Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 4801] New: Quotes in filter dialog are interpreted making

Date: Thu, 27 May 2010 02:02:39 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4801

           Summary: Quotes in filter dialog are interpreted making filter
                    invalid
           Product: Wireshark
           Version: 1.3.x (Experimental)
          Platform: Other
        OS/Version: Windows XP
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: jonathan@xxxxxxxxxx


Created an attachment (id=4700)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=4700)
Faulty quotes in display filter

Build Information:
Build Information:
wireshark 1.3.2 (SVN Rev 31063 from /trunk)

Copyright 1998-2009 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.16.6, with GLib 2.22.2, with WinPcap (version unknown),
with libz 1.2.3, without POSIX capabilities, with libpcre 7.0, with SMI 0.4.8,
with c-ares 1.6.0, with Lua 5.1, without Python, with GnuTLS 2.8.5, with Gcrypt
1.4.4, with MIT Kerberos, with GeoIP, with PortAudio V19-devel (built Nov 23
2009), with AirPcap, with new_packet_list.

Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.1.1
(packet.dll version 4.1.0.1753), based on libpcap version 1.0 branch 1_0_rel0b
(20091008), GnuTLS 2.8.5, Gcrypt 1.4.4, without AirPcap.

Built using Microsoft Visual C++ 9.0 build 30729


Press any key to exit

--
When entering double quotes (") in the search filter they seem to be
interpreted and displayed in a fashion other than the expected format rendering
the filter invalid. After for instance modifying the quotes in notepad and then
pasting the filter in the input box the quotes are not touched and the filter
is accepted.

Not sure how bugzilla will display this, but the following input is taken
directly from the filter box, using copy-paste and should contain the faulty
quotes:

data.data contains ¨test¨

where this seems to work:

data.data contains "test"

Also see attached screenshots.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.