libwireshark.0.0.0.dylib0x000102a98296
call_dissector_through_handle + 102 (packet.c:692)
26  libwireshark.0.0.0.dylib0x000102a98c1e call_dissector_work
+ 270 (packet.c:777)
27  libwireshark.0.0.0.dylib0x000102a98fe2
call_dissector_with_data + 50 (packet.c:3103)
28  libwireshark.0.0.0.dylib0x000102a9b935 dissect_record + 901
(packet.c:568)
29  libwireshark.0.0.0.dylib0x000102a8dc09 epan_dissect_run +
73 (epan.c:532)
30  org.wireshark.Wireshark 0x00010113818f
PacketListRecord::dissect(_capture_file*, bool) + 461
(packet_list_record.cpp:178)
31  org.wireshark.Wireshark 0x000101138363
PacketListRecord::columnString(_capture_file*, int, bool) + 179
(packet_list_record.cpp:71)
32  org.wireshark.Wireshark 0x000101132648
PacketListModel::ensureRowColorized(int) + 78 (qbytearray.h:427)
33  org.wireshark.Wireshark 0x0001011327b8
PacketListModel::dissectIdle(bool) + 86 (packet_list_model.cpp:654)
34  org.wireshark.Wireshark 0x00010118eb8c
PacketListModel::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) +
488 (moc_packet_list_model.cpp:146)
35  QtCore  0x000108b63b6f
QMetaObject::activate(QObject*, int, int, void**) + 1871
36  QtCore  0x000108b6a462
QSingleShotTimer::timerEvent(QTimerEvent*) + 50
37  QtCore  0x000108b5c9a3
QObject::event(QEvent*) + 51
38  QtWidgets   0x000107d8bffc
QApplicationPrivate::notify_helper(QObject*, QEvent*) + 300
39  QtWidgets   0x000107d8eabb
QApplication::notify(QObject*, QEvent*) + 6187
40  QtCore  0x000108b2f932
QCoreApplication::notifyInternal(QObject*, QEvent*) + 114
41  QtCore  0x000108b86196
QTimerInfoList::activateTimers() + 1302
42  libqcocoa.dylib 0x000109e9e855
QCocoaEventDispatcherPrivate::activateTimersSourceCallback(void*) + 21
43  com.apple.CoreFoundation0x7fff3fe25a61
__CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
44  com.apple.CoreFoundation

[Wireshark-bugs] [Bug 14966] Wireshark dies in dissect_coap

2018-07-11 Thread bugzilla-daemon 
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14966

Alexis La Goutte  changed:

   What|Removed |Added

 Status|UNCONFIRMED |CONFIRMED
 CC||alexis.lagou...@gmail.com
 Ever confirmed|0   |1

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14966] New: Wireshark dies in dissect_coap

2018-07-11 Thread bugzilla-daemon 
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14966

Bug ID: 14966
   Summary: Wireshark dies in dissect_coap
   Product: Wireshark
   Version: 2.6.1
  Hardware: x86-64
OS: macOS 10.13
Status: UNCONFIRMED
  Severity: Major
  Priority: Low
 Component: Qt UI
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: bill.nickl...@pnnl.gov
  Target Milestone: ---

Created attachment 16487
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=16487=edit
Synthetic pcap file that reliably crashes Wireshark

Build Information:
Wireshark 2.6.1 (v2.6.1-0-g860a78b3)

Compiled (64-bit) with Qt 5.3.2, with libpcap, without POSIX capabilities, with
GLib 2.36.0, with zlib 1.2.5, with SMI 0.4.8, with c-ares 1.12.0, with Lua
5.2.4, with GnuTLS 3.4.17, with Gcrypt 1.7.7, with MIT Kerberos, with MaxMind
DB
resolver, with nghttp2 1.21.0, with LZ4, with Snappy, with libxml2 2.9.4, with
QtMultimedia, with SBC, with SpanDSP, with bcg729.

Running on Mac OS X 10.13.5, build 17F77 (Darwin 17.6.0), with Intel(R)
Core(TM) i7-3770 CPU @ 3.40GHz (with SSE4.2), with 16384 MB of physical memory,
with locale C, with libpcap version 1.8.1 -- Apple version 79.20.1, with GnuTLS
3.4.17, with Gcrypt 1.7.7, with zlib 1.2.11, binary plugins supported (0
loaded).

Built using llvm-gcc 4.2.1 (Based on Apple Inc. build 5658) (LLVM build
2336.9.00).

--
Wireshark reliably dies in dissect_coap when trying to open the attached .pcap
file.  The attached file was created with the following trafgen invocation on
one virtual machine, and captured on a second virtual machine using tcpdump.

trafgen invocation:

trafgen -o ens192 --cpus 1 -n 8192 -t 1ms '{ 0x01, 0x00, 0x5e, 0x10, 0x01,
0x14, ipv4(da=230.16.1.20), udp(sp=666,dp=dinc(0,65535)), fill(0x00,128) }'

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14965] New: Follow stream output reversed

2018-07-11 Thread bugzilla-daemon 
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14965

Bug ID: 14965
   Summary: Follow stream output reversed
   Product: Wireshark
   Version: Git
  Hardware: x86
OS: OS X 10.9
Status: UNCONFIRMED
  Severity: Major
  Priority: Low
 Component: TShark
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: t...@qacafe.com
  Target Milestone: ---

Created attachment 16486
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=16486=edit
DNS Lookup

Build Information:
TShark (Wireshark) 2.6.2rc0-158-gbe503716 (v2.6.2rc0-158-gbe503716)

Copyright 1998-2018 Gerald Combs  and contributors.
License GPLv2+: GNU GPL version 2 or later

This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with libpcap, without POSIX capabilities, with GLib 2.36.0,
with zlib 1.2.5, with SMI 0.4.8, with c-ares 1.12.0, with Lua 5.2.4, with
GnuTLS
3.4.17, with Gcrypt 1.7.7, with MIT Kerberos, with MaxMind DB resolver, with
nghttp2 1.21.0, with LZ4, with Snappy, with libxml2 2.9.4.

Running on Mac OS X 10.9.5, build 13F34 (Darwin 13.4.0), with   Intel(R)
Core(TM) i7-3615QM CPU @ 2.30GHz (with SSE4.2), with 16384 MB of physical
memory, with locale en_US.UTF-8, with libpcap version 1.3.0 - Apple version 41,
with GnuTLS 3.4.17, with Gcrypt 1.7.7, with zlib 1.2.5, binary plugins
supported
(13 loaded).

Built using llvm-gcc 4.2.1 (Based on Apple Inc. build 5658) (LLVM build
2336.9.00).
--
It looks like the follow stream output in tshark has flipped with the latest
automated build. On OSX I downloaded version 2.6.2rc0-158-gbe503716. When
printing out the UDP stream for a DNS lookup the answer is shown before the
query

# tshark -q -z follow,udp,hex,0 -Y 'udp.stream eq 0' -c 5000 -r
~/dns_lookup.pcapng

===
Follow: udp,hex
Filter: udp.stream eq 0
Node 0: 172.16.1.174:59365
Node 1: 172.16.1.5:53
  63 54 81 80 00 01 00 0b  00 04 00 00 06 67 6f 6f  cT..
.goo
0010  67 6c 65 03 63 6f 6d 00  00 01 00 01 c0 0c 00 01  gle.com.

0020  00 01 00 00 00 29 00 04  4a 7d e2 41 c0 0c 00 01  .)..
J}.A
0030  00 01 00 00 00 29 00 04  4a 7d e2 42 c0 0c 00 01  .)..
J}.B
0040  00 01 00 00 00 29 00 04  4a 7d e2 43 c0 0c 00 01  .)..
J}.C
0050  00 01 00 00 00 29 00 04  4a 7d e2 44 c0 0c 00 01  .)..
J}.D
0060  00 01 00 00 00 29 00 04  4a 7d e2 45 c0 0c 00 01  .)..
J}.E
0070  00 01 00 00 00 29 00 04  4a 7d e2 46 c0 0c 00 01  .)..
J}.F
0080  00 01 00 00 00 29 00 04  4a 7d e2 47 c0 0c 00 01  .)..
J}.G
0090  00 01 00 00 00 29 00 04  4a 7d e2 48 c0 0c 00 01  .)..
J}.H
00A0  00 01 00 00 00 29 00 04  4a 7d e2 49 c0 0c 00 01  .)..
J}.I
00B0  00 01 00 00 00 29 00 04  4a 7d e2 4e c0 0c 00 01  .)..
J}.N
00C0  00 01 00 00 00 29 00 04  4a 7d e2 40 c0 0c 00 02  .)..
J}.@
00D0  00 01 00 02 9e ad 00 06  03 6e 73 34 c0 0c c0 0c  
.ns4
00E0  00 02 00 01 00 02 9e ad  00 06 03 6e 73 32 c0 0c  
...ns2..
00F0  c0 0c 00 02 00 01 00 02  9e ad 00 06 03 6e 73 31  
.ns1
0100  c0 0c c0 0c 00 02 00 01  00 02 9e ad 00 06 03 6e  
...n
0110  73 33 c0 0c   s3..
  63 54 01 00 00 01 00 00  00 00 00 00 06 67 6f 6f  cT.. .goo
0010  67 6c 65 03 63 6f 6d 00  00 01 00 01  gle.com. 
===

In version 2.6.1 this output is reversed. It also looks like this is happening
for following TCP streams as well.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14957] Buildbot crash output: fuzz-2018-07-08-31287.pcap

2018-07-11 Thread bugzilla-daemon 
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14957

--- Comment #3 from Peter Wu  ---
*** Bug 14959 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14959] Buildbot crash output: fuzz-2018-07-08-21310.pcap

2018-07-11 Thread bugzilla-daemon 
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14959

Peter Wu  changed:

   What|Removed |Added

 CC||pe...@lekensteyn.nl
 Status|CONFIRMED   |RESOLVED
 Resolution|--- |DUPLICATE

--- Comment #1 from Peter Wu  ---


*** This bug has been marked as a duplicate of bug 14957 ***

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14933] Duplicate PDU during C Arrays Output Export

2018-07-11 Thread bugzilla-daemon 
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14933

Peter Wu  changed:

   What|Removed |Added

 Resolution|--- |FIXED
 Status|CONFIRMED   |RESOLVED

--- Comment #7 from Peter Wu  ---
Confirmed that the "ASCII" output mode was also broken with
v2.6.2rc0-157-g6456cce1f0 and that the backported patch fixes it.

Fixed in:
v2.9.0rc0-1207-g16953695d7
v2.6.2rc0-158-gbe50371666

It also affects 2.2 and 2.4, but a backport to master-2.4 has conflicts, so I
did not bother.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14933] Duplicate PDU during C Arrays Output Export

2018-07-11 Thread bugzilla-daemon 
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14933

--- Comment #6 from Gerrit Code Review  ---
Change 28684 merged by Peter Wu:
Qt: make "Save As" in Follow Streams usable

https://code.wireshark.org/review/28684

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14933] Duplicate PDU during C Arrays Output Export

2018-07-11 Thread bugzilla-daemon 
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14933

--- Comment #5 from Gerrit Code Review  ---
Change 28684 had a related patch set uploaded by Peter Wu:
Qt: make "Save As" in Follow Streams usable

https://code.wireshark.org/review/28684

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14933] Duplicate PDU during C Arrays Output Export

2018-07-11 Thread bugzilla-daemon 
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14933

--- Comment #4 from Gerrit Code Review  ---
Change 28663 merged by Peter Wu:
Qt: make "Save As" in Follow Streams usable

https://code.wireshark.org/review/28663

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14645] List of remote interfaces isn't usable anymore

2018-07-11 Thread bugzilla-daemon 
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14645

lukasz.klib...@kontel.pl changed:

   What|Removed |Added

 Status|UNCONFIRMED |CONFIRMED
 Ever confirmed|0   |1

--- Comment #2 from lukasz.klib...@kontel.pl ---
*** This bug has been confirmed by popular vote. ***

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14934] Feature in tshark to export PDU as C arrays

2018-07-11 Thread bugzilla-daemon 
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14934

--- Comment #2 from Pascal Quantin  ---
Hi Sujit,

no one has started working on it, otherwise you would have seen an update in
Bugzilla.

Best regards,
Pascal.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14934] Feature in tshark to export PDU as C arrays

2018-07-11 Thread bugzilla-daemon 
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14934

--- Comment #1 from Sujit Ghosal  ---
Any tentative updates on this?

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe