Wireshark-dev: Re: [Wireshark-dev] Should we check value_strings for NULL termination while reg
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Fri, 22 Sep 2006 00:20:43 +0200
Gilbert Ramirez wrote:

I believe we do this in the build-bot testing, by doing:

tshark -G values

Since that operation iterates across all the value_string arrays, a
non-terminated array will result in an error .... or at least it
should.

Is that enough testing?
Unsure. It can drive you mad if you develop a dissector and crash for that reason as there's no hint into that direction. It can take you hours of development time to find the cause.
So it's basically a tradeoff between ease of development (crash if the value_string isn't zero terminated) and program startup time (as this check obviously will require some time to be done).
The build-bot tests are (hopefully) done long after the dissector is developed and seems to work perfectly. So yes, it helps to make sure no security related bugs are introduced but no, it won't help much during development time of an (unexperienced) developer. 

Regards, ULFL