Wireshark-bugs: [Wireshark-bugs] [Bug 13238] MPEG TS Parser stops parsing entire IP packet on MP
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 22 Dec 2016 22:12:30 +0000

Comment # 7 on bug 13238 from 
(In reply to Jeremy from comment #3)
> I've attached the relevant parts of the spec for PMT and descriptors.
> 
> The descriptors have a 1 byte tag followed by a 1 byte length field,
> followed by length bytes. In the case of 0xA2 in this packet it is followed
> by a length field of 1 followed by a single byte of 0.

What I wanted to confirm was that there was a length field to be honored.  The
dissector assumes at least 5 bytes will be present, but it sounds like we
should use the length field as well.

> 0xA2 is in the User Private tag range and is not defined in the spec. Unless
> Wireshark has more detailed knowledge of that tag it should simply skip over
> it I think, or at the least if it errors in parsing what it thinks that
> descriptor tag should be it should only skip that section and use the length
> field to move on.

Looking at the code, the spec reference for 0xA2 is coming from ETSI EN 301 790

You are receiving this mail because:
  • You are watching all bug changes.