Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3889] New: minor errors in gsm rr dissectors

Date: Wed, 12 Aug 2009 13:23:53 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3889

           Summary: minor errors in gsm rr dissectors
           Product: Wireshark
           Version: 1.2.1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: wireshark@xxxxxxxxxxxxxxx


Build Information:
Version 1.2.1ipa30-mm3-3
Copyright 1998-2009 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GTK+ 2.16.2, with GLib 2.20.3, with WinPcap (version unknown),
with libz 1.2.3, without POSIX capabilities, with libpcre 7.0, with SMI 0.4.8,
with c-ares 1.6.0, with Lua 5.1, with GnuTLS 2.8.1, with Gcrypt 1.4.4, with MIT
Kerberos, with GeoIP, with PortAudio V19-devel (built Aug 10 2009), with
AirPcap.
Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.1
beta5
(packet.dll version 4.1.0.1452), based on libpcap version 1.0.0, GnuTLS 2.8.1,
Gcrypt 1.4.4, without AirPcap.
Built using Microsoft Visual C++ 9.0 build 30729
Wireshark is Open Source Software released under the GNU General Public
License.
Check the man page and http://www.wireshark.org for more information.
--
Dissectors for ba_list_pref_length and utran_freq_list_length in
packet-gsm_a_rr.c wrongly interpret the 04.18 protocol, by attempting to read
the ie length twice.

The specification is ambiguous here because there is a CSN.1 encoded IE wrapped
in a TLV IE, and the first octet of the CSN.1 encoding is actually overlaid on
the L of the TLV.  

The correct implementation is much more obvious if you look at an old version
of 44.018 (before CR215 was applied).

Also the HF description for utran_freq_list_length was wrong.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.