Ethereal-users: Re: [Ethereal-users] MAPI decode / GLIB Error

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 9 May 2003 19:21:05 -0700
On Thu, May 08, 2003 at 12:32:14PM -0700, Guy Harris wrote:
> On Thu, May 08, 2003 at 07:12:05PM +0100, Alistair.McGlinchy@xxxxxxxxxxxxxxxxxxxxx wrote:
> > This trace does not load in either ethereal or tethereal 0.9.11,  but can be
> > read by WinDump. It also can be read by Ethereal 0.9.6, which recognises
> > this as MAPI, but believes the 3rd frame is malformed.
> 
> Yes, the "actual count" field of the array of the second string in a
> MAPI logon reply appears to be something other than a byte/character
> count for that array, so the MAPI dissector is probably wrong there.

It is.

There's also a deficiency in the DCE RPC dissector that causes a crash
when the MAPI dissector problem is seen.

I've checked in fixes for both of those problems.