Re: Regarding PCAP versions

[Chandru S <chandru.rams () gmail com>]

Hi All,

Thanks for information!!

But I have concern about pcap_complie() function.Can anyone provide more
information on that issue.

In pcap_compile()

We are calling a function

  program->bf_insns = icode_to_fcode(root, &len);
  program->bf_len = len;
The function :

struct bpf_insn *
icode_to_fcode(root, lenp)
        struct block *root;
        int *lenp;
{
        int n;
        struct bpf_insn *fp;
        /*
         * Loop doing convert_code_r() until no branches remain
         * with too-large offsets.
         */
        while (1) {
            unMarkAll();
            n = *lenp = count_stmts(root);
            *fp = (struct bpf_insn *)malloc(sizeof(*fp) * n);
*            if (fp == NULL)
                    bpf_error("malloc");
            memset((char *)fp, 0, sizeof(*fp) * n);
            fstart = fp;
            ftail = fp + n;
          unMarkAll();
            if (convert_code_r(root))
                break;
            free(fp);
        }
        return fp;
}


The malloc is done here .But i was not abe to find the freeing of this
structure pointer.Can anyone giev suggestion about this issues??

Regards,
Chandru S






On Wed, Jul 15, 2009 at 11:34 AM, Guy Harris <guy () alum mit edu> wrote:

> On Jul 14, 2009, at 9:39 PM, Chandru S wrote:
>
> I was able to find  the CHANGES file but my only concern is that it gives
> > us the difference between subsequent releases .I need a document which can
> > provide all the changes from my PCAP version to the LATEST.Is there any
> > document in that pattern?
>
> Yes.
>
> As Aaron Turner noted, it's the CHANGES file in the latest version of
> libpcap.  The CHANGES document for any given release of libpcap - or tcpdump
> - gives the changes from the first version to that release.  Therefore, the
> CHANGES file for the latest version of libpcap gives the changes from the
> first version to the latest version; the changes are given for each version,
> so you can, given that, determine the changes from your version to the
> latest version.



-- 
Regards,
Chandru.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.