This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

wireshark crash after removing of if(tree)

0

Hi

I am developing custom dissector and i was haing issues on reassembly.

with help from PASCAL i have found my reassembly is not working because of if(tree) and if i remove if(tree) i can able to open my pcap file only in debug mode (Edit -> preference -> console window = always debugging). and i can able to see my reassembly successful. but not in normal mode.

i ran MSVC debugger and found the error in trees

in dissect function under if(tree)

iam calling functions i have 8+ different functions. in debuggger i could see all my sub trees and other trees returning error

 ALL trees getting CXX0030 ERROR
 Mnt tree 0x00000000  null pointer.
 First child ????
 Last child ????
 Next ????
 Parent ????
 Fino ???? 
 Data ????

All the trees have this same error.

my code is some thing like this

         dissect function {
                            if (tree){
                                    call function1(passed tree);
                                    call function2(passed tree);
                                     }
                     }
           function1 (){
                           used tree 
                           created subtree
                           function3 (passed subtree)
                         }

     function2(){
                 used tree 
                 created subtree
                 function4 (passed subtree)
               }
     function 4(){
                      reassembly code here..
                 }</code></pre><p>I have used wireshark build 1.11.3 and also i hae tried 1.12.3 both are getting same issue .</p><p>Some one please suggest what i can do with this ? any suggestions to oercome from this.</p><p>Thanks</p></div><div id="question-tags" class="tags-container tags"><span class="post-tag tag-link-tree" rel="tag" title="see questions tagged &#39;tree&#39;">tree</span> <span class="post-tag tag-link-crash" rel="tag" title="see questions tagged &#39;crash&#39;">crash</span> <span class="post-tag tag-link-if" rel="tag" title="see questions tagged &#39;if&#39;">if</span></div><div id="question-controls" class="post-controls"></div><div class="post-update-info-container"><div class="post-update-info post-update-info-user"><p>asked <strong>27 Feb '15, 04:10</strong></p><img src="https://secure.gravatar.com/avatar/1339589a92af9455063c09e56bfc6299?s=32&amp;d=identicon&amp;r=g" class="gravatar" width="32" height="32" alt="umar&#39;s gravatar image" /><p><span>umar</span><br />

26222427
accept rate: 0%