Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 6613] New: "matches" operator fails to match hex

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6613

           Summary: "matches" operator fails to match hex
           Product: Wireshark
           Version: SVN
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: tony19@xxxxxxxxx


Created an attachment (id=7462)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=7462)
Test pcap for testing "matches"

Build Information:
wireshark 1.7.1 (SVN Rev 39994 from /trunk)

Copyright 1998-2011 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.24.6, with Cairo 1.10.2, with Pango 1.28.4, with
GLib 2.28.8, with libpcap 1.1.1, with libz 1.2.5, without POSIX capabilities,
with SMI 0.4.8, with c-ares 1.7.4, with Lua 5.1, with Python 2.7.1, with GnuTLS
2.8.6, with Gcrypt 1.5.0, with MIT Kerberos, with GeoIP, with PortAudio
V19-devel (built Aug 30 2011 19:19:18), without AirPcap.

Running on Mac OS 10.7.2 (Darwin 11.2.0), with locale en_US.UTF-8, with libpcap
version 1.1.1, with libz 1.2.5, GnuTLS 2.8.6, Gcrypt 1.5.0.

Built using llvm-gcc 4.2.1 (Based on Apple Inc. build 5658) (LLVM build
2336.1.00).

--
The "matches" operator in display filters fails to detect letter-only hex
values (i.e., "\xAB, \xCD, \xFF", etc). 

The problem is that the GRegex initialization is missing the G_REGEX_RAW flag,
needed to parse raw byte sequences instead of UTF8 strings. See
http://developer.gnome.org/glib/2.30/glib-Perl-compatible-regular-expressions.html#G-REGEX-RAW:CAPS.

Ref:
http://ask.wireshark.org/questions/7582/matches-operator-doesnt-work-with-some-hex-digits

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.