[Wireshark-bugs] [Bug 12919] Linux QT Wireshark can not save PDML file if no display filter is applied

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12919

Dirk  changed:

   What|Removed |Added

Summary|Linux QT Wireshark can not  |Linux QT Wireshark can not
   |save PDML file is no filter |save PDML file if no
   |is applied  |display filter is applied

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12919] New: Linux QT Wireshark can not save PDML file is no filter is applied

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12919

Bug ID: 12919
   Summary: Linux QT Wireshark can not save PDML file is no filter
is applied
   Product: Wireshark
   Version: 2.0.5
  Hardware: x86
OS: Linux (other)
Status: UNCONFIRMED
  Severity: Major
  Priority: Low
 Component: Qt UI
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: d...@cubic.org

Build Information:
Version 2.0.5 (Git Rev Unknown from unknown)

Copyright 1998-2016 Gerald Combs  and contributors.
License GPLv2+: GNU GPL version 2 or later

This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 3.18.9, with Cairo 1.14.6, with Pango 1.38.1, with
libpcap, with POSIX capabilities (Linux), with libnl 3, with libz 1.2.8, with
GLib 2.46.2, without SMI, without c-ares, without ADNS, with Lua 5.1, with
GnuTLS 3.3.24, with Gcrypt 1.6.5, without Kerberos, without GeoIP, without
PortAudio, without AirPcap.

Running on Linux 4.4.6-gentoo, with locale en_US.utf8, with libpcap version
1.7.4, with libz 1.2.8, with GnuTLS 3.3.24, with Gcrypt 1.7.3.
AMD Athlon(tm) 64 X2 Dual Core Processor 4800+

Built using gcc 4.9.3.

--
GTK Wireshark can use the dialog File->Export Packet Dissections->As XML PDML
when it is displaying some network packets. The dialog then allows to choose
whichs packets should be saved (captured, displayed, all packets, selected
packets, etc). This all works as expected.

In QT Wireshark however the menu File->Export Packet Dissections is greyed out,
if no display filter is applied to the network packets. I can thus not save the
packets into any of the files offered by that sub menu. If I now apply a
filter, then this menu becomes available, I see the dialog box to choose which
packets to save (all, selected, captured, displayed, etc)

I expect in QT Wireshark to be able to access that sub menu even when no
display filter is applied.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12918] New: capture filters not saved to recently used list

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12918

Bug ID: 12918
   Summary: capture filters not saved to recently used list
   Product: Wireshark
   Version: 2.0.5
  Hardware: x86-64
OS: Windows 7
Status: UNCONFIRMED
  Severity: Normal
  Priority: Low
 Component: Qt UI
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: raysat...@yahoo.com

Build Information:
Version 2.0.5 (v2.0.5-0-ga3be9c6 from master-2.0)

Copyright 1998-2016 Gerald Combs  and contributors.
License GPLv2+: GNU GPL version 2 or later

This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with Qt 5.3.2, with WinPcap (4_1_3), with libz 1.2.8, with
GLib 2.42.0, with SMI 0.4.8, with c-ares 1.11.0, with Lua 5.2, with GnuTLS
3.2.15, with Gcrypt 1.6.2, with MIT Kerberos, with GeoIP, with QtMultimedia,
with AirPcap.

Running on 64-bit Windows 7 Service Pack 1, build 7601, with locale
English_United States.1252, with WinPcap version 4.1.3 (packet.dll version
4.1.0.2980), based on libpcap version 1.0 branch 1_0_rel0b (20091008), with
GnuTLS 3.2.15, with Gcrypt 1.6.2, without AirPcap.
--

When I select an adapter and set a capture filter and then run a capture, the
filter I set does not later appear in the recently used list. The list seems to
be frozen at 20 entries that no longer change. I thought I reported this
several months ago but I can't find it. I'm not sure what version this started
in.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12184] MATE AVPL match modes "Loose" and "Every" do not work correctly

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12184

Peter Wu  changed:

   What|Removed |Added

 Status|UNCONFIRMED |CONFIRMED
 CC||pe...@lekensteyn.nl
 Ever confirmed|0   |1

--- Comment #1 from Peter Wu  ---
(disclaimer: I started learning how to use MATE today, the following is an
interpretation of the Mate/Manual wiki page)

Definitions:
An operation AVP (Attribute Value Pair) is basically a condition.
An operation AVPL is basically a list of conditions.
A data AVP is basically data extracted from packets.
Below, "value" refers to the value from the data AVP which have the same
attribute as its condition.

Expected results:
Loose - there exist a condition with a matching value.
Every - for each condition, for all values it must match.
Strict - for each condition, there exist a matching value.

("Every" seems to resemble "for all" from set theory, "Strict" seems to
resemble "existence")


The code is buggy, "Loose" always matches (verified with source code).
"Every" matches nothing (perhaps it behaves more like "Strict"?)

Will have a look at fixing the logic.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12855] Follow TCP Stream shows duplicate stream data

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12855

--- Comment #6 from Pascal Quantin  ---
For both cases, 2.0.5 behavior seems better (as discussed in Gerrit I'm not a
fan of the reassembly happening despite missing packets).
Maybe that's why previous code was not simple ;)
IMHO the Follow TCP stream feature should not rely on the upper dissector
having TCP reassembly activated / supported or not.
Not sure how to move forward. Obviously the current handling needs more work,
and the previous code was working fine for those use cases. Should we revert
the change until a more solid version is available? Michael, what's your
opinion?

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12377] Qt: Hidden columns displayed during live capture

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12377

--- Comment #6 from Gerrit Code Review  ---
Change 17766 had a related patch set uploaded by Stig Bjørlykke:
Qt: Hide columns after setting widths

https://code.wireshark.org/review/17766

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12377] Qt: Hidden columns displayed during live capture

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12377

--- Comment #7 from Gerrit Code Review  ---
Change 17766 merged by Stig Bjørlykke:
Qt: Hide columns after setting widths

https://code.wireshark.org/review/17766

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12377] Qt: Hidden columns displayed during live capture

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12377

--- Comment #5 from Gerrit Code Review  ---
Change 17765 merged by Stig Bjørlykke:
Qt: Hide columns after setting widths

https://code.wireshark.org/review/17765

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12377] Qt: Hidden columns displayed during live capture

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12377

--- Comment #3 from Gerrit Code Review  ---
Change 17755 merged by Stig Bjørlykke:
Qt: Hide columns after setting widths

https://code.wireshark.org/review/17755

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12377] Qt: Hidden columns displayed during live capture

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12377

Gerrit Code Review  changed:

   What|Removed |Added

 Status|UNCONFIRMED |RESOLVED
 Resolution|--- |FIXED

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12377] Qt: Hidden columns displayed during live capture

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12377

--- Comment #4 from Gerrit Code Review  ---
Change 17765 had a related patch set uploaded by Stig Bjørlykke:
Qt: Hide columns after setting widths

https://code.wireshark.org/review/17765

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12917] Buildbot crash output: fuzz-2016-09-17-13908.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12917

Pascal Quantin  changed:

   What|Removed |Added

 Status|CONFIRMED   |RESOLVED
 CC||pascal.quan...@gmail.com
 Resolution|--- |DUPLICATE

--- Comment #1 from Pascal Quantin  ---


*** This bug has been marked as a duplicate of bug 12913 ***

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12913] Buildbot crash output: fuzz-2016-09-17-2264.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12913

--- Comment #5 from Pascal Quantin  ---
*** Bug 12917 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12913] Buildbot crash output: fuzz-2016-09-17-2264.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12913

Gerrit Code Review  changed:

   What|Removed |Added

 Status|CONFIRMED   |RESOLVED
 Resolution|--- |FIXED

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12913] Buildbot crash output: fuzz-2016-09-17-2264.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12913

--- Comment #4 from Gerrit Code Review  ---
Change 17760 merged by Guy Harris:
eap: make eap_identity_prefix a numeric item

https://code.wireshark.org/review/17760

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12917] New: Buildbot crash output: fuzz-2016-09-17-13908.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12917

Bug ID: 12917
   Summary: Buildbot crash output: fuzz-2016-09-17-13908.pcap
   Product: Wireshark
   Version: unspecified
  Hardware: x86-64
   URL: https://www.wireshark.org/download/automated/captures/
fuzz-2016-09-17-13908.pcap
OS: Ubuntu
Status: CONFIRMED
  Severity: Major
  Priority: High
 Component: Dissection engine (libwireshark)
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: buildbot-do-not-re...@wireshark.org

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2016-09-17-13908.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/11007-packet-loss.pcap

Build host information:
Linux wsbb04 4.4.0-34-generic #53-Ubuntu SMP Wed Jul 27 16:06:39 UTC 2016
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:Ubuntu
Description:Ubuntu 16.04.1 LTS
Release:16.04
Codename:xenial

Buildbot information:
BUILDBOT_REPOSITORY=ssh://wireshark-build...@code.wireshark.org:29418/wireshark
BUILDBOT_WORKERNAME=clang-code-analysis
BUILDBOT_BUILDNUMBER=3693
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-master/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_GOT_REVISION=983a9691a9ec18e29f045300dbb6d664c9da1635

Return value:  1

Dissector bug:  0

Valgrind error count:  0



Git commit
commit 983a9691a9ec18e29f045300dbb6d664c9da1635
Author: Martin Kaiser 
Date:   Sat Sep 17 19:10:35 2016 +0200

eap: (trivial) reformat a comment

Change-Id: I2c8a8066f1591004ace6362e24be57b6cec747d1
Reviewed-on: https://code.wireshark.org/review/17762
Reviewed-by: Martin Kaiser 


=
==19964==ERROR: AddressSanitizer: stack-buffer-overflow on address
0x7ffe14d852b1 at pc 0x00440f03 bp 0x7ffe14d84fb0 sp 0x7ffe14d84760
READ of size 7 at 0x7ffe14d852b1 thread T0
#0 0x440f02 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/bin/tshark+0x440f02)
#1 0x7f96514ee4f2  (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x684f2)
#2 0x7f9659806dd3 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7a04dd3)
#3 0x7f965973aba7 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7938ba7)
#4 0x7f965973b0ea 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x79390ea)
#5 0x7f9659c1b561 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7e19561)
#6 0x7f96596f583c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f383c)
#7 0x7f96596f36ac 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f16ac)
#8 0x7f964a185882 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/wireshark/plugins/2.3.0/wimax.so+0x138882)
#9 0x7f964a1720a3 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/wireshark/plugins/2.3.0/wimax.so+0x1250a3)
#10 0x7f96596f583c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f383c)
#11 0x7f96596f5b08 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f3b08)
#12 0x7f964a1664c4 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/wireshark/plugins/2.3.0/wimax.so+0x1194c4)
#13 0x7f96596f583c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f383c)
#14 0x7f96596f36ac 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f16ac)
#15 0x7f964a16496f 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/wireshark/plugins/2.3.0/wimax.so+0x11796f)
#16 0x7f96596f583c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f383c)
#17 0x7f96596f36ac 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f16ac)
#18 0x7f964a1621a2 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/wireshark/plugins/2.3.0/wimax.so+0x1151a2)
#19 0x7f96596f583c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f383c)
#20 0x7f96596f36ac 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f16ac)
#21 0x7f964a4ebac0 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/wireshark/plugins/2.3.0/m2m.so+0x6ac0)
#22 0x7f96596f583c 

[Wireshark-bugs] [Bug 12916] Buildbot crash output: fuzz-2016-09-17-3735.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12916

Guy Harris  changed:

   What|Removed |Added

 Status|CONFIRMED   |RESOLVED
 Resolution|--- |DUPLICATE

--- Comment #1 from Guy Harris  ---
I guess it's a duplicate - so how do we get, from ASan, a stack trace that's
something other than a byte salad of characters from the set [0-9a-fx] and the
string
"/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+",
so we can actually see where we're making the unsanitary references?

*** This bug has been marked as a duplicate of bug 12913 ***

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12913] Buildbot crash output: fuzz-2016-09-17-2264.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12913

--- Comment #3 from Guy Harris  ---
*** Bug 12916 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12916] New: Buildbot crash output: fuzz-2016-09-17-3735.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12916

Bug ID: 12916
   Summary: Buildbot crash output: fuzz-2016-09-17-3735.pcap
   Product: Wireshark
   Version: unspecified
  Hardware: x86-64
   URL: https://www.wireshark.org/download/automated/captures/
fuzz-2016-09-17-3735.pcap
OS: Ubuntu
Status: CONFIRMED
  Severity: Major
  Priority: High
 Component: Dissection engine (libwireshark)
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: buildbot-do-not-re...@wireshark.org

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2016-09-17-3735.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/11007-packet-loss.pcap

Build host information:
Linux wsbb04 4.4.0-34-generic #53-Ubuntu SMP Wed Jul 27 16:06:39 UTC 2016
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:Ubuntu
Description:Ubuntu 16.04.1 LTS
Release:16.04
Codename:xenial

Buildbot information:
BUILDBOT_REPOSITORY=ssh://wireshark-build...@code.wireshark.org:29418/wireshark
BUILDBOT_WORKERNAME=clang-code-analysis
BUILDBOT_BUILDNUMBER=3692
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-master/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_GOT_REVISION=c82303610d0727f938ec003aeec7c2c7cc4693f0

Return value:  1

Dissector bug:  0

Valgrind error count:  0



Git commit
commit c82303610d0727f938ec003aeec7c2c7cc4693f0
Author: Pascal Quantin 
Date:   Sat Sep 17 18:36:32 2016 +0200

ISUP: do not display Called Party Number twice

Bug: 12911
Change-Id: I3632ffbeb85a96d9268eca6ddc0f8b38587688c4
Reviewed-on: https://code.wireshark.org/review/17758
Reviewed-by: Pascal Quantin 


=
==9665==ERROR: AddressSanitizer: stack-buffer-overflow on address
0x7ffddbfbc951 at pc 0x00440f03 bp 0x7ffddbfbc650 sp 0x7ffddbfbbe00
READ of size 7 at 0x7ffddbfbc951 thread T0
#0 0x440f02 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/bin/tshark+0x440f02)
#1 0x7f6d5c1834f2  (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x684f2)
#2 0x7f6d6449bdd3 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7a04dd3)
#3 0x7f6d643cfba7 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7938ba7)
#4 0x7f6d643d00ea 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x79390ea)
#5 0x7f6d648b058d 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7e1958d)
#6 0x7f6d6438a83c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f383c)
#7 0x7f6d643886ac 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f16ac)
#8 0x7f6d54e1a882 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/wireshark/plugins/2.3.0/wimax.so+0x138882)
#9 0x7f6d54e070a3 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/wireshark/plugins/2.3.0/wimax.so+0x1250a3)
#10 0x7f6d6438a83c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f383c)
#11 0x7f6d6438ab08 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f3b08)
#12 0x7f6d54dfb4c4 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/wireshark/plugins/2.3.0/wimax.so+0x1194c4)
#13 0x7f6d6438a83c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f383c)
#14 0x7f6d643886ac 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f16ac)
#15 0x7f6d54df996f 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/wireshark/plugins/2.3.0/wimax.so+0x11796f)
#16 0x7f6d6438a83c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f383c)
#17 0x7f6d643886ac 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f16ac)
#18 0x7f6d54df71a2 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/wireshark/plugins/2.3.0/wimax.so+0x1151a2)
#19 0x7f6d6438a83c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f383c)
#20 0x7f6d643886ac 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f16ac)
#21 0x7f6d55180ac0 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/wireshark/plugins/2.3.0/m2m.so+0x6ac0)

[Wireshark-bugs] [Bug 12907] Option 82 suboption 12 is displayed as Unknown in linux version of tshark

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12907

Alexis La Goutte  changed:

   What|Removed |Added

 Status|UNCONFIRMED |CONFIRMED
 CC||alexis.lagou...@gmail.com
 Ever confirmed|0   |1

--- Comment #2 from Alexis La Goutte  ---
It is on RFC6925
http://www.iana.org/assignments/bootp-dhcp-parameters/bootp-dhcp-parameters.xhtml#relay-agent-sub-options

There is also suboption 13 to 18 also...

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12894] Packet Length column will re-appear after removal and restart of Wireshark

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12894

Stig Bjørlykke  changed:

   What|Removed |Added

 Status|UNCONFIRMED |RESOLVED
 CC||s...@bjorlykke.org
 Resolution|--- |DUPLICATE

--- Comment #1 from Stig Bjørlykke  ---
I think this is related to bug 12377.

*** This bug has been marked as a duplicate of bug 12377 ***

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12377] Qt: Hidden columns displayed during live capture

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12377

Stig Bjørlykke  changed:

   What|Removed |Added

 CC||suk...@schiebros.com

--- Comment #2 from Stig Bjørlykke  ---
*** Bug 12894 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12894] Packet Length column will re-appear after removal and restart of Wireshark

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12894

Martin Kaiser  changed:

   What|Removed |Added

 CC||wiresh...@kaiser.cx

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12907] Option 82 suboption 12 is displayed as Unknown in linux version of tshark

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12907

--- Comment #1 from Martin Kaiser  ---
It looks like option 82, suboption 12 is not supported. I can't see any code
for dissecting this option.

Could you point us to a specification where suboption 12 is defined?
All I managed to dig up was
http://www.networksorcery.com/enp/protocol/bootp/option082.htm
which does not mention suboption 12.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12907] Option 82 suboption 12 is displayed as Unknown in linux version of tshark

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12907

Martin Kaiser  changed:

   What|Removed |Added

 CC||wiresh...@kaiser.cx
Summary|Option 83 suboption 12 is   |Option 82 suboption 12 is
   |displayed as Unknown in |displayed as Unknown in
   |linux version of tshark |linux version of tshark

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12913] Buildbot crash output: fuzz-2016-09-17-2264.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12913

--- Comment #2 from Martin Kaiser  ---
*** Bug 12914 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12914] Buildbot crash output: fuzz-2016-09-17-25060.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12914

Martin Kaiser  changed:

   What|Removed |Added

 Status|CONFIRMED   |RESOLVED
 CC||wiresh...@kaiser.cx
 Resolution|--- |DUPLICATE

--- Comment #1 from Martin Kaiser  ---


*** This bug has been marked as a duplicate of bug 12913 ***

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12915] New: SMB2 MessageId should be stored and rendered as an unsigned 64-bit integer

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12915

Bug ID: 12915
   Summary: SMB2 MessageId should be stored and rendered as an
unsigned 64-bit integer
   Product: Wireshark
   Version: Git
  Hardware: x86
OS: Windows 7
Status: UNCONFIRMED
  Severity: Minor
  Priority: Low
 Component: Dissection engine (libwireshark)
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: paul.off...@advance7.com

Build Information:
Version 2.3.0-Syncro (v2.3.0rc0-545-g85b20f7 from unknown)

Copyright 1998-2016 Gerald Combs  and contributors.
License GPLv2+: GNU GPL version 2 or later

This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with Qt 5.5.1, with WinPcap (4_1_3), with GLib 2.42.0, with
zlib 1.2.8, with SMI 0.4.8, with c-ares 1.11.0, with Lua 5.2.4, with GnuTLS
3.2.15, with Gcrypt 1.6.2, with MIT Kerberos, with GeoIP, with QtMultimedia,
with AirPcap.

Running on 64-bit Windows 7 Service Pack 1, build 7601, with locale
English_United Kingdom.1252, with WinPcap version 4.1.3 (packet.dll version
4.1.0.2980), based on libpcap version 1.0 branch 1_0_rel0b (20091008), with
GnuTLS 3.2.15, with Gcrypt 1.6.2, with AirPcap 4.1.0 build 1622.
Intel(R) Core(TM) i5-5300U CPU @ 2.30GHz (with SSE4.2), with 8082MB of physical
memory.


Built using Microsoft Visual C++ 12.0 build 40629

Wireshark is Open Source Software released under the GNU General Public
License.
--
In packet-smb2.h and packet-smb2.c the SMB2 MessageId is defined as a signed
64-bit integer.

packet-smb2.h
--
typedef struct _smb2_info_t {
guint16 opcode;
guint32 ioctl_function;
guint32 status;
guint32 tid;
guint64 sesid;
gint64  msg_id;
guint32 flags;
smb2_eo_file_info_t   *eo_file_info; /* eo_smb extra info */
smb2_conv_info_t   *conv;
smb2_saved_info_t *saved;
smb2_tid_info_t  *tree;
smb2_sesid_info_t   *session;
smb2_fid_info_t  *file;
proto_tree *top_tree;
} smb2_info_t;

packet-smb2.c
--
{ _smb2_msg_id,
{ "Message ID", "smb2.msg_id", FT_INT64, BASE_DEC,
NULL, 0, "SMB2 Message ID", HFILL }
},

I believe MessageId should be an unsigned 64-bit integer.  Although the
[MS-SMB2] document isn’t specific, Microsoft Message Analyzer defines the field
as UInt64.

It’s not a big deal but it does mean that filtering for a range of MessageIds
won’t work as expected for very large values.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12914] New: Buildbot crash output: fuzz-2016-09-17-25060.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12914

Bug ID: 12914
   Summary: Buildbot crash output: fuzz-2016-09-17-25060.pcap
   Product: Wireshark
   Version: unspecified
  Hardware: x86-64
   URL: https://www.wireshark.org/download/automated/captures/
fuzz-2016-09-17-25060.pcap
OS: Ubuntu
Status: CONFIRMED
  Severity: Major
  Priority: High
 Component: Dissection engine (libwireshark)
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: buildbot-do-not-re...@wireshark.org

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2016-09-17-25060.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/11007-packet-loss.pcap

Build host information:
Linux wsbb04 4.4.0-34-generic #53-Ubuntu SMP Wed Jul 27 16:06:39 UTC 2016
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:Ubuntu
Description:Ubuntu 16.04.1 LTS
Release:16.04
Codename:xenial

Buildbot information:
BUILDBOT_REPOSITORY=ssh://wireshark-build...@code.wireshark.org:29418/wireshark
BUILDBOT_WORKERNAME=clang-code-analysis
BUILDBOT_BUILDNUMBER=3691
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-master/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_GOT_REVISION=22257e8cf5a497cd16dd7336a9b8dd224285ee39

Return value:  1

Dissector bug:  0

Valgrind error count:  0



Git commit
commit 22257e8cf5a497cd16dd7336a9b8dd224285ee39
Author: Pascal Quantin 
Date:   Fri Sep 16 22:15:57 2016 +0200

p_XXX_proto_data: only allow the use of pinfo and file scopes

Those are the only ones meaningful. Let's convert the buggy dissectors
and add an assert to avoid the misuse of the pool parameter in the future

Change-Id: I65f470b757f163f11a25cd352ffe168d1f8a86d3
Reviewed-on: https://code.wireshark.org/review/17748
Petri-Dish: Pascal Quantin 
Tested-by: Petri Dish Buildbot 
Reviewed-by: Pascal Quantin 


=
==31686==ERROR: AddressSanitizer: stack-buffer-overflow on address
0x7ffe404c2c51 at pc 0x00440f03 bp 0x7ffe404c2950 sp 0x7ffe404c2100
READ of size 7 at 0x7ffe404c2c51 thread T0
#0 0x440f02 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/bin/tshark+0x440f02)
#1 0x7fb8a1bea4f2  (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x684f2)
#2 0x7fb8a9f02dd3 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7a04dd3)
#3 0x7fb8a9e36ba7 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7938ba7)
#4 0x7fb8a9e370ea 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x79390ea)
#5 0x7fb8aa31758d 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7e1958d)
#6 0x7fb8a9df183c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f383c)
#7 0x7fb8a9def6ac 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f16ac)
#8 0x7fb89a881882 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/wireshark/plugins/2.3.0/wimax.so+0x138882)
#9 0x7fb89a86e0a3 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/wireshark/plugins/2.3.0/wimax.so+0x1250a3)
#10 0x7fb8a9df183c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f383c)
#11 0x7fb8a9df1b08 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f3b08)
#12 0x7fb89a8624c4 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/wireshark/plugins/2.3.0/wimax.so+0x1194c4)
#13 0x7fb8a9df183c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f383c)
#14 0x7fb8a9def6ac 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f16ac)
#15 0x7fb89a86096f 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/wireshark/plugins/2.3.0/wimax.so+0x11796f)
#16 0x7fb8a9df183c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f383c)
#17 0x7fb8a9def6ac 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f16ac)
#18 0x7fb89a85e1a2 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/wireshark/plugins/2.3.0/wimax.so+0x1151a2)
#19 0x7fb8a9df183c 

[Wireshark-bugs] [Bug 12913] Buildbot crash output: fuzz-2016-09-17-2264.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12913

--- Comment #1 from Gerrit Code Review  ---
Change 17760 had a related patch set uploaded by Martin Kaiser:
eap: make eap_identity_prefix a numeric item

https://code.wireshark.org/review/17760

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12911] Decoding/Display of an INAP CONNECT message goes wrong for the Destination Routing Address part.

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12911

--- Comment #5 from Gerrit Code Review  ---
Change 17759 merged by Pascal Quantin:
ISUP: do not display Called Party Number twice

https://code.wireshark.org/review/17759

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12911] Decoding/Display of an INAP CONNECT message goes wrong for the Destination Routing Address part.

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12911

--- Comment #4 from Gerrit Code Review  ---
Change 17759 had a related patch set uploaded by Pascal Quantin:
ISUP: do not display Called Party Number twice

https://code.wireshark.org/review/17759

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12911] Decoding/Display of an INAP CONNECT message goes wrong for the Destination Routing Address part.

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12911

Gerrit Code Review  changed:

   What|Removed |Added

 Status|IN_PROGRESS |RESOLVED
 Resolution|--- |FIXED

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12911] Decoding/Display of an INAP CONNECT message goes wrong for the Destination Routing Address part.

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12911

--- Comment #2 from Gerrit Code Review  ---
Change 17758 had a related patch set uploaded by Pascal Quantin:
ISUP: do not display Called Party Number twice

https://code.wireshark.org/review/17758

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12911] Decoding/Display of an INAP CONNECT message goes wrong for the Destination Routing Address part.

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12911

Pascal Quantin  changed:

   What|Removed |Added

 Status|CONFIRMED   |IN_PROGRESS
 CC||pascal.quan...@gmail.com

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12913] New: Buildbot crash output: fuzz-2016-09-17-2264.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12913

Bug ID: 12913
   Summary: Buildbot crash output: fuzz-2016-09-17-2264.pcap
   Product: Wireshark
   Version: unspecified
  Hardware: x86-64
   URL: https://www.wireshark.org/download/automated/captures/
fuzz-2016-09-17-2264.pcap
OS: Ubuntu
Status: CONFIRMED
  Severity: Major
  Priority: High
 Component: Dissection engine (libwireshark)
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: buildbot-do-not-re...@wireshark.org

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2016-09-17-2264.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/1134-jensb-wpsdata.cap

Build host information:
Linux wsbb04 4.4.0-34-generic #53-Ubuntu SMP Wed Jul 27 16:06:39 UTC 2016
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:Ubuntu
Description:Ubuntu 16.04.1 LTS
Release:16.04
Codename:xenial

Buildbot information:
BUILDBOT_REPOSITORY=ssh://wireshark-build...@code.wireshark.org:29418/wireshark
BUILDBOT_WORKERNAME=clang-code-analysis
BUILDBOT_BUILDNUMBER=3690
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-master/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_GOT_REVISION=2832f4e97d77324b4e46aac40dae0ce898ae559d

Return value:  1

Dissector bug:  0

Valgrind error count:  0



Git commit
commit 2832f4e97d77324b4e46aac40dae0ce898ae559d
Author: Pascal Quantin 
Date:   Fri Sep 16 20:59:06 2016 +0200

NSIS: add UDPdump to installer

Change-Id: Ic340d7de5de2573bf1e4ee97c8f7ef9af822d225
Reviewed-on: https://code.wireshark.org/review/17746
Petri-Dish: Pascal Quantin 
Reviewed-by: Alexis La Goutte 
Tested-by: Petri Dish Buildbot 
Reviewed-by: Pascal Quantin 


=
==11462==ERROR: AddressSanitizer: stack-buffer-overflow on address
0x7ffe5fe20b11 at pc 0x00440f03 bp 0x7ffe5fe20810 sp 0x7ffe5fe1ffc0
READ of size 4 at 0x7ffe5fe20b11 thread T0
#0 0x440f02 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/bin/tshark+0x440f02)
#1 0x7fad947104f2  (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x684f2)
#2 0x7fad9ca28af3 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7a04af3)
#3 0x7fad9c95ca47 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7938a47)
#4 0x7fad9c95cf8a 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7938f8a)
#5 0x7fad9ce3cdad 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7e18dad)
#6 0x7fad9c9176dc 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f36dc)
#7 0x7fad9c91554c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f154c)
#8 0x7fad9ce3e759 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7e1a759)
#9 0x7fad9c9176dc 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f36dc)
#10 0x7fad9c9179a8 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f39a8)
#11 0x7fad9d161b46 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x813db46)
#12 0x7fad9d162047 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x813e047)
#13 0x7fad9c9176dc 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f36dc)
#14 0x7fad9c91554c 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f154c)
#15 0x7fad9d023f72 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x772)
#16 0x7fad9d01c73a 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7ff873a)
#17 0x7fad9c9176dc 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f36dc)
#18 0x7fad9c9173aa 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f33aa)
#19 0x7fad9cec2fcf 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x7e9efcf)
#20 0x7fad9c9176dc 
(/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install/lib/libwireshark.so.0+0x78f36dc)
#21 0x7fad9c91554c 

[Wireshark-bugs] [Bug 12911] Decoding/Display of an INAP CONNECT message goes wrong for the Destination Routing Address part.

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12911

Jaap Keuter  changed:

   What|Removed |Added

 Status|UNCONFIRMED |CONFIRMED
 Ever confirmed|0   |1

--- Comment #1 from Jaap Keuter  ---
To clarify, it's the field marked 'Called Party Number', not
'CalledPartyNumber'.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12855] Follow TCP Stream shows duplicate stream data

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12855

Peter Wu  changed:

   What|Removed |Added

 CC||mman...@netscape.net,
   ||pascal.quan...@gmail.com

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12855] Follow TCP Stream shows duplicate stream data

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12855

--- Comment #5 from Peter Wu  ---
Created attachment 14928
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=14928=edit
crafted packet with retransmitted and out-of-order packets (http)

Another minimal case with HTTP (because that one sets the expected reassembled
size). Created using a modified version of the previous script:
https://git.lekensteyn.nl/peter/wireshark-notes/tree/crafted-pkt/make-tcp.py?id=5a17d2a0a3aa6d7a672bd7cb4bf1362f2ede81e9

tshark 2.0.5:
===
Follow: tcp,hex
Filter: tcp.stream eq 0
Node 0: 10.0.0.1:32323
Node 1: 10.0.0.2:80
  50 55 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  PUT / HT TP/1.1..
0010  43 6f 6e 74 65 6e 74 2d  4c 65 6e 67 74 68 3a 20  Content- Length:
0020  36 0d 0a  6..
0023  0d 0a ..
0025  31 0a 1.
0027  32 0a 2.
0029  33 0a 3.
===

tshark master:
===
Follow: tcp,hex
Filter: tcp.stream eq 0
Node 0: 10.0.0.1:32323
Node 1: 10.0.0.2:80
0010  50 55 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  PUT / HT TP/1.1..
0020  50 55 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  PUT / HT TP/1.1..
0030  50 55 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  PUT / HT TP/1.1..
0040  43 6f 6e 74 65 6e 74 2d  4c 65 6e 67 74 68 3a 20  Content- Length:
0050  36 0d 0a  6..
0053  43 6f 6e 74 65 6e 74 2d  4c 65 6e 67 74 68 3a 20  Content- Length:
0063  36 0d 0a  6..
0066  50 55 54 20 2f 20 48 54  54 50 2f 31 2e 31 0d 0a  PUT / HT TP/1.1..
0076  43 6f 6e 74 65 6e 74 2d  4c 65 6e 67 74 68 3a 20  Content- Length:
0086  36 0d 0a 0d 0a6
008B  0d 0a ..
008D  32 0a 2.
008F  33 0a 3.
===

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12855] Follow TCP Stream shows duplicate stream data

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12855

Peter Wu  changed:

   What|Removed |Added

 CC||pe...@lekensteyn.nl

--- Comment #4 from Peter Wu  ---
Created attachment 14927
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=14927=edit
crafted packet with retransmitted, out-of-order and missing packets

Another example where the new Follow TCP method produces strange
results. This capture was created using Scapy, source is at
https://git.lekensteyn.nl/peter/wireshark-notes/tree/crafted-pkt/make-tcp.py?id=c77414b056e7c9bcc91c9256b463c75e4992e076

tshark -r tcp9.pcap -z follow,tcp,hex,0

tshark 2.0.5:
===
Follow: tcp,hex
Filter: tcp.stream eq 0
Node 0: 10.0.0.1:32323
Node 1: 10.0.0.2:9
  46 69 72 73 74 0a First.
0006  53 65 63 6f 6e 64 0a  Second.
000D  54 68 69 72 64 0a Third.
0013  46 6f 75 72 74 68 0a  Fourth.
001A  46 69 66 74 68 0a Fifth.
===

tshark master:
===
Follow: tcp,hex
Filter: tcp.stream eq 0
Node 0: 10.0.0.1:32323
Node 1: 10.0.0.2:9
0006  53 65 63 6f 6e 64 0a  Second.
000D  46 6f 75 72 74 68 0a  Fourth.
0014  46 69 66 74 68 0a Fifth.
001A  4c 61 73 74 0aLast.
===

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12912] New: Buildbot crash output: randpkt-2016-09-17-20562.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12912

Bug ID: 12912
   Summary: Buildbot crash output: randpkt-2016-09-17-20562.pcap
   Product: Wireshark
   Version: unspecified
  Hardware: x86-64
   URL: https://www.wireshark.org/download/automated/captures/
randpkt-2016-09-17-20562.pcap
OS: Ubuntu
Status: CONFIRMED
  Severity: Major
  Priority: High
 Component: Dissection engine (libwireshark)
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: buildbot-do-not-re...@wireshark.org

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/randpkt-2016-09-17-20562.pcap

stderr:
Input file: 

Build host information:
Linux wsbb04 4.4.0-34-generic #53-Ubuntu SMP Wed Jul 27 16:06:39 UTC 2016
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID:Ubuntu
Description:Ubuntu 16.04.1 LTS
Release:16.04
Codename:xenial

Buildbot information:
BUILDBOT_REPOSITORY=ssh://wireshark-build...@code.wireshark.org:29418/wireshark
BUILDBOT_WORKERNAME=clang-code-analysis
BUILDBOT_BUILDNUMBER=3689
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-master/
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_GOT_REVISION=f674ef75d765a7933774b8659ca20ef0ef16e78d

Return value:  134

Dissector bug:  0

Valgrind error count: 




Command and args: ./tshark -nVxr

==20571==ERROR: AddressSanitizer failed to allocate 0x1000 (268435456)
bytes at address 7fff7000 (errno: 12)
==20571==ReserveShadowMemoryRange failed while trying to map 0x1000 bytes.
Perhaps you're using ulimit -v

[ no debug trace ]

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12911] New: Decoding/Display of an INAP CONNECT message goes wrong for the Destination Routing Address part.

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12911

Bug ID: 12911
   Summary: Decoding/Display of an INAP CONNECT message goes wrong
for the Destination Routing Address part.
   Product: Wireshark
   Version: 2.2.0
  Hardware: x86
OS: Windows 7
Status: UNCONFIRMED
  Severity: Normal
  Priority: Low
 Component: Dissection engine (libwireshark)
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: fpc.de...@xs4all.nl

Created attachment 14926
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=14926=edit
Single INAP message with DRA number digits show twice.

Build Information:
Version 2.2.0 (v2.2.0-0-g5368c50 from master-2.2)

Copyright 1998-2016 Gerald Combs  and contributors.
License GPLv2+: GNU GPL version 2 or later

This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with Qt 5.3.2, with WinPcap (4_1_3), with GLib 2.38.0, with
zlib 1.2.8, with SMI 0.4.8, with c-ares 1.11.0, with Lua 5.2.4, with GnuTLS
3.2.15, with Gcrypt 1.6.2, with MIT Kerberos, with GeoIP, with QtMultimedia,
with AirPcap.

Running on 32-bit Windows 7 Service Pack 1, build 7601, with locale
Dutch_Netherlands.1252, with WinPcap version 4.1.3 (packet.dll version
4.1.0.2980), based on libpcap version 1.0 branch 1_0_rel0b (20091008), with
GnuTLS 3.2.15, with Gcrypt 1.6.2, without AirPcap.
Intel(R) Core(TM)2 Duo CPU E8400  @ 3.00GHz, with 3547MB of physical
memory.


Built using Microsoft Visual C++ 12.0 build 40629

Wireshark is Open Source Software released under the GNU General Public
License.

--
Decoding/Display of an INAP CONNECT message goes wrong for the Destination
Routing Address part.

As can be seen in the attachment, the field CalledPartyNumber shows the digits
contained in this field as an ascii string.
However the string does show the digits-string twice.

Further detailed decoding below that, when "+" clicked, shows the correct
content, including the E.164 field at the bottom.

See the attachement for details. It is the single message from a larger trace.

= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =
Text export of the message:

No. Time SourceDestination   src port dst port
Protocol Info
 22 0.0444603  3311  2901 5   
INAP SACK End dtid(157b) sendChargingInformation connect 

Frame 22: 242 bytes on wire (1936 bits), 242 bytes captured (1936 bits)
Ethernet II, Src: CiscoInc_26:b2:10 (e4:c7:22:26:b2:10), Dst: AlcatelD_e2:d3:2b
(00:11:3f:e2:d3:2b)
Internet Protocol Version 4, Src: 10.45.246.66, Dst: 10.45.156.166
Stream Control Transmission Protocol, Src Port: 2901 (2901), Dst Port: 5
(5)
MTP 3 User Adaptation Layer
Signalling Connection Control Part
Transaction Capabilities Application Part
Intelligent Network Application Protocol
invoke
invokeId: present (0)
opcode: local (0)
SendChargingInformationArg
Intelligent Network Application Protocol
invoke
invokeId: present (0)
opcode: local (0)
ConnectArg
destinationRoutingAddress: 1 item
CalledPartyNumber: 7c1071004071674500f6
0...  = Odd/even indicator: even number of address signals
.111 1100 = Nature of address indicator: Unknown (124)
0...  = INN indicator: routing to internal network number
allowed 
.001  = Numbering plan indicator: ISDN (Telephony)
numbering plan (1)
Called Party Number: 170004177654006F170004177654006F
 0001 = Address signal digit: 1 (1)
0111  = Address signal digit: 7 (7)
  = Address signal digit: 0 (0)
  = Address signal digit: 0 (0)
  = Address signal digit: 0 (0)
0100  = Address signal digit: 4 (4)
  = Address signal digit: 0 (0)
  = Address signal digit: 0 (0)
  = Address signal digit: 0 (0)
  = Address signal digit: 0 (0)
 0001 = Address signal digit: 1 (1)
0111  = Address signal digit: 7 (7)
 0111 = Address signal digit: 7 (7)
0110  = Address signal digit: 6 (6)
 0101 = Address signal digit: 5 (5)
0100  = Address signal digit: 4 (4)
  = Address signal digit: 0 (0)
  = Address signal digit: 0 (0)
 0110 = Address 

[Wireshark-bugs] [Bug 12377] Qt: Hidden columns displayed during live capture

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12377

--- Comment #1 from Gerrit Code Review  ---
Change 17755 had a related patch set uploaded by Stig Bjørlykke:
Qt: Hide columns after setting widths

https://code.wireshark.org/review/17755

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 12377] Qt: Hidden columns displayed during live capture

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12377

Stig Bjørlykke  changed:

   What|Removed |Added

 CC||s...@bjorlykke.org

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe