Wireshark-bugs: [Wireshark-bugs] [Bug 9199] New: edns0 "Higher bits in extended RCODE" incorrect
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Fri, 27 Sep 2013 17:06:00 +0000
Bug ID 9199
Summary edns0 "Higher bits in extended RCODE" incorrectly decoded in packet-dns.c
Classification Unclassified
Product Wireshark
Version SVN
Hardware All
OS All
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter stefanp-a-bugs.wireshark.org@cabal1.net 

Build Information:

--
Hi,

the extended RCODE is found in the upper 8 bits of the 32 bits OPT record TTL
field (RFC 6891, Section 6.1.3).

In trunk (line 1436) and trunk-1.10 (line 1229), the decoding is done with (ttl
>> 24) & 0xff0). Since this is an 8-bit value, this incorrectly masks the lower
4 bits of the value. The correct mask is 0xff (no mask may also be used if ttl
is guaranteed to always be of a 32-bit type).

You are receiving this mail because:
  • You are watching all bug changes.