Wireshark-bugs: [Wireshark-bugs] [Bug 11344] New: Mysql dissector adds packet content to INFO co
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 06 Jul 2015 22:51:40 +0000
Bug ID 11344
Summary Mysql dissector adds packet content to INFO column without scrubbing it
Product Wireshark
Version 1.12.6
Hardware All
OS All
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter hadrielk@yahoo.com 

Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
The MYSQL protocol dissector in packet-mysql.c adds strings from the packet
content by just getting them with tvb_get_string_enc(), instead of also putting
it through format_text() or format_text_wsp() to remove/replace CR, LF, TAB,
etc.

It does this for: query string, greeting version string, login username, and
login schema.

You are receiving this mail because:
  • You are watching all bug changes.