Package: tcptrace Version: 6.6.7-4.1 Severity: normal File: /usr/bin/tcptrace
Dear Maintainer,
* What led up to the situation?
While developing a new fuzzer we discovered this bug.
* What outcome did you expect instead?
We expected the program not to crash. I'm attaching an input file that
triggers this bug. The bug can be triggered on x86_64 as well.
Here's a stack trace:
"""
Ostermann's tcptrace -- version 6.6.7 -- Thu Nov 4, 2004
TCP packet 10: reserved bits are not all zero.
Further warnings disabled, use '-w' for more info
Program received signal SIGSEGV, Segmentation fault.
0x08058ecc in MemCpy (vp1=0x80caab0, vp2=0x80baab6, n=4294699681) at
tcptrace.c:2620
2620 *p1++=*p2++;
(gdb) bt
#0 0x08058ecc in MemCpy (vp1=0x80caab0, vp2=0x80baab6, n=4294699681) at
tcptrace.c:2620
#1 0x080558c4 in callback (user=0x0, phdr=0xbffff1bc, buf=0x80baaa8 "")
at tcpdump.c:166
#2 0xb7f4ba18 in pcap_offline_read (p=0x80ba8a0, cnt=1,
callback=0x8055850 <callback>,
user=0x0) at ./savefile.c:404
#3 0xb7f3c8f6 in pcap_dispatch (p=0x80ba8a0, cnt=1, callback=0x8055850
<callback>,
user=0x0) at ./pcap.c:829
#4 0x080556d8 in pread_tcpdump (ptime=0x80a75c8 <current_time>,
plen=0xbffff29c,
ptlen=0xbffff2a0, pphys=0xbffff298, pphystype=0xbffff294,
ppip=0xbffff28c,
pplast=0xbffff2a4) at tcpdump.c:247
#5 0x08058098 in ProcessFile (filename=0x80caab0 "E`") at tcptrace.c:966
#6 0x08049fba in main (argc=1, argv=0xbffff4f4) at tcptrace.c:785
"""
-- System Information:
Debian Release: 8.5
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 3.16.0-4-686-pae (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages tcptrace depends on:
ii libc6 2.19-18+deb8u4
ii libpcap0.8 1.6.2-2
Versions of packages tcptrace recommends:
ii tcpdump 4.6.2-5+deb8u1
ii xplot-xplot.org 0.90.7.1-2
tcptrace suggests no packages.
-- debconf-show failed
tcptrace-2016-05-18T02-38-38.155527.pcap
Description: tcptrace-2016-05-18T02-38-38.155527.pcap
signature.asc
Description: OpenPGP digital signature
