Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Display filter syntax check is broken in 1.2.0

From: yami <yamisoe@xxxxxxxxx>
Date: Fri, 29 May 2009 02:16:35 +0800
One of major changes is 1.2.0 adopts lemon 1.59 (Wireshark 1.0.8 uses lemon 1.51).

I use 1.0.8 code base to do following experiments:

  1. (OK) 1.0.8 from SVN (with lemon 1.51)
      $ ./dftest "tcp fa"      
        Filter: "tcp fa"
        dftest: "fa" was unexpected in this context.
       

  2. (FAIL) 1.0.8 with lemon 1.59

      $./dftest "tcp fa"

        00000 CHECK_EXISTS    tcp
        00001 RETURN

However, I do not know why the lemon version matters.





2009/5/28 Stig Bjørlykke <stig@xxxxxxxxxxxxx>
Hi.

The display filter syntax check is broken in 1.2.0.  Try writing "tcp
f" in both 1.0.8 and 1.2.0.
In 1.0.8 this is marked as invalid, but in 1.2.0 it's valid.  It seems
like all trailing (bogus) data is ignored.

Does anyone know what happened?
I did not find any relevant changes in epan/dfilter/ between 1.0.8 and 1.2.0.


--
Stig Bjørlykke
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
            mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe