Wireshark-bugs: [Wireshark-bugs] [Bug 7707] New: Homeplug AV dissectors does not properly dissec
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7707
Summary: Homeplug AV dissectors does not properly dissect short
frames
Product: Wireshark
Version: SVN
Platform: All
OS/Version: All
Status: NEW
Severity: Major
Priority: Low
Component: Dissection engine (libwireshark)
AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
ReportedBy: florian@xxxxxxxxxxx
Created attachment 9103
--> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=9103
Patch to properly fix dissection of small Homeplug AV frames
Build Information:
wireshark 1.9.0 (SVN Rev 44815 from /trunk)
Copyright 1998-2012 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with GTK+ 2.24.10, with Cairo 1.10.2, with Pango 1.30.0, with
GLib 2.32.3, with libpcap, with libz 1.2.3.4, without POSIX capabilities,
without libnl, without SMI, without c-ares, without ADNS, without Lua, without
Python, with GnuTLS 2.12.14, with Gcrypt 1.5.0, without Kerberos, without
GeoIP,
without PortAudio, with AirPcap.
Running on Linux 3.2.0-30-generic, with locale fr_FR, with libpcap version
1.1.1, with libz 1.2.3.4, GnuTLS 2.12.14, Gcrypt 1.5.0, without AirPcap.
Built using gcc 4.6.3.
--
The homeplug AV dissector checks that it can access at least 46 bytes of
Ethernet frame payload, which is a way too big check for small Homeplug AV MAC
management frames only consisting of the Homeplug AV MAC management header (3
bytes) such as "Software version request" or "Network info request".
There is already a check on the MAC management header of 3 bytes, so just
remove the bogus 46 bytes check to let dissection of these small frames work
properly.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
