ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 5598] New: Wrong IEI in container of decode_gtp_mm_cntxt

Date: Thu, 20 Jan 2011 01:28:29 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5598

           Summary: Wrong IEI in container of decode_gtp_mm_cntxt
           Product: Wireshark
           Version: 1.4.3
          Platform: Other
        OS/Version: Windows XP
            Status: NEW
          Severity: Minor
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: ping.zhu@xxxxxxx


Created an attachment (id=5752)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5752)
GTP_message_Forward_Relocation_Request

Build Information:
Version 1.4.3 (SVN Rev 35482 from /trunk-1.4)

Copyright 1998-2011 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.16.6, with GLib 2.22.4, with WinPcap (version
unknown), with libz 1.2.3, without POSIX capabilities, without libpcre, with
SMI
0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS 2.8.5, with
Gcrypt 1.4.5, with MIT Kerberos, with GeoIP, with PortAudio V19-devel (built
Jan
11 2011), with AirPcap.

Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.1.2
(packet.dll version 4.1.0.2001), based on libpcap version 1.0 branch 1_0_rel0b
(20091008), GnuTLS 2.8.5, Gcrypt 1.4.5, without AirPcap.

Built using Microsoft Visual C++ 9.0 build 30729
--
Refer to 3GPP TS29.060 V7.2.0 and later.(CR-0582r2:Clarification on usage of
IEI definition in container of MMcontext )

7.7.28 MM Context
"Container contains one or several optional information elements as described
in the clause 'Overview', from the clause 'General message format and
information elements coding' in 3GPP TS 24.008 [5]. For the definition of the
IEI see table 47a, 'IEIs for information elements used in the container'. The
IMEISV shall, if available, be included in the Container. The IMEISV is
included in the Mobile identity IE."

In table 47a it's described the "unique definition in the present document for
the used IEI in the MMcontext."
0x23 ==>Mobile Identity

Following code shall be updated accordingly, otherwise it's ridiculous to see
some GSM A-I/F DTAP parameters in a GTP message.
/* extracted from packet-gtp.c
/* Container contains one or several optional information elements as described
in the clause 'Overview',
 * from the clause 'General message format and information elements coding' in
3GPP TS 24.008.
 * The IMEISV shall, if available, be included in the Container.
 */

    con_len = tvb_get_ntohs(tvb, offset);
    proto_tree_add_text(ext_tree_mm, tvb, offset, 2, "Container length: %u",
con_len);
    offset = offset + 2;

    if (con_len > 0) {

        l3_tvb = tvb_new_subset(tvb, offset, con_len, con_len);
        if (!dissector_try_port(bssap_pdu_type_table, BSSAP_PDU_TYPE_DTAP,
l3_tvb, pinfo, ext_tree_mm))
            call_dissector(data_handle, l3_tvb, pinfo, ext_tree_mm);
    }

    return 3 + length;
}

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.