This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Program crashes when opening damaged pcap files

0

Program (x64) hangs or crashes when opening damaged .pcap files with broken packet header (timestamp and sizes) and data. (It was UDP packets) Seems like there are no some checks for time or sizes validity. That causes buffer overrun or something like that.

asked 27 Feb '17, 14:07

EugeneF's gravatar image

EugeneF
6112
accept rate: 0%


One Answer:

0

Sounds like a bug. First be sure you're running the most recent version. If the problem still occurs then please file a bug report and attach the capture file there.

answered 27 Feb '17, 18:58

JeffMorriss's gravatar image

JeffMorriss ♦
6.2k572
accept rate: 27%