ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 1539] New: Applying filter for signed integer (FT_INT32) h

Date: Mon, 16 Apr 2007 09:52:19 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1539

           Summary: Applying filter for signed integer (FT_INT32) hf_
                    entries with base BASE_HEX causes a crash
           Product: Wireshark
           Version: SVN
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: jeff.morriss@xxxxxxxxxxx


Build Information:
wireshark 0.99.6 (SVN Rev 21440)

Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.10.8, with GLib 2.12.9, with libpcap 0.9.4, with libz
1.2.3, without libpcre, without Net-SNMP, without ADNS, without Lua, with
GnuTLS
1.4.1, with Gcrypt 1.2.3, with MIT Kerberos, without PortAudio, without
AirPcap.
NOTE: this build doesn't support the "matches" operator for Wireshark filter
syntax.

Running on Linux 2.6.20-1.2933.fc6, with libpcap version 0.9.4.

Built using gcc 4.1.1 20070105 (Red Hat 4.1.1-51).

--
Bug 1424 fixed a crash when doing (Right click)->Apply as filter on a hf_ entry
that was of type FT_INT32 with base BASE_HEX.  It was fixed with the comment
"You can not combine FT_INT32 with BASE_HEX."

But it appears many (or at least several) other dissectors use FT_INT32 with
BASE_HEX.

Either proto_register_field_init() should reject registering such a combination
or the underlying bug (filter prep?) should be fixed.  (The latter makes more
sense to me but I'm out of time for the moment.)


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.