Wireshark mailing list archives

Re: PCAP-NG files being corrupted by fuzz tester


From: Guy Harris <guy () alum mit edu>
Date: Fri, 2 Mar 2012 15:04:23 -0800


On Mar 2, 2012, at 2:45 PM, Guy Harris wrote:

On Mar 2, 2012, at 2:36 PM, Jeff Morriss wrote:

The source file itself is fine (well it no longer aborts for me after r41325), but running it through the fuzz 
tester fails every time.  Looks like editcap needs some PCAPNG smarts to avoid corrupting the non-packet parts.  (Or 
Wiretap needs to not give the non-packet parts to editcap.)

...or my recent changes to wiretap/pcapng.c broke something, or....

Without fuzzing, editcap will mangle your test file when converted to pcap-NG, so it's not a question of editcap 
corrupting the non-packet parts.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: