Wireshark-bugs: [Wireshark-bugs] [Bug 7524] New: GSM classmark3 decode wrong
Date: Tue, 24 Jul 2012 19:42:01 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7524

           Summary: GSM classmark3 decode wrong
           Product: Wireshark
           Version: 1.8.0
          Platform: x86
        OS/Version: Windows 7
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Dissection engine (libwireshark)
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: dingli2001@xxxxxxxx


Created attachment 8839
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=8839
pcap file contain 8-PSK Struct

Build Information:
wireshark 1.8.0 (SVN Rev 43431 from /trunk-1.8)

Copyright 1998-2012 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.24.10, with Cairo 1.10.2, with Pango 1.30.0, with
GLib 2.32.2, with WinPcap (4_1_2), with libz 1.2.5, without POSIX capabilities,
with SMI 0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS
2.12.18, with Gcrypt 1.4.6, with MIT Kerberos, with GeoIP, with PortAudio
V19-devel (built Jun 21 2012), with AirPcap.

Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.1.2
(packet.dll version 4.1.0.2001), based on libpcap version 1.0 branch 1_0_rel0b
(20091008), GnuTLS 2.12.18, Gcrypt 1.4.6, without AirPcap.

Built using Microsoft Visual C++ 10.0 build 40219
wireshark 1.8.0 (SVN Rev 43431 from /trunk-1.8)

Copyright 1998-2012 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.24.10, with Cairo 1.10.2, with Pango 1.30.0, with
GLib 2.32.2, with WinPcap (4_1_2), with libz 1.2.5, without POSIX capabilities,
with SMI 0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS
2.12.18, with Gcrypt 1.4.6, with MIT Kerberos, with GeoIP, with PortAudio
V19-devel (built Jun 21 2012), with AirPcap.

Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.1.2
(packet.dll version 4.1.0.2001), based on libpcap version 1.0 branch 1_0_rel0b
(20091008), GnuTLS 2.12.18, Gcrypt 1.4.6, without AirPcap.

Built using Microsoft Visual C++ 10.0 build 40219
--

when decode 8-PSK struct in classmark3,
gsm_a.classmark3.8_psk_rf_power_capability_1 and
gsm_a.classmark3.8_psk_rf_power_capability_2 isn't fixed length

it isn't presence when the first bit is 0

in spec 3gpp TS24.008   section 10.5.1.7

< 8-PSK Struct> : :=
< Modulation Capability : bit >
{ 0 | 1 < 8-PSK RF Power Capability 1: bit(2) > }
{ 0 | 1 < 8-PSK RF Power Capability 2: bit(2) > }

if the bits is 00001, should be decoded as:
Modulation Capability =0 
8-PSK RF Power Capability 1 not presence
8-PSK RF Power Capability 2 not presence
and 01 should be used by following fields in classmark3

in current version ,it is decode:
Modulation Capability =0 
8-PSK RF Power Capability 1 =00
8-PSK RF Power Capability 2 =01

this 8-PSK struct bug will eat more bits and cause all following fields are
decoded wrong

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.