Wireshark-bugs: [Wireshark-bugs] [Bug 10575] New: IPv6 QuickStart option Nonce is read incorrect
| Bug ID |
10575
|
| Summary |
IPv6 QuickStart option Nonce is read incorrectly
|
| Product |
Wireshark
|
| Version |
1.12.1
|
| Hardware |
x86-64
|
| OS |
Windows 7
|
| Status |
UNCONFIRMED
|
| Severity |
Normal
|
| Priority |
Low
|
| Component |
Dissection engine (libwireshark)
|
| Assignee |
bugzilla-admin@wireshark.org
|
| Reporter |
boaz.brickner@gmail.com
|
Created attachment 13172 [details]
IPv6 packet with QuickStart option
Build Information:
Version 1.12.1 (v1.12.1-0-g01b65bf from master-1.12)
Copyright 1998-2014 Gerald Combs <gerald@wireshark.org> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with GTK+ 2.24.23, with Cairo 1.10.2, with Pango 1.34.0, with
GLib 2.38.0, with WinPcap (4_1_3), with libz 1.2.5, with SMI 0.4.8, with c-ares
1.9.1, with Lua 5.2, without Python, with GnuTLS 3.1.22, with Gcrypt 1.6.0,
without Kerberos, with GeoIP, with PortAudio V19-devel (built Sep 16 2014),
with
AirPcap.
Running on 64-bit Windows 7 Service Pack 1, build 7601, with WinPcap version
4.1.3 (packet.dll version 4.1.0.2980), based on libpcap version 1.0 branch
1_0_rel0b (20091008), GnuTLS 3.1.22, Gcrypt 1.6.0, without AirPcap.
Intel(R) Core(TM) i5-3550 CPU @ 3.30GHz, with 16345MB of physical
memory.
Built using Microsoft Visual C++ 10.0 build 40219
Wireshark is Open Source Software released under the GNU General Public
License.
Check the man page and http://www.wireshark.org for more information.
--
Discovered while working on Pcap.Net (http://pcapdot.net).
In the attached pcap file, there's a single IPv6 packet.
This packet contains Destination Options extension header with several options.
The third option is the QuickStart option.
In Wireshark, the option's TTL field looks ok, but the [TTL diff] field points
to the byte after the TTL field, which is part of the nonce field.
The nonce field is being read one byte after where it should be read and so the
value being read is incorrect.
Moreover, the option data length says 6 but because of the extra byte being
read 7 bytes are being read for this option data and the next option is read
one byte later incorrectly so the options after the QuickStart option are being
read incorrectly.
You are receiving this mail because:
- You are watching all bug changes.
