ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 9199] New: edns0 "Higher bits in extended RCODE" incorrect

Date: Fri, 27 Sep 2013 17:06:00 +0000
Bug ID 9199
Summary edns0 "Higher bits in extended RCODE" incorrectly decoded in packet-dns.c
Classification Unclassified
Product Wireshark
Version SVN
Hardware All
OS All
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Build Information:

--
Hi,

the extended RCODE is found in the upper 8 bits of the 32 bits OPT record TTL
field (RFC 6891, Section 6.1.3).

In trunk (line 1436) and trunk-1.10 (line 1229), the decoding is done with (ttl
>> 24) & 0xff0). Since this is an 8-bit value, this incorrectly masks the lower
4 bits of the value. The correct mask is 0xff (no mask may also be used if ttl
is guaranteed to always be of a 32-bit type).


You are receiving this mail because:
  • You are watching all bug changes.