Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 2069] H323 VoIP call, alias setting, mobileUIM aliases decode wrongly

[bugzilla-daemon@xxxxxxxxxxxxx]

http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2069





------- Comment #9 from anders.broman@xxxxxxxxxxxx  2007-12-27 12:19 GMT -------
Hi,
Looks like encoding faults by the application below is abstract from Wireshark
with ( edit-prefreences->protocols->per Decode internal per fileds set.).
ASN.1 extracts and my interpretation.
Regards
Anders

Frame 1

            integrity: 1 item
                Item 0
                    0... .... Extension Bit: False
                    Range = 4 Bitfield length 2, Choice Index: .10. ....
                    Choice Index: 2
                    Item: iso9797 (2)


Gatekeeper request:

integrity                    SEQUENCE OF IntegrityMechanism OPTIONAL,

IntegrityMechanism ::= CHOICE { -- for RAS message integrity
  nonStandard  NonStandardParameter,
  digSig       NULL, -- indicates to apply a digital signature
  iso9797      OBJECT IDENTIFIER, -- according to ISO/IEC 9797 using OID as

  -- core encryption algorithm (X-CBC MAC)
  nonIsoIM     NonIsoIntegrityMechanism,
  ...
}

A CHOICE value of 2 is iso9797, nonIsoIM should be 3....

Frame 3

                    Item: mobileUIM (6)
                        0... .... Extension Bit: False
                        Range = 2 Bitfield length 1, Choice Index: .0.. ....
                        Choice Index: 0
                        mobileUIM: ansi-41-uim (0)
                            ansi-41-uim
                                ..0. .... Extension Bit: False
                                ...1 .... Optional Field Bit: True (imsi is
present)
                                .... 0... Optional Field Bit: False (min is NOT
present)
                                .... .0.. Optional Field Bit: False (mdn is NOT
present)
                                .... ..0. Optional Field Bit: False (msisdn is
NOT present)
                                .... ...0 Optional Field Bit: False (esn is NOT
present)
                                0... .... Optional Field Bit: False (mscid is
NOT present)
                                .0.. .... Optional Field Bit: False
(systemMyTypeCode is NOT present)
                                ..0. .... Optional Field Bit: False
(systemAccessType is NOT present)
                                ...0 .... Optional Field Bit: False
(qualificationInformationCode is NOT present)
                                .... 0... Optional Field Bit: False (sesn is
NOT present)
                                .... .0.. Optional Field Bit: False (soc is NOT
present)
                                Octet String Length: 64
                                imsi:
11111111111111111#777#1c##2?##5###43##4c##26##11##10##11##0###25
                                0... .... Extension Bit: False
                                Range = 2 Bitfield length 1, Choice Index: .0..
....
                                Choice Index: 0
                                system-id: sid (0)
                                    Octet String Length: 97
                                    sid:
##52##43##49##43##43##5###43##50##0###4?##4c##0###4b##44##4?##52##52##43##49##47##4c##8c#*##1b06#

TBCD-STRING ::= IA5String(FROM ("0123456789#*abc"))

ANSI-41-UIM ::= SEQUENCE {
  imsi                          TBCD-STRING(SIZE (3..16)) OPTIONAL,
  min                           TBCD-STRING(SIZE (3..16)) OPTIONAL,
  mdn                           TBCD-STRING(SIZE (3..16)) OPTIONAL,
  msisdn                        TBCD-STRING(SIZE (3..16)) OPTIONAL,
  esn                           TBCD-STRING(SIZE (16)) OPTIONAL,
  mscid                         TBCD-STRING(SIZE (3..16)) OPTIONAL,
  system-id
    CHOICE {sid  TBCD-STRING(SIZE (1..4)),
            mid  TBCD-STRING(SIZE (1..4)),
            ...},
  systemMyTypeCode              OCTET STRING(SIZE (1)) OPTIONAL,
  systemAccessType              OCTET STRING(SIZE (1)) OPTIONAL,
  qualificationInformationCode  OCTET STRING(SIZE (1)) OPTIONAL,
  sesn                          TBCD-STRING(SIZE (16)) OPTIONAL,
  soc                           TBCD-STRING(SIZE (3..16)) OPTIONAL,
  ...
  -- IMSI refers to International Mobile Station Identification
  -- MIN refers to Mobile Identification Number
  -- MDN refers to Mobile Directory Number
  -- MSISDN refers to Mobile Station ISDN number
  -- ESN Refers to Electronic Serial Number 
  -- MSCID refers to Mobile Switching Center number + Market ID or System ID
  -- SID refers to System Identification and MID refers to Market 
  -- Identification
  -- SystemMyTypeCode refers to vendor identification number
  -- SystemAccessType refers to the system access type like power down 
  -- registration or call
  -- origination or Short Message response etc.
  -- Qualification Information Code refers to the validity
  -- SESN Refers to SIM Electronic Serial Number for Security purposes of User 
  -- Identification 
  -- SOC refers to System Operator Code
}

Lenght is wrong and should be encoded as a restricted_character_string...


Frame 7

                    additionalSourceAddresses: 1 item
                        Item 0
                            Item
                                0... .... Extension Bit: False
                                .1.. .... Optional Field Bit: True
(presentationIndicator is present)
                                ..1. .... Optional Field Bit: True
(screeningIndicator is present)
                                ...1 .... Extension Bit: True
                                .... 1... Small Number Bit: True
                                Choice Extension Index: 32
                                Open Type Length: 20
                                Choice no. 32 in extension
                                something unknown here [unknown choice
extension]


AliasAddress ::= CHOICE {
  dialedDigits  IA5String(SIZE (1..128))(FROM ("0123456789#*,")),
  h323-ID       BMPString(SIZE (1..256)), -- Basic ISO/IEC 10646-1 (Unicode)
  ...,
  url-ID        IA5String(SIZE (1..512)), -- URL style address
  transportID   TransportAddress,
  email-ID      IA5String(SIZE (1..512)), -- rfc822-compliant email address
  partyNumber   PartyNumber,
  mobileUIM     MobileUIM,
  isupNumber    IsupNumber
}


CHOICE should be 2(0x02) I suppose... not 0x20


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.