ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 5901] New: sgsap dissector bug - Global CN-Id IE is not de

Date: Mon, 9 May 2011 23:40:31 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5901

           Summary: sgsap dissector bug - Global CN-Id IE is not decoded.
           Product: Wireshark
           Version: 1.5.x (Experimental)
          Platform: Other
        OS/Version: Windows 7
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: nksijin@xxxxxxxxx


Created an attachment (id=6307)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=6307)
sample capture showing the paging message with Global CN-ID

Build Information:
Version 1.5.1 (SVN Rev 36537 from /trunk)
--
SGSAP Dissector has the following bug: 
While decoding the IE "Global CN-Id" in Paging message, assert fails, it shows
the following information:

Dissector bug, protocol SGSAP: proto.c:1753: failed assertion "(guint)hfindex <
gpa_hfinfo.len"
Severity: error.
Group: Malformed.

sample capture is attached.

I have checked out latest code from trunk and modified this dissector and it
works fine. Below is the svn diff:

Index: packet-sgsap.c
===================================================================
--- packet-sgsap.c    (revision 37034)
+++ packet-sgsap.c    (working copy)
@@ -1491,6 +1491,11 @@
         FT_UINT32, BASE_DEC, NULL, 0x0fffffff,
         NULL, HFILL}
     },
+    { &hf_sgsap_cn_id,
+        {"CN_ID", "sgsap.cn_id",
+        FT_UINT16, BASE_DEC, NULL, 0x0ffff,
+        NULL, HFILL}
+    },
     { &hf_sgsap_imsi_det_eps, 
         { "IMSI detach from EPS service type",    "sgsap.imsi_det_eps",
         FT_UINT8, BASE_DEC,
VALS(sgsap_imsi_det_from_eps_serv_type_values),0x0,

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.