https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2733
Summary: DHCP Dissector displays negative lease time
Product: Wireshark
Version: 1.0.2
Platform: PC
OS/Version: Windows XP
Status: NEW
Severity: Trivial
Priority: Medium
Component: Wireshark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: je@xxxxxxxx
Created an attachment (id=2055)
--> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=2055)
cap file of DHCP offer with lease time 0x80000001
Build Information:
Version 1.0.2 (SVN Rev 25698)
Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GTK+ 2.12.8, with GLib 2.14.6, with WinPcap (version unknown),
with libz 1.2.3, without POSIX capabilities, with libpcre 7.0, with SMI 0.4.8,
with ADNS, with Lua 5.1, with GnuTLS 2.3.8, with Gcrypt 1.4.1, with MIT
Kerberos, with PortAudio V19-devel, with AirPcap.
Running on Windows XP Service Pack 3, build 2600, without WinPcap, without
AirPcap.
--
This semms to bie bug in the DHCP dissector concerning the display of DHCP
Option 51, the lease time. According to RFC 2132 the lease time is an unsigned
32-Bit integer:
http://www.heise.de/netze/suche/ergebnis/?rm=result;words=unsigned+integer;url=/netze/rfc/rfcs/rfc2132.shtml#page-26
If the lease time is 0x80000000 or above Wireshark displays it as a negative
time offset.
For example the Bytes 33 04 80 00 00 01 in an option field are decoded as
Option: (t=51,l=4) IP Address Lease Time = -24855 days, -3 hours, -14 minutes,
-7 seconds
The bug is easily reproduced by loading the attached dump file which contains
just one DHCP offer packet with the lease time set to 0x80000001.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
