>From the source code, I am not able to figure out the
maximum limit size for a filter string. It works fine
with a string of 10000 bytes. However, the filter
string I sent in my previous mail leads to an infinite
recursive calls to count_blocks, causing the stack to
blow up. (stack trace:
pcap_compile/bpf_optimize/opt_init/count_blocks)

-Hai


  
--- David Barnish <[EMAIL PROTECTED]> wrote:
> At least in version 2.3 of WinPCap, we saw this
> issue when we had a
> filter string longer than about 380 bytes. There is
> no workaround. The
> code in the wpcap library/dll would need to be
> changed to accomodate
> larger strings.
> 
> David Barnish
> 
> -----Original Message-----
> From: Hai Nguyen [mailto:[EMAIL PROTECTED]
> Sent: Monday, March 24, 2003 1:57 AM
> To: [EMAIL PROTECTED]
> Subject: [WinPcap-users] Winpcap 3.0 Beta crashes
> with a long complex
> filter string
> 
> 
> Hi,
> 
> I am attaching a file containing a long complex
> filter
> string that causes winpcap to crash when calling
> pcap_compile(). It looks like a stack overflow
> problem
> and occurs inside count_blocks(). The length of the
> filter is about 44000.
> Is there any quick fix to the problem? Do you know
> if
> there is a limit on the length of the filter?
> 
> Thanks for your help,
> -Hai 
> 
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Platinum - Watch CBS' NCAA March Madness,
> live on your desktop!
> http://platinum.yahoo.com
> 
> 
>
=================================================================
> This is the WinPcap users list. It is archived at
> 
>
http://www.mail-archive.com/[EMAIL PROTECTED]/
> 
>  To unsubscribe use
>  mailto:
>
[EMAIL PROTECTED]
>
==================================================================


__________________________________________________
Do you Yahoo!?
Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop!
http://platinum.yahoo.com


==================================================================
 This is the WinPcap users list. It is archived at
 http://www.mail-archive.com/[EMAIL PROTECTED]/

 To unsubscribe use 
 mailto: [EMAIL PROTECTED]
==================================================================

Reply via email to