[Wireshark-bugs] [Bug 14427] Crash on `ip address1 198.73.17.116` filter

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14427

--- Comment #10 from Guy Harris  ---
(In reply to Guy Harris from comment #9)
> (In reply to Jurko Gospodnetić from comment #0)
> > The original tried queries were constructed based on what Wireshark offered
> > in its auto-completion popups.
> 
> Then Wireshark shouldn't offer those in its auto-completion popups.  I'll
> file a bug.

Bug 14430 filed.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14427] Crash on `ip address1 198.73.17.116` filter

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14427

Guy Harris  changed:

   What|Removed |Added

   See Also||https://bugs.wireshark.org/
   ||bugzilla/show_bug.cgi?id=14
   ||430

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14427] Crash on `ip address1 198.73.17.116` filter

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14427

--- Comment #9 from Guy Harris  ---
(In reply to Jurko Gospodnetić from comment #0)
> The original tried queries were constructed based on what Wireshark offered
> in its auto-completion popups.

Then Wireshark shouldn't offer those in its auto-completion popups.  I'll file
a bug.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14427] Crash on `ip address1 198.73.17.116` filter

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14427

Guy Harris  changed:

   What|Removed |Added

   Hardware|x86-64  |All
 OS|Windows 10  |All

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14427] Crash on `ip address1 198.73.17.116` filter

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14427

--- Comment #8 from Guy Harris  ---
(In reply to Uli Heilmeier from comment #4)
> Yes, seems to be a libpcap issue.
> Crashes also with capture filter 'address1 X' or 'address2 X' or 'address3
> X' or 'address4 X' where X can be any digit.
> Doesn't crash with 'address1 X'

That's "doesn't crash with 'address1 X', where "X" is a syntactically-valid
host name but doesn't correspond to a known host.  If "X" were a valid host
name, i.e. one that libpcap can resolve, it *will* crash; if it's not, the
parse fails because the host name isn't valid, before it even gets to the point
where the crash occurs.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14427] Crash on `ip address1 198.73.17.116` filter

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14427

--- Comment #7 from Guy Harris  ---
I've checked a fix into the libpcap repository.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14427] Crash on `ip address1 198.73.17.116` filter

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14427

Guy Harris  changed:

   What|Removed |Added

 Resolution|--- |NOTOURBUG
 Status|CONFIRMED   |RESOLVED

--- Comment #6 from Guy Harris  ---
libpcap bug, still in the current tip of the master libpcap branch:

$ ./tcpdump --version
tcpdump version 4.10.0-PRE-GIT
libpcap version 1.9.0-PRE-GIT
OpenSSL 1.1.0e  16 Feb 2017
SMI-library: 0.4.8
$ ./tcpdump -i en0 -d ip address1 198.73.17.116
Abort trap: 6 (core dumped)

Please file a bug at

https://github.com/the-tcpdump-group/libpcap/issues

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14427] Crash on `ip address1 198.73.17.116` filter

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14427

--- Comment #5 from Uli Heilmeier  ---
(In reply to Uli Heilmeier from comment #4)

> Doesn't crash with 'address1 X'
I mean when X is a alphabetical character like 'A'.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14427] Crash on `ip address1 198.73.17.116` filter

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14427

--- Comment #4 from Uli Heilmeier  ---
Yes, seems to be a libpcap issue.
Crashes also with capture filter 'address1 X' or 'address2 X' or 'address3 X'
or 'address4 X' where X can be any digit.
Doesn't crash with 'address1 X'

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14427] Crash on `ip address1 198.73.17.116` filter

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14427

Stig Bjørlykke  changed:

   What|Removed |Added

 CC||s...@bjorlykke.org

--- Comment #3 from Stig Bjørlykke  ---
This seems to be a bug in libpcap, this test program also crashes:

#include 

int main (int argc, char *argv[])
{
struct bpf_program fcode;

pcap_t *pd = pcap_open_dead (DLT_EN10MB, 1);

if (pcap_compile (pd, , "ip address1 10.0.0.1", 1, 0)) {
printf ("Error: %s\n", pcap_geterr (pd));
} else {
printf ("Ok\n");
}
pcap_close (pd);

return 0;
}

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 14427] Crash on `ip address1 198.73.17.116` filter

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14427

--- Comment #2 from Uli Heilmeier  ---
Process:   Wireshark [71698]
Path: 
/Users/USER/Downloads/*/Wireshark.app/./Contents/MacOS/Wireshark
Identifier:org.wireshark.Wireshark
Version:   2.5.1-105-g048c4373 (2.5.1-105-g048c4373)
Code Type: X86-64 (Native)
Parent Process:bash [764]
Responsible:   Wireshark [71698]
User ID:   501

Date/Time: 2018-02-13 20:56:35.418 +0100
OS Version:Mac OS X 10.13.3 (17D47)
Report Version:12
Anonymous UUID:194A8059-000D-7C12-6751-6776AD47EEC5

Sleep/Wake UUID:   3DD87D6C-EB72-4872-8B8D-5D70184268AC

Time Awake Since Boot: 98000 seconds
Time Since Wake:   580 seconds

System Integrity Protection: enabled

Crashed Thread:7  QThread

Exception Type:EXC_CRASH (SIGABRT)
Exception Codes:   0x, 0x
Exception Note:EXC_CORPSE_NOTIFY

Application Specific Information:
abort() called

Thread 0:: Dispatch queue: com.apple.main-thread
0   QtCore  0x0001131ccf20 0x112f85000 +
2391840
1   QtCore  0x0001131c825b
QMetaObject::invokeMethod(QObject*, char const*, Qt::ConnectionType,
QGenericReturnArgument, QGenericArgument, QGenericArgument, QGenericArgument,
QGenericArgument, QGenericArgument, QGenericArgument, QGenericArgument,
QGenericArgument, QGenericArgument, QGenericArgument) + 155
2   QtCore  0x000113172765
QAbstractItemModel::endResetModel() + 309
3   QtWidgets   0x00010e68eff2 0x10e342000 +
3461106
4   QtCore  0x0001131f3b6f
QMetaObject::activate(QObject*, int, int, void**) + 1871
5   QtCore  0x00011317276d
QAbstractItemModel::endResetModel() + 317
6   org.wireshark.Wireshark 0x00010dafc8e8
CaptureFilterEdit::buildCompletionList(QString const&) + 542
7   org.wireshark.Wireshark 0x00010db8005f
SyntaxLineEdit::completionKeyPressEvent(QKeyEvent*) + 429
8   QtWidgets   0x00010e3a7bb6
QWidget::event(QEvent*) + 3974
9   QtWidgets   0x00010e496fb4
QLineEdit::event(QEvent*) + 660
10  org.wireshark.Wireshark 0x00010db80213
SyntaxLineEdit::event(QEvent*) + 61
11  QtWidgets   0x00010e45f129
QComboBox::keyPressEvent(QKeyEvent*) + 505
12  QtWidgets   0x00010e3a7bb6
QWidget::event(QEvent*) + 3974
13  QtWidgets   0x00010e45ec54
QComboBox::event(QEvent*) + 388
14  QtWidgets   0x00010e36effc
QApplicationPrivate::notify_helper(QObject*, QEvent*) + 300
15  QtWidgets   0x00010e370ce0
QApplication::notify(QObject*, QEvent*) + 2640
16  QtCore  0x0001131bf932
QCoreApplication::notifyInternal(QObject*, QEvent*) + 114
17  QtWidgets   0x00010e3c48b4 0x10e342000 + 534708
18  QtWidgets   0x00010e36effc
QApplicationPrivate::notify_helper(QObject*, QEvent*) + 300
19  QtWidgets   0x00010e371abb
QApplication::notify(QObject*, QEvent*) + 6187
20  QtCore  0x0001131bf932
QCoreApplication::notifyInternal(QObject*, QEvent*) + 114
21  QtGui   0x000112ad117e
QGuiApplicationPrivate::processKeyEvent(QWindowSystemInterfacePrivate::KeyEvent*)
+ 190
22  QtGui   0x000112acf9e3
QGuiApplicationPrivate::processWindowSystemEvent(QWindowSystemInterfacePrivate::WindowSystemEvent*)
+ 1267
23  QtGui   0x000112abe1cb
QWindowSystemInterface::sendWindowSystemEvents(QFlags)
+ 315
24  libqcocoa.dylib 0x000115da6f0d 0x115d87000 + 130829
25  libqcocoa.dylib 0x000115da78a8 0x115d87000 + 133288
26  com.apple.CoreFoundation0x7fff3c8a8721
__CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
27  com.apple.CoreFoundation0x7fff3c9620ac __CFRunLoopDoSource0
+ 108
28  com.apple.CoreFoundation0x7fff3c88b260
__CFRunLoopDoSources0 + 208
29  com.apple.CoreFoundation0x7fff3c88a6dd __CFRunLoopRun +
1293
30  com.apple.CoreFoundation0x7fff3c889f43 CFRunLoopRunSpecific
+ 483
31  com.apple.HIToolbox 0x7fff3bba1e26
RunCurrentEventLoopInMode + 286
32  com.apple.HIToolbox 0x7fff3bba1a9f
ReceiveNextEventCommon + 366
33  com.apple.HIToolbox 0x7fff3bba1914
_BlockUntilNextEventMatchingListInModeWithFilter + 64
34  com.apple.AppKit0x7fff39e6cf5f _DPSNextEvent + 2085
35  com.apple.AppKit

[Wireshark-bugs] [Bug 14427] Crash on `ip address1 198.73.17.116` filter

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14427

Uli Heilmeier  changed:

   What|Removed |Added

 CC||u...@heilmeier.eu
 Ever confirmed|0   |1
 Status|UNCONFIRMED |CONFIRMED

--- Comment #1 from Uli Heilmeier  ---
Confirmed with master-2.4 and latest master on macOS. WS crashes while typing
'ip address1 1' as capture filter.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe