ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: [Wireshark-dev] tfi->tree_type: 4294967295 invalid (proto.c:2667)

Date: Wed, 30 Aug 2006 10:57:55 +0200
      Hello,


I have made some changes to the TCAP dissector, and I have now the
following warnings on Wireshark (not tshark) for somes traces files.
The warning is displayed only when the file is reloaded, whereas the Tcap
Abort is selected.
<<
10:05:56          Warn Dissector bug, protocol TCAP, in packet 6: "" - ""
tfi->tree_type: 4294967295 invalid (proto.c:2667)
10:05:56          Warn Dissector bug, protocol TCAP, in packet 12: "" - ""
tfi->tree_type: 4294967295 invalid (proto.c:2667)
10:06:09          Warn Dissector bug, protocol TCAP, in packet 6: "" - ""
tfi->tree_type: 4294967295 invalid (proto.c:2667)
10:06:09          Warn Dissector bug, protocol TCAP, in packet 12: "" - ""
tfi->tree_type: 4294967295 invalid (proto.c:2667)
10:06:15          Warn Dissector bug, protocol TCAP, in packet 6: "" - ""
tfi->tree_type: 4294967295 invalid (proto.c:2667)
10:06:15          Warn Dissector bug, protocol TCAP, in packet 12: "" - ""
tfi->tree_type: 4294967295 invalid (proto.c:2667)
>>

I did check my changes, and as I did not found the error, I did implement
the minimal changes in the attached version.
On this version, I just added a subtree after the TCAP decoding to display
an integer.
The subtree is attached to the main TCAP tree, and not the current tree,
and, it is displayed before the next dissector tree.

When the subtree is linked to the current tree, I have no warning, and when
the subtree is attached to the main TCAP tree, I have the warnings.
If someone could explain me what is wrong, or what should I do to progress
on this issue ?

Thanks in advance
Florent


For the traces file:
Setup  Camel SSN=146 in the preferences
and update the K12 config file with "d:\k15\stacks\3gpp\capv3v2.stk mtp2"

For the code, copy the packet-tcap.[ch] in epan/dissectors

(See attached file: BadSKEY_Abort3.rf5.gz)(See attached file:
tcap_asn.tar.gz)

Attachment: BadSKEY_Abort3.rf5.gz
Description: Binary data

Attachment: tcap_asn.tar.gz
Description: Binary data