Bug ID: 13024
           Summary: Wireshark crash when end capturing with "Update list
                    of packets in real-time" option off
           Product: Wireshark
           Version: 2.0.7
          Hardware: x86-64
                OS: Windows Server 2012 R2
            Status: UNCONFIRMED
          Severity: Major
          Priority: Low
         Component: Capture file support (libwiretap)

Created attachment 14996
Crash minidump

Build Information:
Version 2.0.7 (v2.0.7-0-gdaac0f4 from master-2.0)
I think this is imported in version 2.0.7, since 2.0.6 works fine on the same
machine! The issue can also be reproduced in version 2.2.1.

Steps to reproduce:
0. (maybe optional) Clear install of WireShark, then clear personal
configuration folder.
1. Start WireShark and open Capture->Options dialog
2. Click Options tab and uncheck the "Update list of packets in real time" box.
3. Click Input tab and select the interface to capture
4. Click Start button
5. After a second, Click the Stop button on the main tool bar. Then the program

The parameter 'file_encaps' passed into the function wtap_dump_file_encap_type
is NULL. 

Call stack
00 0092bdf4 0f5bc9c3 libwiretap!wtap_dump_file_encap_type+0x3
@ 1760]
01 0092be08 0f5bc8ef libwiretap!wtap_dump_can_write_format+0x33
@ 1827]
02 0092be28 00e6be21 libwiretap!wtap_dump_can_write+0x1f
@ 1861]
03 0092be38 00e9d0d3 Wireshark!cf_can_write_with_wiretap+0x11
[c:\buildbot\wireshark\wireshark-2.2-32\windows-8.1-x86\build\file.c @ 4188]
04 0092be84 00ebab0a Wireshark!MainWindow::setMenusForCaptureFile+0x93
@ 2030]
05 0092be90 00f0aa60 Wireshark!MainWindow::captureCaptureFixedFinished+0x1a
@ 652]
06 0092bea0 662cdd26 Wireshark!MainWindow::qt_static_metacall+0x290
@ 1809]
WARNING: Stack unwind information not available. Following frames may be wrong.
07 0092bf58 00eb00c7 Qt5Core!QMetaObject::activate+0x4d6
08 00000000 00000000 Wireshark!CaptureFile::captureEvent+0x127
@ 300]

You are receiving this mail because:
You are watching all bug changes.
Sent via:    Wireshark-bugs mailing list <>

Reply via email to