Wireshark-bugs: [Wireshark-bugs] [Bug 8735] USB CCID dissector "runs off the rails" when trying
Date: Thu, 30 May 2013 20:06:40 +0000

Comment # 7 on bug 8735 from
FWIW, the incorrect dissection seems to manifest as the following, for me:

No.     Time        Source                Destination           Protocol Length 
   3142 378.680765  Card                  Interface             ISO 7816 74    
[Malformed Packet]

Frame 3142: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
    Encapsulation type: USB packets with Linux header and padding (115)
    Arrival Time: Oct 27, 2011 15:22:18.653860000 BST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1319725338.653860000 seconds
    [Time delta from previous captured frame: 0.002931000 seconds]
    [Time delta from previous displayed frame: 29.715440000 seconds]
    [Time since reference or first frame: 378.680765000 seconds]
    Frame Number: 3142
    Frame Length: 74 bytes (592 bits)
    Capture Length: 74 bytes (592 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: usb:usbccid:iso7816:iso7816.atr]
USB URB
    URB id: 0x00000000f3b9cb80
    URB type: URB_COMPLETE ('C')
    URB transfer type: URB_BULK (0x03)
    Endpoint: 0x82, Direction: IN
        1... .... = Direction: IN (1)
        .000 0010 = Endpoint value: 2
    Device: 12
    URB bus id: 2
    Device setup request: not relevant ('-')
    Data: present (0)
    URB sec: 1319725338
    URB usec: 653860
    URB status: Success (0)
    URB length [bytes]: 10
    Data length [bytes]: 10
    [Request in: 3141]
    [Time from request: 0.002931000 seconds]
    [bInterfaceClass: Smart Card (0x0b)]
USB CCID
    Message Type: RDR_to_PC_DataBlock (0x80)
    Packet Length: 0
    Slot: 0
    Sequence: 9
    Status: 64
    Error: 254
    Chain Parameter: 0
ISO 7816
[Malformed Packet: ISO 7816-3]
    [Expert Info (Error/Malformed): Malformed Packet (Exception occurred)]
        [Message: Malformed Packet (Exception occurred)]
        [Severity level: Error]
        [Group: Malformed]


You are receiving this mail because:
  • You are watching all bug changes.