Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 6199] New: lte-rrc sib3 R9 extension addition dissect erro

Date: Thu, 4 Aug 2011 00:10:18 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6199

           Summary: lte-rrc sib3 R9 extension addition dissect error
           Product: Wireshark
           Version: 1.6.1
          Platform: x86
        OS/Version: Windows XP
            Status: NEW
          Severity: Minor
          Priority: Low
         Component: Wireshark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: billyjeans@xxxxxxxxx


Build Information:
Version 1.6.1 (SVN Rev 38096 from /trunk-1.6)
--
Decode LTE-RRC binary stream with the help of 3gpp message decoder:
00 80 1C 31 18 6F 21 20 00 65 89 8A E2 D0 01 02 00 54 82 77 2C B5 50 97 1C 00
C3 A1 06 FF 28 3A 8D D2 78 0A 09 DD 29 49 00 
Or dissect the sample file by setting the dlt user 147 to lte-rrc.bcch.dl.sch
Also set PEM preference "display internal fields in tree" may help to check.

It seems that dissector miss the 4 bits bitmap (0b1110) prefix to the extension
addition, which is required by X.601 19.9:
If an "ExtensionAdditionGroup" contains components marked  OPTIONAL or 
DEFAULT, then the "ExtensionAdditionGroup" is prefixed with a bit-map that
indicates the presence/absence of values for each component marked OPTIONAL or
DEFAULT. 

                                        .... ..0. Small Number Bit: False
                                        Number of Sequence Extensions: 1
                                        .... .0.. Extension Present Bit: False
(lateNonCriticalExtension is NOT present)
                                        .... ..1. Extension Present Bit: True
(s-IntraSearch-v920 is present)
                                        Open Type Length: 4  .... ...0  0000
100
                                        s-IntraSearch-v920
                                            Range = 32 Bitfield length 5,
s-IntraSearchP-r9: .... ...1  1101 ....
                                            s-IntraSearchP-r9: 29
                                            Range = 32 Bitfield length 5,
s-IntraSearchQ-r9: .... 1101  0... ....
                                            s-IntraSearchQ-r9: 26
                                        [Possible encoding error full length
not decoded. Open type length 4 ,decoded 2]
                                            [Expert Info (Warn/Malformed):
Possible encoding error full length not decoded. Open type length 4 ,decoded 2]
                                                [Message: Possible encoding
error full length not decoded. Open type length 4 ,decoded 2]
                                                [Severity level: Warn]
                                                [Group: Malformed]

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.