Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 7790] New: SMB 2.x Read Request parsing is wrong starting at Channel

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7790

           Summary: SMB 2.x Read Request parsing is wrong starting at
                    Channel
           Product: Wireshark
           Version: 1.8.3
          Platform: x86
        OS/Version: Mac OS X 10.7
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Dissection engine (libwireshark)
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: suinn@xxxxxxxxx


Build Information:
WireShark 1.83
--
When parsing SMB 2.x Read Request, the packet format should be 
FileID (16 bytes)
MinimumCount (4 bytes)
Channel (4 bytes)
RemainingBytes (4 bytes)
etc

WireShark will parse the Minimum Count correctly, but then fails to advance by
4 bytes.  So, the Channel ends up showing the wrong values (it will show the
Minimum Count value) and all fields starting with the Channel are off by 4
bytes.

Note:  SMB 2.x Write Request parse fine.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.