Wireshark-bugs: [Wireshark-bugs] [Bug 9798] New: Incorrect number of reserved bytes at end of st
Date: Fri, 21 Feb 2014 12:16:58 +0000
Bug ID 9798
Summary Incorrect number of reserved bytes at end of stations informations in Network Info Confirmation of Homeplug AV protocol
Classification Unclassified
Product Wireshark
Version 1.10.5
Hardware x86-64
OS Windows 7
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter greg@nunan.fsnet.co.uk

Created attachment 12572 [details]
Network Info Confirmation of Homeplug AV protocol showing incorrect number of
reserved bytes

Build Information:
Version 1.10.5 (SVNRev 54262 from /trunk-1.10)

Copyright 1998-2013 Gerald Combs <gerald@wireshark.org> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.24.14, with Cairo 1.10.2, with Pango 1.30.1, with
GLib 2.34.1, with WinPcap (4_1_3), with libz 1.2.5, without POSIX capabilities,
without libnl, with SMI 0.4.8, with c-ares 1.9.1, with Lua 5.1, without Python,
with GnuTLS 2.12.18, with Gcrypt 1.4.6, without Kerberos, with GeoIP, with
PortAudio V19-devel (built Dec 19 2013), with AirPcap.

Running on 64-bit Windows 7 Service Pack 1, build 7601, with WinPcap version
4.1.3 (packet.dll version 4.1.0.2980), based on libpcap version 1.0 branch
1_0_rel0b (20091008), GnuTLS 2.12.18, Gcrypt 1.4.6, without AirPcap.
        Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz, with 32728MB of physical
memory.


Built using Microsoft Visual C++ 10.0 build 40219

--
At the end of the stations informations field of a Network Info Confirmation
message in the Homeplug AV protocol the dissector has only 1 reserved byte. At
least in the Devolo dLan 500 AV range of devices this is 2 bytes long, so all
subsequent stations informations fields are off by 1, 2, 3 etc bytes.

The dissector line in question would seem to be line 1407 of
[wireshark.git]/epan/dissectors/packet-homeplug-av.c where

         ptvcursor_add(cursor, hf_homeplug_av_reserved, 1, ENC_NA);

should be

         ptvcursor_add(cursor, hf_homeplug_av_reserved, 2, ENC_NA);

near the bottom of dissect_homeplug_av_nw_info_sta.


You are receiving this mail because:
  • You are watching all bug changes.