Wireshark-bugs: [Wireshark-bugs] [Bug 1958] New: HTTP parser limits with Content-Length
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 30 Oct 2007 18:33:02 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1958

           Summary: HTTP parser limits with Content-Length
           Product: Wireshark
           Version: 0.99.6
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Trivial
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: drlisandroalvarez@xxxxxxxxxxx


Build Information:
Version 0.99.6a (SVN Rev 22276)

Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.10.12, with GLib 2.12.12, with WinPcap (version unknown),
with libz 1.2.3, with libpcre 6.4, with Net-SNMP 5.4, with ADNS, with Lua 5.1,
with GnuTLS 1.6.1, with Gcrypt 1.2.3, with MIT Kerberos, with PortAudio
PortAudio V19-devel, with AirPcap.

Running on Windows XP Service Pack 2, build 2600, with WinPcap version 4.0.1
(packet.dll version 4.0.0.901), based on libpcap version 0.9.5, without
AirPcap.

Built using Microsoft Visual C++ 6.0 build 8804

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
The HTTP parser show Content-Length values greater or equal to 2^31 as
2147483647.

Here an example:

No.     Time        Source                Destination           Protocol Info
     15 10.126331   192.168.0.1           192.168.0.38          HTTP    
HTTP/1.1 200 OK

Frame 15 (230 bytes on wire, 230 bytes captured)
Ethernet II, Src: 02:e0:7d:ec:2a:ca (02:e0:7d:ec:2a:ca), Dst: Micro-St_d1:69:22
(00:11:09:d1:69:22)
Internet Protocol, Src: 192.168.0.1 (192.168.0.1), Dst: 192.168.0.38
(192.168.0.38)
Transmission Control Protocol, Src Port: http (80), Dst Port: 1300 (1300), Seq:
1, Ack: 65, Len: 176
Hypertext Transfer Protocol
    HTTP/1.1 200 OK\r\n
        Request Version: HTTP/1.1
        Response Code: 200
    Date: Tue, 30 Oct 2007 18:25:17 GMT\r\n
    Server: Apache/2.0.59 (Win32) PHP/5.2.1\r\n
    X-Powered-By: PHP/5.2.1\r\n
    Content-Length: 2147483647
    Content-Type: text/plain\r\n
    \r\n

0000  00 11 09 d1 69 22 02 e0 7d ec 2a ca 08 00 45 00   ....i"..}.*...E.
0010  00 d8 36 f6 40 00 80 06 41 b2 c0 a8 00 01 c0 a8   ..6.@...A.......
0020  00 26 00 50 05 14 d8 21 b2 80 b5 41 69 06 50 18   .&.P...!...Ai.P.
0030  ff bf 86 69 00 00 48 54 54 50 2f 31 2e 31 20 32   ...i..HTTP/1.1 2
0040  30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 54 75 65   00 OK..Date: Tue
0050  2c 20 33 30 20 4f 63 74 20 32 30 30 37 20 31 38   , 30 Oct 2007 18
0060  3a 32 35 3a 31 37 20 47 4d 54 0d 0a 53 65 72 76   :25:17 GMT..Serv
0070  65 72 3a 20 41 70 61 63 68 65 2f 32 2e 30 2e 35   er: Apache/2.0.5
0080  39 20 28 57 69 6e 33 32 29 20 50 48 50 2f 35 2e   9 (Win32) PHP/5.
0090  32 2e 31 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42   2.1..X-Powered-B
00a0  79 3a 20 50 48 50 2f 35 2e 32 2e 31 0d 0a 43 6f   y: PHP/5.2.1..Co
00b0  6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 35   ntent-Length: 85
00c0  38 39 39 33 34 35 39 32 0d 0a 43 6f 6e 74 65 6e   89934592..Conten
00d0  74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61   t-Type: text/pla
00e0  69 6e 0d 0a 0d 0a                                 in....


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.