ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 8069] New: Dissection of IPP Response PDU takes extremely

Date: Thu, 06 Dec 2012 21:11:30 +0000
Bug ID 8069
Summary Dissection of IPP Response PDU takes extremely long time
Classification Unclassified
Product Wireshark
Version 1.6.7
Hardware x86
OS Ubuntu
Status UNCONFIRMED
Severity Minor
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Created attachment 9640 [details]
Packet capture containing problematic PDU

Build Information:
Stock Wireshark build from Kubuntu 12.10
--
When capturing IPP traffic, Wireshark can hang for an extremely long time when
dissecting certain IPP response PDUs. The PDU is not overly large -- around
5000 bytes. But when clicking the IPP Response reassembled PDU in the GUI, the
interface shows a dialog that says "Processing: Packet Details" and then hangs.
CPU usage is 100%. During this hang, the "Time Left" and progress bar do not
update. After a good 10-15 minutes, it finally returns and shows the packet
details.

The PDU in question is quite bizarre, possibly due to something wrong with
CUPS. I imagine it is confusing the dissector somehow.

Packet dump attached. If you filter for "IPP" and then look at the IPP Response
packet you should be able to repro.


You are receiving this mail because:
  • You are watching all bug changes.