Wireshark-bugs: [Wireshark-bugs] [Bug 6229] New: Contents of pcapng EnhancedPacketBlocks with co
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 10 Aug 2011 04:52:43 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6229

           Summary: Contents of pcapng EnhancedPacketBlocks with comments
                    aren't displayed
           Product: Wireshark
           Version: SVN
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Wireshark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: hphalle@xxxxxxxxxxx


Build Information:
Version 1.7.0 (SVN Rev 38444 from /trunk)

Copyright 1998-2011 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.20.1, with Cairo 1.8.10, with Pango 1.28.0, with
GLib 2.24.1, with libpcap 1.1.1, with libz 1.2.3, without POSIX capabilities,
with threads support, without libpcre, without SMI, without c-ares, without
ADNS, without Lua, without Python, without GnuTLS, without Gcrypt, with MIT
Kerberos, without GeoIP, without PortAudio, without AirPcap.

Running on Linux 2.6.34.10-0.2-desktop, with locale de_DE.UTF-8, with libpcap
version 1.1.1, with libz 1.2.3.

Built using gcc 4.5.0 20100604 [gcc-4_5-branch revision 160292].


--
If an EnhancedPacketBlock in a pcapng file contains a comment option the
content isn't displayed. Instead "Malformed packet" is displayed with the
reason Exception occurred.

The reason for the problem is a bug in the pcapng.c, where for enhanced packet
blocks, interface description blocks and interface statistics blocks the wrong
union members are used to set the comment. This way required fields in the
structures are overwritten.

The attached patch solves the problem.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.