Wireshark · Wireshark-users: [Wireshark-users] Regression in sccp fragments handling

[Ivan Nardi <nardi.ivan@xxxxxxxxx>]

Hi
I may have found a regression in sccp DT1 fragments handling in the
latest 2.2.6 version; everything is fine on 2.2.5 (version details
reported below).
Using the attached pcap, fragments in pkts 3 and 4 are not correctly
reassembled as a ranap id-RelocationResourceAllocation message anymore
Am I doing something wrong?
Let me know if you need further information
Best Regards
Ivan

PS: it's my first report: should I have filled a bug in bugzilla, instead?
PS: checksums in the pcaps may be wrong because of a hand-made effort
to anonymize some information


Version 2.2.6 (Git Rev Unknown from unknown)

Copyright 1998-2017 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is
NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR
PURPOSE.
Compiled (64-bit) with Qt 5.5.1, with libpcap, with POSIX capabilities
(Linux), with libnl 3, with GLib 2.48.2, with zlib 1.2.8, with SMI
0.4.8, with c-ares 1.10.0, with Lua 5.2.4, with GnuTLS 3.4.10, with
Gcrypt 1.6.5, with MIT Kerberos, with GeoIP, with nghttp2 1.7.1, with
QtMultimedia, without AirPcap.
Running on Linux 4.4.0-72-generic, with locale LC_CTYPE=en_US.UTF-8,
LC_NUMERIC=it_IT.UTF-8, LC_TIME=it_IT.UTF-8, LC_COLLATE=en_US.UTF-8,
LC_MONETARY=it_IT.UTF-8, LC_MESSAGES=en_US.UTF-8,
LC_PAPER=it_IT.UTF-8, LC_NAME=it_IT.UTF-8, LC_ADDRESS=it_IT.UTF-8,
LC_TELEPHONE=it_IT.UTF-8, LC_MEASUREMENT=it_IT.UTF-8,
LC_IDENTIFICATION=it_IT.UTF-8, with libpcap version 1.7.4, with GnuTLS
3.4.10, with Gcrypt 1.6.5, with zlib 1.2.8.

Intel(R) Core(TM) i7-4810MQ CPU @ 2.80GHz (with SSE4.2)
Built using gcc 5.4.0 20160609.




Version 2.2.5 (wireshark-2.2.5)

Copyright 1998-2017 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is
NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR
PURPOSE.
Compiled (64-bit) with Qt 4.8.7, with libpcap, without POSIX
capabilities, without libnl, with GLib 2.48.2, with zlib 1.2.8,
without SMI, without c-ares, without Lua, without GnuTLS, without
Gcrypt, with MIT Kerberos, without GeoIP, without QtMultimedia,
without AirPcap.
Running on Linux 4.4.0-72-generic, with locale LC_CTYPE=en_US.UTF-8,
LC_NUMERIC=it_IT.UTF-8, LC_TIME=it_IT.UTF-8, LC_COLLATE=en_US.UTF-8,
LC_MONETARY=it_IT.UTF-8, LC_MESSAGES=en_US.UTF-8,
LC_PAPER=it_IT.UTF-8, LC_NAME=it_IT.UTF-8, LC_ADDRESS=it_IT.UTF-8,
LC_TELEPHONE=it_IT.UTF-8, LC_MEASUREMENT=it_IT.UTF-8,
LC_IDENTIFICATION=it_IT.UTF-8, with libpcap version 1.7.4, with zlib
1.2.8.

Intel(R) Core(TM) i7-4810MQ CPU @ 2.80GHz (with SSE4.2)
Built using gcc 5.4.1 20160904.

Attachment: sccp_frags_regression3.pcap
Description: application/vnd.tcpdump.pcap