[Bro] pcap_next Question

[Robin Sommer]

On Thu, Aug 09, 2012 at 06:43 -0400, Chris Crawford wrote:

> I don't think that is quite right for C++.

Yeah, it throws an exception by default. However, there's a way to
catch a failing new by setting a corresponding handler, see:

    http://www.cplusplus.com/reference/std/new/set_new_handler

The funny thing is that I thought we did that already; and in fact
there's a function bro_new_handler() that reports an out of memory
error and aborts. However, we must have lost the call to the
corresponding set_new_handler() at some point: I don't find
bro_new_handler() used anywhere. So what we should do is add that back
in; I'll do that.

Robin

-- 
Robin Sommer * Phone +1 (510) 722-6541 * robin at icir.org
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org