Wireshark-bugs: [Wireshark-bugs] [Bug 4568] New: Wrong offset returned by de_sm_pdp_addr()
Date: Tue, 9 Mar 2010 22:21:52 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4568

           Summary: Wrong offset returned by de_sm_pdp_addr()
           Product: Wireshark
           Version: 1.3.x (Experimental)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Minor
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: vovjo@xxxxxxxxx


Vladimir Kazansky <vovjo@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #4382|                            |review_for_checkin?
               Flag|                            |

Created an attachment (id=4382)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=4382)
patch

Build Information:
wireshark 1.3.4 (SVN Rev 32152 from /trunk)

Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.18.6, with GLib 2.22.4, with libpcap 1.0.0, with libz
1.2.3.4, with POSIX capabilities (Linux), without libpcre, with SMI 0.4.8, with
c-ares 1.7.0, with Lua 5.1, without Python, with GnuTLS 2.8.5, with Gcrypt
1.4.5, with MIT Kerberos, with GeoIP, with PortAudio V19-devel (built Sep  1
2009), without AirPcap, with new_packet_list.

Running on Linux 2.6.33, with libpcap version 1.0.0, GnuTLS 2.8.5, Gcrypt
1.4.5.

Built using gcc 4.4.3 20100108 (prerelease).

--
Wrong offset returned by de_sm_pdp_addr()
in case Packet Data Protocol Address IE is 2-bytes length (dynamic address/not
provided address).
This makes dissection of rest of packet impossible.

please, find the patch attached
fuzz test was ok.

kind regards,
Vladimir

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.