ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 5434] Diameter dump is parsed incorrectly

Date: Thu, 25 Aug 2011 20:08:49 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5434

--- Comment #15 from Guy Harris <guy@xxxxxxxxxxxx> 2011-08-25 20:08:48 PDT ---
In "Complete diameter trace", the stack trace for the first case where an
exception is thrown is

#4  0x00000001001525ce in tvb_get_guint8 (tvb=<value temporarily unavailable,
due to optimizations>, offset=<value temporarily unavailable, due to
optimizations>) at tvbuff.c:1118
#5  0x000000010039470f in dissect_e212_mcc_mnc_ep_str (tvb=0x1049d2d80,
pinfo=0x7fff5fbfe7e0, tree=0x106415660, offset=9, little_endian=1) at
packet-e212.c:2270
#6  0x00000001003949b0 in dissect_e212_mcc_mnc (tvb=<value temporarily
unavailable, due to optimizations>, pinfo=<value temporarily unavailable, due
to optimizations>, tree=<value temporarily unavailable, due to optimizations>,
offset=8, little_endian=<value temporarily unavailable, due to optimizations>)
at packet-e212.c:2324
#7  0x000000010045257a in decode_gtpv2_uli (tvb=0x1049d2d80,
pinfo=0x7fff5fbfe7e0, tree=0x1064151e0, item=0x0, length=10, instance=<value
temporarily unavailable, due to optimizations>, flags=<value temporarily
unavailable, due to optimizations>) at packet-gtpv2.c:1712
#8  0x00000001004531fa in dissect_diameter_3gpp_uli (tvb=0x1049d2d80,
pinfo=0x7fff5fbfe7e0, tree=0x1064151e0) at packet-gtpv2.c:1863

which is parsing the 3GPP-User-Location-Info AVP in frame 30.

If I put the old TGPPGmb.xml file into an up-to-date SVN source directory, and
run Wireshark from there, it makes no difference - frame 30 still gets an
error.  I get a warning if I just *remove* that file from the source directory
(i.e., Wireshark is fetching that file from the build directory), I still get
an error on frame 30.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.