Wireshark-bugs: [Wireshark-bugs] [Bug 9302] New: multiple PDU in the same DCERPC packet are not
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 21 Oct 2013 04:58:30 +0000
Bug ID 9302
Summary multiple PDU in the same DCERPC packet are not correctly decrypted.
Classification Unclassified
Product Wireshark
Version SVN
Hardware x86
OS All
Status UNCONFIRMED
Severity Major
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter mat@matws.net 

Created attachment 11837 [details]
Proposed patch to fix the problem

Build Information:

--
If a packet has more than one encrypted PDU then only the first one can be
decrypted properly.

Offset have to be relative to the previous PDU otherwise the fragment might
appear bigger that it is really and the decryption function will bail out

You are receiving this mail because:
  • You are watching all bug changes.