Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 12686] New: GTP: Decoding of NSAPI is broken in version 2.0.5

[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	12686
Summary	GTP: Decoding of NSAPI is broken in version 2.0.5
Product	Wireshark
Version	2.0.5
Hardware	x86
OS	All
Status	UNCONFIRMED
Severity	Major
Priority	Low
Component	Dissection engine (libwireshark)
Assignee	bugzilla-admin@wireshark.org
Reporter	mareko.paliga@gmail.com

Created attachment 14775 [details]
GTP packet with NSAPI

Build Information:
TShark (Wireshark) 2.0.5 (b8dd0bc from master-2.0)

Copyright 1998-2016 Gerald Combs <gerald@wireshark.org> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with libpcap, without POSIX capabilities, without libnl, with
libz 1.2.3, with GLib 2.44.1, without SMI, without c-ares, without ADNS, with
Lua 5.1, without GnuTLS, without Gcrypt, with MIT Kerberos, without GeoIP.

Running on Linux 2.6.32-220.7.1.el6.x86_64, with locale en_US.UTF-8, with
libpcap version 1.7.2, with libz 1.2.3.
Intel(R) Xeon(R) CPU           X3440  @ 2.53GHz (with SSE4.2)

Built using gcc 4.4.7 20120313 (Red Hat 4.4.7-11).

--
It seems that changes in function decode_gtp_nsapi (packet-gtp.c) broke
decoding of NSAPI.

Wireshark 2.0.4 decodes it properly but version 2.0.5 says it is malformed
packet. Please see the attached pcap.

---

      You are receiving this mail because:

• You are watching all bug changes.