Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 9983] Malformed packets not listed in Expert Infos list

[bugzilla-daemon@xxxxxxxxxxxxx]

Michael Mann changed bug 9983

What	Removed	Added
CC		mmann78@netscape.net

Comment # 7 on bug 9983 from Michael Mann

(In reply to comment #4)
> More the later - if a ssl heartbeat packet is malformed it should be listed
> in the expert info, or ?


It should be listed in expert info, but I'm seeing weird behavior with the
provided capture.  I set a breakpoint right before the field
(hf_ssl_heartbeat_message_payload) that should throw the exception (in frame
13).  During the second pass (when tree != NULL) and field it attempted to be
populated, no exception is thrown and I can step through the whole frame.

If I specifically double-click on frame 13, my breakpoint is hit again, but
this time the exception is thrown.   Selecting Expert Info causes a
redissection, which hits my breakpoint, but again no exception thrown.

Best I can figure is that it has something to do with
proto_tree_add_bytes_format being the last proto_tree_add call in the frame and
it's less picky about length.  Is this another TRY_TO_FAKE_THIS_ITEM issue?

---

      You are receiving this mail because:

• You are watching all bug changes.