Wireshark-bugs: [Wireshark-bugs] [Bug 11728] New: Malformed packet with IPv6 mobility header
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 19 Nov 2015 10:56:28 +0000
Bug ID 11728
Summary Malformed packet with IPv6 mobility header
Product Wireshark
Version 2.0.0
Hardware All
OS All
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter pjmarron@locoslab.com 

Build Information:
Wireshark 2.0.0 (SVN Rev Unknown from unknown)

Copyright 1998-2015 Gerald Combs <gerald@wireshark.org> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 3.10.8, with Cairo 1.12.16, with Pango 1.36.3, with
libpcap, with POSIX capabilities (Linux), with libnl 3, with libz 1.2.8, with
GLib 2.38.2, without SMI, without c-ares, without ADNS, with Lua 5.1, with
GnuTLS 2.12.23, with Gcrypt 1.5.3, with MIT Kerberos, without GeoIP, without
PortAudio, without AirPcap.

Running on Linux 3.12.13-gentoo, with locale en_US.ISO-8859-1, with libpcap
version 1.6.2, with libz 1.2.8, with GnuTLS 2.12.23, with Gcrypt 1.5.3.
Intel(R) Core(TM) i7-4550U CPU @ 1.50GHz (with SSE4.2)

Built using gcc 4.7.3.

--
The following packet containing a mobility header generates a Malformed Packet
exception. The reason appears to be that the 6lowpan dissector expects further
bytes after the mobility header and, since there is no additional payload, the
dissector generates an exception.

6LoWPAN
    IPHC Header
        011. .... = Pattern: IP header compression (0x03)
        ...1 1... .... .... = Traffic class and flow label: Version, traffic
class, and flow label compressed (0x0003)
        .... .1.. .... .... = Next header: Compressed
        .... ..11 .... .... = Hop limit: 255 (0x0003)
        .... .... 0... .... = Context identifier extension: False
        .... .... .0.. .... = Source address compression: Stateless
        .... .... ..00 .... = Source address mode: Inline (0x0000)
        .... .... .... 0... = Multicast address compression: False
        .... .... .... .1.. = Destination address compression: Stateful
        .... .... .... ..01 = Destination address mode: 64-bits inline (0x0001)
        [Destination context: fd11:2233:4455:3fe2:34::]
    Source: fd11:2233:4455:1:781d:ff:fe00:2a
    Destination: fd11:2233:4455:3fe2:34:9ff:fe41:8506
    IPv6 extension header
        1110 .... = Pattern: IPv6 extension header (0x0e)
        .... 100. = Header ID: IPv6 mobility header (0x04)
        .... ...0 = Next header: Inline
        Next header: No Next Header for IPv6 (0x3b)
        Header length: 6
        Data (6 bytes)
0000  ff 00 aa aa 01 00                                 ......
            Data: ff00aaaa0100
            [Length: 6]
[Malformed Packet: 6LoWPAN]
    [Expert Info (Error/Malformed): Malformed Packet (Exception occurred)]
        [Malformed Packet (Exception occurred)]
        [Severity level: Error]
        [Group: Malformed]

You are receiving this mail because:
  • You are watching all bug changes.