[Wireshark-bugs] [Bug 14465] Valid packet produces Malformed Packet: OpcUa

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14465 --- Comment #12 from Gerrit Code Review --- Change 28714 merged by Guy Harris: OpcUa: fix in function getExtensionObjectType https://code.wireshark.org/review/28714 -- You are receiving this mail because: You are watching all bug

[Wireshark-bugs] [Bug 14465] Valid packet produces Malformed Packet: OpcUa

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14465 --- Comment #11 from Gerrit Code Review --- Change 28714 had a related patch set uploaded by Guy Harris: OpcUa: fix in function getExtensionObjectType https://code.wireshark.org/review/28714 -- You are receiving this mail because: You

[Wireshark-bugs] [Bug 14465] Valid packet produces Malformed Packet: OpcUa

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14465 Michael Mann changed: What|Removed |Added Status|IN_PROGRESS |RESOLVED Resolution|---

[Wireshark-bugs] [Bug 14465] Valid packet produces Malformed Packet: OpcUa

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14465 --- Comment #10 from Gerrit Code Review --- Change 28328 merged by Anders Broman: OpcUa: fix in function getExtensionObjectType https://code.wireshark.org/review/28328 -- You are receiving this mail because: You are watching all bug

[Wireshark-bugs] [Bug 14465] Valid packet produces Malformed Packet: OpcUa

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14465 --- Comment #9 from Gerrit Code Review --- Change 28328 had a related patch set uploaded by Erika Szelleová: OpcUa: fix in function getExtensionObjectType https://code.wireshark.org/review/28328 -- You are receiving this mail because:

[Wireshark-bugs] [Bug 14465] Valid packet produces Malformed Packet: OpcUa

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14465 --- Comment #8 from Erika Szelleova --- I think I have found the culprit. The function tried to read the value "numeric" (in this case: Identifier) but it tried to read the incorrect bytes (it moved 4 bytes to the right from the value

[Wireshark-bugs] [Bug 14465] Valid packet produces Malformed Packet: OpcUa

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14465 --- Comment #7 from Mark Giraud --- The 8 bytes should be parsed as something like this: ###[ UaExtensionObject ]### \TypeId\ |###[ UaNumericNodeId ]### | Encoding = 2 | Namespace = 0 | Identifier= 0 Encoding =

[Wireshark-bugs] [Bug 14465] Valid packet produces Malformed Packet: OpcUa

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14465 --- Comment #6 from Mark Giraud --- The last 8 bytes should be dissected as en ExtensionObject. This should be possible without any issues, since they are b'\x02\x00\x00\x00\x00\x00\x00\x00' I think there might be some kind of issue in

[Wireshark-bugs] [Bug 14465] Valid packet produces Malformed Packet: OpcUa

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14465 --- Comment #5 from Erika Szelleova --- OK, so the problem is that the AdditionalHeader is parsed as an ExtensionObject, however, according to the spec. it should be reserved for future use (see Part 4 p. 146). While parsing, the

[Wireshark-bugs] [Bug 14465] Valid packet produces Malformed Packet: OpcUa

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14465 Erika Szelleova changed: What|Removed |Added Status|INCOMPLETE |IN_PROGRESS

[Wireshark-bugs] [Bug 14465] Valid packet produces Malformed Packet: OpcUa

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14465 --- Comment #2 from Mark Giraud --- Created attachment 16182 --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=16182=edit Short opc ua pcap with malformed packet -- You are receiving this mail because:

[Wireshark-bugs] [Bug 14465] Valid packet produces Malformed Packet: OpcUa

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14465 Alexis La Goutte changed: What|Removed |Added Status|UNCONFIRMED