Description

We use rtshark to parse pcap files containing TLS traffic by spawning tshark and reading its XML output via RTShark::read(). After upgrading to rtshark 4.2.0, read() fails on some pcap files with:

Failed to read from tshark: Custom { kind: InvalidInput, error: "cant parse xml: syntax error: tag not closed: `>` not found before end of input" }

Observed behavior

• rtshark 4.1.0 (quick-xml 0.38): all tests pass ✅
• rtshark 4.2.0 (quick-xml 0.39): 4 of 7 tests fail ❌
• The only change between 4.1.0 and 4.2.0 that appears relevant is the quick-xml upgrade from 0.38 to 0.39. I suspect

Reproduction

See this CI failure for the full error output: https://github.com/aws/s2n-tls/actions/runs/22076690325/job/63793212220?pr=5735

Downgrading to rtshark 4.1.0 (which uses quick-xml 0.38) resolves the issue.

Environment

• tshark 4.2.2 (Wireshark)
• rtshark 4.2.0
• quick-xml 0.39.1
• Ubuntu 24.04