Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3273] New: BACnet ConfirmedEventNotification - BufferReady

Date: Sun, 22 Feb 2009 12:52:23 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3273

           Summary: BACnet ConfirmedEventNotification - BufferReady decode
           Product: Wireshark
           Version: SVN
          Platform: PC
               URL: http://kargs.net/captures/CEN_10.pcap
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: steve@xxxxxxxxx



Steve Karg <steve@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #2767|                            |review_for_checkin?
               Flag|                            |


Created an attachment (id=2767)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=2767)
packet-bacapp.c.20090222.patch

Build Information:
wireshark 1.1.3 (SVN Rev 27510)

Copyright 1998-2009 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.12.9, with GLib 2.16.6, with libpcap 0.9.8, with libz
1.2.3.3, without POSIX capabilities, with libpcre 7.4, without SMI, without
c-ares, without ADNS, without Lua, with GnuTLS 2.0.4, with Gcrypt 1.2.4,
without
Kerberos, without GeoIP, without PortAudio, without AirPcap.

Running on Linux 2.6.24-23-generic, with libpcap version 0.9.8, GnuTLS 2.0.4,
Gcrypt 1.2.4.

Built using gcc 4.2.4 (Ubuntu 4.2.4-1ubuntu3).
--
The ConfirmedEventNotification decoding was only done as far as context tag 8,
so BACnetNotificationParameters 9, 10, and 11 displayed as malformed packet.  
Added context tag decoding for BACnetNotificationParameters 9, 10, and 11. 
Added missing breaks in several switch statements.
Corrected some dissector aborts.

Added several new enumerations from the latest BACnet 135-2008 standard, and
updated the list of BACnet Vendor IDs.

Compiled, tested, under Kubuntu 8.04.  

Tried to fuzz test, but tshark appears to be currently broken in SVN (and
doesn't appear related to the code I changed). 
** ERROR **: Duplicate protocol name "Redundant Link Management Protocol"! This
might be caused by an inappropriate plugin or a development error.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.