Wireshark-bugs: [Wireshark-bugs] [Bug 9983] Malformed packets not listed in Expert Infos list
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 17 Apr 2014 00:55:07 +0000

changed bug 9983

What Removed Added
CC   mmann78@netscape.net

Comment # 7 on bug 9983 from 
(In reply to comment #4)
> More the later - if a ssl heartbeat packet is malformed it should be listed
> in the expert info, or ?


It should be listed in expert info, but I'm seeing weird behavior with the
provided capture.  I set a breakpoint right before the field
(hf_ssl_heartbeat_message_payload) that should throw the exception (in frame
13).  During the second pass (when tree != NULL) and field it attempted to be
populated, no exception is thrown and I can step through the whole frame.

If I specifically double-click on frame 13, my breakpoint is hit again, but
this time the exception is thrown.   Selecting Expert Info causes a
redissection, which hits my breakpoint, but again no exception thrown.

Best I can figure is that it has something to do with
proto_tree_add_bytes_format being the last proto_tree_add call in the frame and
it's less picky about length.  Is this another TRY_TO_FAKE_THIS_ITEM issue?

You are receiving this mail because:
  • You are watching all bug changes.