Wireshark-bugs: [Wireshark-bugs] [Bug 11933] New: smb2_info_t structure isn't always passed down
| Bug ID |
11933
|
| Summary |
smb2_info_t structure isn't always passed down
|
| Product |
Wireshark
|
| Version |
Git
|
| Hardware |
All
|
| OS |
All
|
| Status |
CONFIRMED
|
| Severity |
Normal
|
| Priority |
Low
|
| Component |
Dissection engine (libwireshark)
|
| Assignee |
bugzilla-admin@wireshark.org
|
| Reporter |
mmann78@netscape.net
|
| CC |
metze@samba.org
|
Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
While investigating bug 11931, I noticed that I couldn't duplicate on master.
The reason is that the smb2_info_t structure isn't passed down to the MS-WSP
dissector. The functionality of dissect_smb2_FSCTL_PIPE_TRANSCEIVE() changed
with Ie6f28fd7, which ends up calling heuristic dissection with no "dissector
data". Since MS-WSP requires dissector data (smb2_info_t structure), it won't
hit the crash found by the fuzzbot.
I think the solution may be as simple as passing the dissector data through the
heuristic dissection attempt, but I'll let those more familiar with the
protocols ponder it.
You are receiving this mail because:
- You are watching all bug changes.
