Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 6761] New: max_ul_ext isn't printed/decoded to the packet details log in GTP p

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6761

           Summary: max_ul_ext isn't printed/decoded to the packet details
                    log in GTP protocol packet
           Product: Wireshark
           Version: 1.6.5
          Platform: x86-64
        OS/Version: Windows 7
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: esahaapamaki@xxxxxxxxxxx


Build Information:
Version 1.6.5 (SVN Rev 40429 from /trunk-1.6)
--
Hi,

I have opened several logs where GTP protocol message contained PDP Context and
the PDP Context's Qos profile contained both Ext Maximum bit rate for downlink
(max_dl_ext) and Ext Maximum bit rate for Uplink (max_ul_ext). Only max_dl_ext
is visible in the decoded packet details log. Although the max_ul_ext value is
for example 0xc5 it isn't shown in the decoded log. 

The last three lines of QoS printed of to the packet details log are following:
Ext Maximum bit rate for downlink: 150 Mbps
Use the value indicated by the Guaranteed bit rate for downlink in octet 13
Use the value indicated by the Guaranteed bit rate for uplink in octet 12

The last four bytes from the QoS in hex format are following
0xc5 0x00 0xc5 0x00

I looked the code and perhaps the problem is in the packet-gtp.c file.
max_ul_ext variable is not decoded because the if statement is wrong in the
code. The QoS length should be compared to the value 16 not 17 in line 4233 in
trunk code /1/. Therefore max_ul_ext variable remains 0 and it isn't decoded.

-Esa

/1/
if (length > 17) {
max_ul_ext = wrapped_tvb_get_guint8(tvb, offset + (15 - 1) * utf8_type + 1,
utf8_type);
guar_ul_ext = wrapped_tvb_get_guint8(tvb, offset + (16 - 1) * utf8_type + 1,
utf8_type);
}

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.