Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 6262] New: packet-ndmp.c dissector incorrectly represents

Date: Wed, 24 Aug 2011 15:09:49 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6262

           Summary: packet-ndmp.c dissector incorrectly represents
                    "ndmp.bytes_left_to_read" as signed.
           Product: Wireshark
           Version: 1.4.7
          Platform: All
        OS/Version: Solaris
            Status: NEW
          Severity: Minor
          Priority: Low
         Component: Wireshark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: rjloura@xxxxxxxxx


Build Information:
Version 1.4.7 (SVN Rev 37483 from /trunk-1.4)

Copyright 1998-2011 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.20.1, with GLib 2.25.1, with libpcap 1.1.1, with
libz 1.2.3, without POSIX capabilities, without libpcre, without SMI, without
c-ares, without ADNS, with Lua 5.1, without Python, with GnuTLS 2.8.6, with
Gcrypt 1.4.5, with MIT Kerberos, without GeoIP, without PortAudio, without
AirPcap.

Running on SunOS 5.11, with libpcap version 1.1.1, with libz 1.2.3, GnuTLS
2.8.6, Gcrypt 1.4.5.

Built using Sun C 1.0

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
in a MOVER_GET_STATE ndmp message 

Bytes left to read: -3048603649

Possible fix:

packet-ndmp.c:4009 should change from:
"Bytes left to read", "ndmp.bytes_left_to_read", FT_INT64, BASE_DEC,

To:
"Bytes left to read", "ndmp.bytes_left_to_read", FT_UINT64, BASE_DEC,

change FT_INT64 to FT_UINT64

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.