Wireshark-bugs: [Wireshark-bugs] [Bug 5081] New: Uninitialised pointer in packet-rtsp.c causes c
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Fri, 6 Aug 2010 04:43:24 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5081

           Summary: Uninitialised pointer in packet-rtsp.c causes crash
           Product: Wireshark
           Version: SVN
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: jsethdev@xxxxxxxxxxxxxxxxxxxx


Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
The RTSP dissector fails to zero out its list of dissectors for each data
channel. This means a server sending data on a channel without first setting it
up properly will cause WS to dereference uninitialised memory.

MS-RTSP as used by WMS in particular triggers this: the packet-pair experiment
for bandwidth estimation which happens at the beginning of every RTSP-over-TCP
connection sends data out on channel 80 ('P') without prior arrangement (it's
defined as part of the spec: see
http://download.microsoft.com/download/9/5/E/95EF66AF-9026-4BB0-A41D-A4F81802D92C/%5BMS-RTSP%5D.pdf
§4.4.3 page 100.)

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.