tcpdump mailing list archives

Bug in the BPF compiler optimizer


From: Gianluca Varenni <Gianluca.Varenni () riverbed com>
Date: Wed, 7 Dec 2011 01:47:38 +0000

Hi all,

It looks like there is a bug in the optimizer of the BPF compiler, both in 1.0 and trunk on git. If you try to compile 
the following filter, pcap_compile goes into some endless loop in bpf_optimize and never exits. If optimization is 
disabled the filter is correctly compiled.

((ether[0:4] & 0xFFFFFF00) == 0x005056 or (ether[6:4] & 0xFFFFFF00) == 0x005056) and ((ether[0:4] & 0xFFFFFF00) == 
0x001B0D or (ether[6:4] & 0xFFFFFF00) == 0x001B0D)

I know the filter is somewhat bogus, but pcap_compile should not go into some endless loop....

Have a nice day
GV
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: