Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 6570] New: UCP dissector bug of operation 61

Date: Fri, 11 Nov 2011 09:53:01 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6570

           Summary: UCP dissector bug of operation 61
           Product: Wireshark
           Version: 1.4.0
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Minor
          Priority: Low
         Component: TShark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: hendrik@xxxxxxxxxxxxxxxx


Build Information:
TShark 1.4.0

Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GLib 2.22.5, with libpcap 1.1.1, with libz 1.2.3, with
POSIX capabilities (Linux), without libpcre, without SMI, without c-ares,
without ADNS, without Lua, without Python, with GnuTLS 2.8.6, with Gcrypt
1.4.4,
with MIT Kerberos, without GeoIP.

Running on Linux 2.6.40-4.fc15.i686.PAE, with libpcap version 1.1.1, with libz
1.2.5.

Built using gcc 4.4.4 20100630 (Red Hat 4.4.4-10).
--
Dissector handles operation 61 wrongly.

It expects field (OPID) between LNPI and RES1 but according to UCP
specification 4.6 there is no field in between.

Dissector code snippet:

...
UcpHandleByte(hf_ucp_parm_LNPI);
UcpHandleInt(hf_ucp_parm_OPID); /* <-- Wrong in my opinion. */
UcpHandleData(hf_ucp_parm_RES1);
  if (OT == 61) {
    UcpHandleData(hf_ucp_parm_RES2);
}
...

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.