Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 10903] New: BSSGP Status PDU decoding fault (missing Mandatory element (0x04)

[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	10903
Summary	BSSGP Status PDU decoding fault (missing Mandatory element (0x04) BVCI for proper packet)
Product	Wireshark
Version	1.12.3
Hardware	x86-64
OS	Windows Server 2008 R2
Status	UNCONFIRMED
Severity	Minor
Priority	Low
Component	Dissection engine (libwireshark)
Assignee	bugzilla-admin@wireshark.org
Reporter	Przemyslaw.Librant@ericpol.com

Created attachment 13413 [details]
logfile showing the problem

Build Information:
Version 1.12.3 (v1.12.3-0-gbb3e9a0 from master-1.12)

Copyright 1998-2015 Gerald Combs <gerald@wireshark.org> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.24.23, with Cairo 1.10.2, with Pango 1.34.0, with
GLib 2.38.0, with WinPcap (4_1_3), with libz 1.2.5, with SMI 0.4.8, with c-ares
1.9.1, with Lua 5.2, without Python, with GnuTLS 3.2.15, with Gcrypt 1.6.2,
with
MIT Kerberos, with GeoIP, with PortAudio V19-devel (built Jan  7 2015), with
AirPcap.

Running on 64-bit Windows Server 2008R2 Service Pack 1, build 7601, without
WinPcap, GnuTLS 3.2.15, Gcrypt 1.6.2, without AirPcap,  from the PortableApps
U3
device in drive H:.
      Intel(R) Xeon(R) CPU E5-2650 v2 @ 2.60GHz, with 40955MB of physical
memory.


Built using Microsoft Visual C++ 10.0 build 40219
--
 Wireshark suggests "Missing Mandatory element (0x04) BVCI (BSSGP Virtual
Connection Identifier), rest of dissection is suspect" for a BSSGP STATUS PDU.
According to 3GPP TS 48.018 chapter "10.4.14 STATUS":

"This PDU indicates that an exception condition occurred.
PDU type:    STATUS
Direction:    SGSN to BSS, BSS to SGSN
Table 10.4.14: STATUS PDU content
Information elements    Type / Reference    Presence    Format    Length
PDU type    PDU type/11.3.26    M    V    1
Cause    Cause/11.3.8    M    TLV    3
BVCI    BVCI/11.3.6    C    TLV    4
PDU In Error (note)    PDU In Error/11.3.24    O    TLV    3-?
NOTE:    This is the whole PDU (starting with the [PDU type]) within which an
error was detected. This PDU may be truncated if it exceeds the information
carrying capacity of the underlying network service.

10.4.14.1    Static conditions for BVCI
The "BVCI" IE shall be included when the "Cause" IE is set to one of the
following values:
a)    "BVCI blocked";
b)    "BVCI unknown";
and shall not be included otherwise."

BVCI IE shall be included only when Cause IE is set to either "BVCI blocked" or
"BVCI unknown".
Cause IE in the attached packet is "Semantically incorrect PDU (32)".
According to 3gpp spec IE BVCI is not mandatory in this case.

---

      You are receiving this mail because:

• You are watching all bug changes.