Wireshark-bugs: [Wireshark-bugs] [Bug 12477] New: SMB NtTransCreate should decode extended respo
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 26 May 2016 18:34:38 +0000
Bug ID 12477
Summary SMB NtTransCreate should decode extended response
Product Wireshark
Version Git
Hardware x86
OS Windows 7
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter gordon.w.ross@gmail.com 

Created attachment 14599 [details]
Snoop file showing NtTransCreate with extended response

Build Information:
As of commit 7ca8e46ffb95a31b8df15019298f8404723e68b4
--
The SMB Nt Trans Create sub-function can have an "extended response" like the
SMB Nt Create.

There's also a problem with failing to skip alignment padding when decoding the
path name part of the request.

See frames 440, 441 in the attached snoop.

Patch for both on the way...

You are receiving this mail because:
  • You are watching all bug changes.