[Wireshark-bugs] [Bug 15451] WISUN Channel Plan Spacing parsing incorrect

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15451

--- Comment #5 from James Ko  ---
Sorry.. forgot to include the Bug: tag in original review then pushed another
review on the wrong branch.

Please consider updated review:
https://code.wireshark.org/review/31745

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15451] WISUN Channel Plan Spacing parsing incorrect

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15451

--- Comment #4 from James Ko  ---
Created attachment 16874
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=16874&action=edit
Channel Information Fields

WiSUN specification of CH0, Channel Spacing, and Reserved bit-fields in the
Channel Information fields of a Unicast Schedule IE (US-IE) or Broadcast
Schedule IE (BS-IE).

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15451] WISUN Channel Plan Spacing parsing incorrect

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15451

--- Comment #3 from James Ko  ---
Created attachment 16873
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=16873&action=edit
WiSUN PAN Advertisment message with WiSUN Payload IE + Unicast Schedule IE

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15451] WISUN Channel Plan Spacing parsing incorrect

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15451

--- Comment #2 from Gerrit Code Review  ---
Change 31748 had a related patch set uploaded by James Ko:
Fix: WiSUN channel spacing in Unicast Schedule IE

https://code.wireshark.org/review/31748

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15446] Buildbot crash output: fuzz-2019-01-25-4370.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15446

Pascal Quantin  changed:

   What|Removed |Added

 CC||pascal.quan...@gmail.com
 Status|CONFIRMED   |IN_PROGRESS

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15455] Buildbot crash output: fuzz-2019-01-25-22135.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15455

Pascal Quantin  changed:

   What|Removed |Added

 CC||pascal.quan...@gmail.com
 Status|CONFIRMED   |RESOLVED
 Resolution|--- |DUPLICATE

--- Comment #1 from Pascal Quantin  ---


*** This bug has been marked as a duplicate of bug 15446 ***

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15446] Buildbot crash output: fuzz-2019-01-25-4370.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15446

--- Comment #4 from Pascal Quantin  ---
*** Bug 15455 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15455] New: Buildbot crash output: fuzz-2019-01-25-22135.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15455

Bug ID: 15455
   Summary: Buildbot crash output: fuzz-2019-01-25-22135.pcap
   Product: Wireshark
   Version: unspecified
  Hardware: x86-64
OS: Ubuntu
Status: CONFIRMED
  Severity: Major
  Priority: High
 Component: Dissection engine (libwireshark)
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: buildbot-do-not-re...@wireshark.org
  Target Milestone: ---

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2019-01-25-22135.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/10129-trc_4_20130227111552

Build host information:
Linux wsbb04 4.15.0-43-generic #46-Ubuntu SMP Thu Dec 6 14:45:28 UTC 2018
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID: Ubuntu
Description:Ubuntu 18.04.1 LTS
Release:18.04
Codename:   bionic

Buildbot information:
BUILDBOT_WORKERNAME=clang-code-analysis
BUILDBOT_BUILDNUMBER=4995
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-master/
BUILDBOT_REPOSITORY=ssh://wireshark-build...@code.wireshark.org:29418/wireshark
BUILDBOT_GOT_REVISION=3ee9c0facf758908236ee43e0effe3b6afdbdf68

Return value:  0

Dissector bug:  0

Valgrind error count:  1



Git commit
commit 3ee9c0facf758908236ee43e0effe3b6afdbdf68
Author: Anders Broman 
Date:   Fri Jan 25 15:45:53 2019 +0100

GTP: Dissect PDU Session Container.

Change-Id: I4022d1d47aeaaa4a4d3d51c365bd8fad138a8e97
Reviewed-on: https://code.wireshark.org/review/31735
Petri-Dish: Anders Broman 
Tested-by: Petri Dish Buildbot
Reviewed-by: Anders Broman 


Command and args: ./tools/valgrind-wireshark.sh -b
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/bin
 
==21239== Memcheck, a memory error detector
==21239== Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward et al.
==21239== Using Valgrind-3.13.0 and LibVEX; rerun with -h for copyright info
==21239== Command:
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/bin/tshark
-nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2019-01-25-22135.pcap
==21239== 
==21239== Conditional jump or move depends on uninitialised value(s)
==21239==at 0xC98D106: ??? (in /lib/x86_64-linux-gnu/libgcrypt.so.20.2.1)
==21239==by 0xC9855E4: ??? (in /lib/x86_64-linux-gnu/libgcrypt.so.20.2.1)
==21239==by 0x76ACAA4: update_preauth_hash (packet-smb2.c:834)
==21239==by 0x76A89AF: dissect_smb2_session_setup_request
(packet-smb2.c:3163)
==21239==by 0x76A736A: dissect_smb2_command (packet-smb2.c:9189)
==21239==by 0x76A66EE: dissect_smb2 (packet-smb2.c:9543)
==21239==by 0x76A3309: dissect_smb2_heur (packet-smb2.c:9598)
==21239==by 0x816647F: dissector_try_heuristic (packet.c:2750)
==21239==by 0x73331A4: dissect_netbios_payload (packet-nbt.c:1066)
==21239==by 0x7333726: dissect_nbss_packet (packet-nbt.c:1374)
==21239==by 0x7331165: dissect_nbss (packet-nbt.c:1674)
==21239==by 0x81681B7: call_dissector_through_handle (packet.c:706)
==21239== 
==21239== Conditional jump or move depends on uninitialised value(s)
==21239==at 0x4C366F2: memmove (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==21239==by 0x76ACB12: update_preauth_hash (packet-smb2.c:837)
==21239==by 0x76A89AF: dissect_smb2_session_setup_request
(packet-smb2.c:3163)
==21239==by 0x76A736A: dissect_smb2_command (packet-smb2.c:9189)
==21239==by 0x76A66EE: dissect_smb2 (packet-smb2.c:9543)
==21239==by 0x76A3309: dissect_smb2_heur (packet-smb2.c:9598)
==21239==by 0x816647F: dissector_try_heuristic (packet.c:2750)
==21239==by 0x73331A4: dissect_netbios_payload (packet-nbt.c:1066)
==21239==by 0x7333726: dissect_nbss_packet (packet-nbt.c:1374)
==21239==by 0x7331165: dissect_nbss (packet-nbt.c:1674)
==21239==by 0x81681B7: call_dissector_through_handle (packet.c:706)
==21239==by 0x8163E89: call_dissector_work (packet.c:791)
==21239== 
==21239== Conditional jump or move depends on uninitialised value(s)
==21239==at 0x4C36702: memmove (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==21239==by 0x76ACB12: update_preauth_hash (packet-smb2.c:837)
==21239==by 0x76A89AF: dissect_smb2_session_setup_request
(packet-smb2.c:3163)
==21239==by 0x76A736A: dissect_smb2_command (packet-smb2.c:9189)
==21239==by 0x76A66EE: dissect_smb2 (packet-smb2.c:9543)
==21239==by 0x76A3309: dissect_smb2_heur (packet-smb2.c:9598)
==21239==by 0x816647F: dissector_try_heuristic (packet.c:2750)
==21239==by 0x73331A4: dissect_netbios_payload (packet-nbt.c:1066)
==21239==by 0x7333726: dissect_nbss_packet (packet-nbt.c:1374)
==21239==by 0x7331165: dissect_nbss (packet-nbt.c:1674)
==21239==by 0x81681B7: call_dissector_through_handle (packet.c:706)
==21239==by 0

[Wireshark-bugs] [Bug 15438] New version of Wireshark is failing to do what earlier versions did which to allow us to save as when open files from MessageAnalyzer to convert them to tcpdump pcap forma

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15438

Guy Harris  changed:

   What|Removed |Added

 Resolution|FIXED   |NOTABUG

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15438] New version of Wireshark is failing to do what earlier versions did which to allow us to save as when open files from MessageAnalyzer to convert them to tcpdump pcap forma

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15438

--- Comment #9 from Guy Harris  ---
(In reply to Abed Halabi from comment #8)
> Created attachment 16870 [details]
> Screenshots
> 
> Please see attached screen shots as FYI

So which version supported saving the file, and what did the packet detail pane
look like when you read in the file in that version?

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15454] Dissection of CAN packets based on a DBC specification

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15454

--- Comment #2 from Maksim Salau  ---
Created attachment 16872
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=16872&action=edit
Sample DBC file

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15454] Dissection of CAN packets based on a DBC specification

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15454

Maksim Salau  changed:

   What|Removed |Added

 CC||maksim.sa...@gmail.com

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15454] Dissection of CAN packets based on a DBC specification

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15454

--- Comment #1 from Maksim Salau  ---
Created attachment 16871
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=16871&action=edit
Sample capture

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15454] New: Dissection of CAN packets based on a DBC specification

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15454

Bug ID: 15454
   Summary: Dissection of CAN packets based on a DBC specification
   Product: Wireshark
   Version: Git
  Hardware: All
OS: All
Status: UNCONFIRMED
  Severity: Normal
  Priority: Low
 Component: Dissection engine (libwireshark)
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: maksim.sa...@gmail.com
  Target Milestone: ---

Build Information:
TShark (Wireshark) 2.9.1 (v2.9.1rc0-534-g3ee9c0fa)

Copyright 1998-2019 Gerald Combs  and contributors.
License GPLv2+: GNU GPL version 2 or later

This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with libpcap, without POSIX capabilities, without libnl, with
GLib 2.58.2, with zlib 1.2.11, without SMI, without c-ares, without Lua,
without
GnuTLS, with Gcrypt 1.8.4, without Kerberos, without MaxMind DB resolver,
without nghttp2, without LZ4, without Snappy, without libxml2.

Running on Linux 4.19.15-300.fc29.x86_64, with Intel(R) Core(TM) i5-4200M CPU @
2.50GHz (with SSE4.2), with 15969 MB of physical memory, with locale
en_US.UTF-8, with libpcap version 1.9.0-PRE-GIT (with TPACKET_V3), with Gcrypt
1.8.4, with zlib 1.2.11, binary plugins supported (0 loaded).

Built using gcc 8.2.1 20181215 (Red Hat 8.2.1-6).

--
There is not dissector for CAN packets based on description in a DBC file.
Sample pcap file and associated DBC spec are attached.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15451] WISUN Channel Plan Spacing parsing incorrect

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15451

Alexis La Goutte  changed:

   What|Removed |Added

 Ever confirmed|0   |1
 Status|UNCONFIRMED |INCOMPLETE
 CC||alexis.lagou...@gmail.com

--- Comment #1 from Alexis La Goutte  ---
Can you attach a pcap?

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15438] New version of Wireshark is failing to do what earlier versions did which to allow us to save as when open files from MessageAnalyzer to convert them to tcpdump pcap forma

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15438

--- Comment #8 from Abed Halabi  ---
Created attachment 16870
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=16870&action=edit
Screenshots

Please see attached screen shots as FYI

We have a resolution to this issue.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15452] Dissector for IEEE 1609.4 (channel switching) for DSRC

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15452

--- Comment #1 from Anders Broman  ---
Again a tracefile would be helpful.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15453] Dissector for IEEE 1609.3 Wave Service Announcement (WSA) for DSRC

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15453

--- Comment #1 from Anders Broman  ---
A trace file would be helpful.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15438] New version of Wireshark is failing to do what earlier versions did which to allow us to save as when open files from MessageAnalyzer to convert them to tcpdump pcap forma

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15438

--- Comment #7 from Guy Harris  ---
(In reply to Abed Halabi from comment #6)
> Thanks for looking into it Guy.  I retraced my steps and made sure I had TCP
> traffic in the file and still had the same issue but a colleague of mine
> helped me flush it further.  What is happening is that the old .etl file
> from the NETSH had other types of records like you pointed out.  However the
> old version of Wireshark tolerated them

I suspect "tolerated" meant "discarded at a low level during the read process"
- *and* that the old version also treated the packets as 802.11 frames,
discarding all the "Network Monitor Event" and "ETW Ndis" information, and
indicated that the file was a NetMon file with 802.11 packets, because there
*is* no way to put Network Monitor Event data into a pcap or pcapng file (there
is no LINKTYPE_ value corresponding to Network Monitor Event data).

What old version was that?  If I try to read your example file with Wireshark
2.4.x built from the 2.4.x branch in Git, it throws away *all* of the records,
including the packets.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15438] New version of Wireshark is failing to do what earlier versions did which to allow us to save as when open files from MessageAnalyzer to convert them to tcpdump pcap forma

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15438

Abed Halabi  changed:

   What|Removed |Added

 Resolution|--- |FIXED
 Status|INCOMPLETE  |RESOLVED

--- Comment #6 from Abed Halabi  ---
Thanks for looking into it Guy.  I retraced my steps and made sure I had TCP
traffic in the file and still had the same issue but a colleague of mine helped
me flush it further.  What is happening is that the old .etl file from the
NETSH had other types of records like you pointed out.  However the old version
of Wireshark tolerated them and the new one does not even after I attempt to
filter by tcp traffic and trying to save it based on the filter it still did
not work.  It turns out that I need to filter early on in MessageAnalyzer and
then it works with Wireshark version 2.6.6.   Mystery solved .  thanks

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15416] Display error in negative response time stats (gint displayed as unsigned)

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15416

Dario Lombardo  changed:

   What|Removed |Added

 Resolution|--- |FIXED
 Status|CONFIRMED   |RESOLVED

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15453] Dissector for IEEE 1609.3 Wave Service Announcement (WSA) for DSRC

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15453

Neal Probert  changed:

   What|Removed |Added

Summary|Dissector for 1609.3 Wave   |Dissector for IEEE 1609.3
   |Service Announcement (WSA)  |Wave Service Announcement
   |for DSRC|(WSA) for DSRC

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15453] Dissector for 1609.3 Wave Service Announcement (WSA) for DSRC

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15453

Neal Probert  changed:

   What|Removed |Added

 CC||nprob...@probestar.net

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15453] New: Dissector for 1609.3 Wave Service Announcement (WSA) for DSRC

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15453

Bug ID: 15453
   Summary: Dissector for 1609.3 Wave Service Announcement (WSA)
for DSRC
   Product: Wireshark
   Version: unspecified
  Hardware: All
OS: All
Status: UNCONFIRMED
  Severity: Enhancement
  Priority: Low
 Component: Dissection engine (libwireshark)
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: nprob...@probestar.net
  Target Milestone: ---

Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
Now that we've updated the IEEE 1609.3 WSMP layer, we also need to implement
the IEEE 1609.3 WSA layer which is dependent on the IEEE 1609.2 specification
and ASN definition.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15452] New: Dissector for IEEE 1609.4 (channel switching) for DSRC

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15452

Bug ID: 15452
   Summary: Dissector for IEEE 1609.4 (channel switching) for DSRC
   Product: Wireshark
   Version: unspecified
  Hardware: All
OS: All
Status: UNCONFIRMED
  Severity: Enhancement
  Priority: Low
 Component: Dissection engine (libwireshark)
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: nprob...@probestar.net
  Target Milestone: ---

Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
Now that we've updated the IEEE 1609.3 WSMP layer, time to implement the IEEE
1609.4 dissector that's also part of DSRC (IEEE 802.11p).

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15451] New: WISUN Channel Plan Spacing parsing incorrect

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15451

Bug ID: 15451
   Summary: WISUN Channel Plan Spacing parsing incorrect
   Product: Wireshark
   Version: 2.6.6
  Hardware: x86
OS: Linux
Status: UNCONFIRMED
  Severity: Major
  Priority: Low
 Component: Dissection engine (libwireshark)
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: jim.l...@hotmail.com
  Target Milestone: ---

Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
The WISUN Specification for Unicast Schedule IE (USIE) Channel Information
Fields  states that following 24-bits channel 0 frequency, the first 4-bits are
for channel spacing and the last 4 bits are reserved.

The packet-wisun.c dissector incorrectly parses all 8 bits as the channel
spacing.

diff --git a/epan/dissectors/packet-wisun.c b/epan/dissectors/packet-wisun.c
index 77f9d25df7..b36ad8b406 100644
--- a/epan/dissectors/packet-wisun.c
+++ b/epan/dissectors/packet-wisun.c
@@ -650,7 +650,7 @@ dissect_wisun_schedule_common(tvbuff_t *tvb, packet_info
*pinfo, guint offset, p
 case WISUN_CHANNEL_PLAN_SPACING:
 proto_tree_add_item(tree, hf_wisun_usie_channel_frequency, tvb,
offset, 3, ENC_LITTLE_ENDIAN);
 offset += 3;
-proto_tree_add_item(tree, hf_wisun_usie_channel_spacing, tvb,
offset, 1, ENC_LITTLE_ENDIAN);
+proto_tree_add_bits_item(tree, hf_wisun_usie_channel_spacing, tvb,
offset*8, 1, ENC_LITTLE_ENDIAN);
 offset++;
 proto_tree_add_item(tree, hf_wisun_usie_number_channels, tvb,
offset, 2, ENC_LITTLE_ENDIAN);
 offset += 2;

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15446] Buildbot crash output: fuzz-2019-01-25-4370.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15446

--- Comment #3 from Pascal Quantin  ---
*** Bug 15450 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15450] Buildbot crash output: fuzz-2019-01-25-8773.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15450

Pascal Quantin  changed:

   What|Removed |Added

 Resolution|--- |DUPLICATE
 Status|CONFIRMED   |RESOLVED
 CC||pascal.quan...@gmail.com

--- Comment #1 from Pascal Quantin  ---


*** This bug has been marked as a duplicate of bug 15446 ***

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15450] New: Buildbot crash output: fuzz-2019-01-25-8773.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15450

Bug ID: 15450
   Summary: Buildbot crash output: fuzz-2019-01-25-8773.pcap
   Product: Wireshark
   Version: unspecified
  Hardware: x86-64
OS: Ubuntu
Status: CONFIRMED
  Severity: Major
  Priority: High
 Component: Dissection engine (libwireshark)
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: buildbot-do-not-re...@wireshark.org
  Target Milestone: ---

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2019-01-25-8773.pcap

stderr:
Input file:
/home/wireshark/menagerie/menagerie/10095-captura_smb2_1302201115_pdf_and_txt.pcapng

Build host information:
Linux wsbb04 4.15.0-43-generic #46-Ubuntu SMP Thu Dec 6 14:45:28 UTC 2018
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID: Ubuntu
Description:Ubuntu 18.04.1 LTS
Release:18.04
Codename:   bionic

Buildbot information:
BUILDBOT_WORKERNAME=clang-code-analysis
BUILDBOT_BUILDNUMBER=4994
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-master/
BUILDBOT_REPOSITORY=ssh://wireshark-build...@code.wireshark.org:29418/wireshark
BUILDBOT_GOT_REVISION=d09d33262b4c8f3287b00374e885162900c3b730

Return value:  0

Dissector bug:  0

Valgrind error count:  1



Git commit
commit d09d33262b4c8f3287b00374e885162900c3b730
Author: Aurelien Aptel 
Date:   Thu Jan 24 21:30:02 2019 +0100

test/suite_decryption.py: add smb2 decryption tests

add 3 tests and 2 sample captures to check smb2 decryption with:
- bad key (should fail gracefuly)
- smb3.0 AES-128-CCM
- smb3.1.1 AES-128-CCM

Change-Id: I099f5f00f83fd39ac6de9ce9ce374624297aef61
Reviewed-on: https://code.wireshark.org/review/31728
Petri-Dish: Peter Wu 
Tested-by: Petri Dish Buildbot
Reviewed-by: Peter Wu 


Command and args: ./tools/valgrind-wireshark.sh -b
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/bin
 
==23384== Memcheck, a memory error detector
==23384== Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward et al.
==23384== Using Valgrind-3.13.0 and LibVEX; rerun with -h for copyright info
==23384== Command:
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/bin/tshark
-nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2019-01-25-8773.pcap
==23384== 
==23384== Conditional jump or move depends on uninitialised value(s)
==23384==at 0xC98D106: ??? (in /lib/x86_64-linux-gnu/libgcrypt.so.20.2.1)
==23384==by 0xC9855E4: ??? (in /lib/x86_64-linux-gnu/libgcrypt.so.20.2.1)
==23384==by 0x76AC6B4: update_preauth_hash (packet-smb2.c:834)
==23384==by 0x76A85BF: dissect_smb2_session_setup_request
(packet-smb2.c:3163)
==23384==by 0x76A6F7A: dissect_smb2_command (packet-smb2.c:9189)
==23384==by 0x76A62FE: dissect_smb2 (packet-smb2.c:9543)
==23384==by 0x76A2F19: dissect_smb2_heur (packet-smb2.c:9598)
==23384==by 0x816608F: dissector_try_heuristic (packet.c:2750)
==23384==by 0x7332DB4: dissect_netbios_payload (packet-nbt.c:1066)
==23384==by 0x736: dissect_nbss_packet (packet-nbt.c:1374)
==23384==by 0x7330D75: dissect_nbss (packet-nbt.c:1674)
==23384==by 0x8167DC7: call_dissector_through_handle (packet.c:706)
==23384== 
==23384== Conditional jump or move depends on uninitialised value(s)
==23384==at 0x4C366F2: memmove (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==23384==by 0x76AC722: update_preauth_hash (packet-smb2.c:837)
==23384==by 0x76A85BF: dissect_smb2_session_setup_request
(packet-smb2.c:3163)
==23384==by 0x76A6F7A: dissect_smb2_command (packet-smb2.c:9189)
==23384==by 0x76A62FE: dissect_smb2 (packet-smb2.c:9543)
==23384==by 0x76A2F19: dissect_smb2_heur (packet-smb2.c:9598)
==23384==by 0x816608F: dissector_try_heuristic (packet.c:2750)
==23384==by 0x7332DB4: dissect_netbios_payload (packet-nbt.c:1066)
==23384==by 0x736: dissect_nbss_packet (packet-nbt.c:1374)
==23384==by 0x7330D75: dissect_nbss (packet-nbt.c:1674)
==23384==by 0x8167DC7: call_dissector_through_handle (packet.c:706)
==23384==by 0x8163A99: call_dissector_work (packet.c:791)
==23384== 
==23384== Conditional jump or move depends on uninitialised value(s)
==23384==at 0x4C36702: memmove (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==23384==by 0x76AC722: update_preauth_hash (packet-smb2.c:837)
==23384==by 0x76A85BF: dissect_smb2_session_setup_request
(packet-smb2.c:3163)
==23384==by 0x76A6F7A: dissect_smb2_command (packet-smb2.c:9189)
==23384==by 0x76A62FE: dissect_smb2 (packet-smb2.c:9543)
==23384==by 0x76A2F19: dissect_smb2_heur (packet-smb2.c:9598)
==23384==by 0x816608F: dissector_try_heuristic (packet.c:2750)
==23384==by 0x7332DB4: dissect_netbios_payload (packet-nbt.c:1066)
==23384==by 0x736: dissect

[Wireshark-bugs] [Bug 15446] Buildbot crash output: fuzz-2019-01-25-4370.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15446

--- Comment #2 from Gerrit Code Review  ---
Change 31741 had a related patch set uploaded by Pascal Quantin:
SMB2: check preauth_hash_current pointer validity before using it

https://code.wireshark.org/review/31741

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15449] Buildbot crash output: fuzz-2019-01-25-3514.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15449

Pascal Quantin  changed:

   What|Removed |Added

 Resolution|--- |DUPLICATE
 Status|CONFIRMED   |RESOLVED
 CC||pascal.quan...@gmail.com

--- Comment #1 from Pascal Quantin  ---


*** This bug has been marked as a duplicate of bug 15446 ***

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15446] Buildbot crash output: fuzz-2019-01-25-4370.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15446

--- Comment #1 from Pascal Quantin  ---
*** Bug 15449 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15449] New: Buildbot crash output: fuzz-2019-01-25-3514.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15449

Bug ID: 15449
   Summary: Buildbot crash output: fuzz-2019-01-25-3514.pcap
   Product: Wireshark
   Version: unspecified
  Hardware: x86-64
OS: Ubuntu
Status: CONFIRMED
  Severity: Major
  Priority: High
 Component: Dissection engine (libwireshark)
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: buildbot-do-not-re...@wireshark.org
  Target Milestone: ---

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2019-01-25-3514.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/10129-trc_4_20130227111552

Build host information:
Linux wsbb04 4.15.0-43-generic #46-Ubuntu SMP Thu Dec 6 14:45:28 UTC 2018
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID: Ubuntu
Description:Ubuntu 18.04.1 LTS
Release:18.04
Codename:   bionic

Buildbot information:
BUILDBOT_WORKERNAME=clang-code-analysis
BUILDBOT_BUILDNUMBER=4993
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-master/
BUILDBOT_REPOSITORY=ssh://wireshark-build...@code.wireshark.org:29418/wireshark
BUILDBOT_GOT_REVISION=75484b106da95c3fe73815fca10a6f8208e066cc

Return value:  0

Dissector bug:  0

Valgrind error count:  1



Git commit
commit 75484b106da95c3fe73815fca10a6f8208e066cc
Author: Pascal Quantin 
Date:   Fri Jan 25 15:22:46 2019 +0100

ETSI CAT: do not call tvb_bytes_to_str() with a 0 length

Change-Id: Ibd8ebe801a7bb0196e9d0f8e1c19cc16050a4f60
Reviewed-on: https://code.wireshark.org/review/31733
Petri-Dish: Pascal Quantin 
Tested-by: Petri Dish Buildbot
Reviewed-by: Pascal Quantin 


Command and args: ./tools/valgrind-wireshark.sh -b
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/bin
 
==15341== Memcheck, a memory error detector
==15341== Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward et al.
==15341== Using Valgrind-3.13.0 and LibVEX; rerun with -h for copyright info
==15341== Command:
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/bin/tshark
-nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2019-01-25-3514.pcap
==15341== 
==15341== Conditional jump or move depends on uninitialised value(s)
==15341==at 0xC98D106: ??? (in /lib/x86_64-linux-gnu/libgcrypt.so.20.2.1)
==15341==by 0xC9855E4: ??? (in /lib/x86_64-linux-gnu/libgcrypt.so.20.2.1)
==15341==by 0x76AC6B4: update_preauth_hash (packet-smb2.c:834)
==15341==by 0x76A85BF: dissect_smb2_session_setup_request
(packet-smb2.c:3163)
==15341==by 0x76A6F7A: dissect_smb2_command (packet-smb2.c:9189)
==15341==by 0x76A62FE: dissect_smb2 (packet-smb2.c:9543)
==15341==by 0x76A2F19: dissect_smb2_heur (packet-smb2.c:9598)
==15341==by 0x816608F: dissector_try_heuristic (packet.c:2750)
==15341==by 0x7332DB4: dissect_netbios_payload (packet-nbt.c:1066)
==15341==by 0x736: dissect_nbss_packet (packet-nbt.c:1374)
==15341==by 0x7330D75: dissect_nbss (packet-nbt.c:1674)
==15341==by 0x8167DC7: call_dissector_through_handle (packet.c:706)
==15341== 
==15341== Conditional jump or move depends on uninitialised value(s)
==15341==at 0x4C366F2: memmove (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==15341==by 0x76AC722: update_preauth_hash (packet-smb2.c:837)
==15341==by 0x76A85BF: dissect_smb2_session_setup_request
(packet-smb2.c:3163)
==15341==by 0x76A6F7A: dissect_smb2_command (packet-smb2.c:9189)
==15341==by 0x76A62FE: dissect_smb2 (packet-smb2.c:9543)
==15341==by 0x76A2F19: dissect_smb2_heur (packet-smb2.c:9598)
==15341==by 0x816608F: dissector_try_heuristic (packet.c:2750)
==15341==by 0x7332DB4: dissect_netbios_payload (packet-nbt.c:1066)
==15341==by 0x736: dissect_nbss_packet (packet-nbt.c:1374)
==15341==by 0x7330D75: dissect_nbss (packet-nbt.c:1674)
==15341==by 0x8167DC7: call_dissector_through_handle (packet.c:706)
==15341==by 0x8163A99: call_dissector_work (packet.c:791)
==15341== 
==15341== Conditional jump or move depends on uninitialised value(s)
==15341==at 0x4C36702: memmove (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==15341==by 0x76AC722: update_preauth_hash (packet-smb2.c:837)
==15341==by 0x76A85BF: dissect_smb2_session_setup_request
(packet-smb2.c:3163)
==15341==by 0x76A6F7A: dissect_smb2_command (packet-smb2.c:9189)
==15341==by 0x76A62FE: dissect_smb2 (packet-smb2.c:9543)
==15341==by 0x76A2F19: dissect_smb2_heur (packet-smb2.c:9598)
==15341==by 0x816608F: dissector_try_heuristic (packet.c:2750)
==15341==by 0x7332DB4: dissect_netbios_payload (packet-nbt.c:1066)
==15341==by 0x736: dissect_nbss_packet (packet-nbt.c:1374)
==15341==by 0x7330D75: dissect_nbss (packet-nbt.c:1674)
==15341==by 0x8167DC7: call_dissector_through_handle (packet.c:7

[Wireshark-bugs] [Bug 3098] MS SQL 2005 tds protocol support

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3098

--- Comment #5 from Gerrit Code Review  ---
Change 31734 had a related patch set uploaded by Craig Jackson:
TDS: Fix colmetadata handling of Text and Image types

https://code.wireshark.org/review/31734

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15427] Data following a TCP ZeroWindowProbe is marked as retransmission and not passed to subdissectors

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15427

--- Comment #7 from Jasper Bongertz  ---
(In reply to Peter Wu from comment #6)
> Hi Jasper, resident TCP expert :)
> 
> Could you have a look at the above two patches, is it reasonable? Have you
> ever run into this before?

Hi Peter, I will do that as soon as I have some free time, hopefully today :-)

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15446] New: Buildbot crash output: fuzz-2019-01-25-4370.pcap

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15446

Bug ID: 15446
   Summary: Buildbot crash output: fuzz-2019-01-25-4370.pcap
   Product: Wireshark
   Version: unspecified
  Hardware: x86-64
OS: Ubuntu
Status: CONFIRMED
  Severity: Major
  Priority: High
 Component: Dissection engine (libwireshark)
  Assignee: bugzilla-ad...@wireshark.org
  Reporter: buildbot-do-not-re...@wireshark.org
  Target Milestone: ---

Problems have been found with the following capture file:

https://www.wireshark.org/download/automated/captures/fuzz-2019-01-25-4370.pcap

stderr:
Input file: /home/wireshark/menagerie/menagerie/10129-trc_4_20130227111552

Build host information:
Linux wsbb04 4.15.0-43-generic #46-Ubuntu SMP Thu Dec 6 14:45:28 UTC 2018
x86_64 x86_64 x86_64 GNU/Linux
Distributor ID: Ubuntu
Description:Ubuntu 18.04.1 LTS
Release:18.04
Codename:   bionic

Buildbot information:
BUILDBOT_WORKERNAME=clang-code-analysis
BUILDBOT_BUILDNUMBER=4992
BUILDBOT_BUILDERNAME=Clang Code Analysis
BUILDBOT_URL=http://buildbot.wireshark.org/wireshark-master/
BUILDBOT_REPOSITORY=ssh://wireshark-build...@code.wireshark.org:29418/wireshark
BUILDBOT_GOT_REVISION=38ee25b3f51543f8dc885c9c601428986c200531

Return value:  0

Dissector bug:  0

Valgrind error count:  1



Git commit
commit 38ee25b3f51543f8dc885c9c601428986c200531
Author: Anders Broman 
Date:   Fri Jan 25 13:23:00 2019 +0100

nas5gs: v15.2.1 Updates and corrections

- Update the IE paragraph references
- Don't dissect encrypted messages
- Introuduce preference to force dissection of encrypted messages a
s plain.
- Fix idssection of Tracing area.
- Dissect Replayed S1 UE security capabilities.

Change-Id: If3dce4c34cbd72b1d8afd0079b81c719a7e94598
Reviewed-on: https://code.wireshark.org/review/31730
Petri-Dish: Anders Broman 
Tested-by: Petri Dish Buildbot
Reviewed-by: Anders Broman 


Command and args: ./tools/valgrind-wireshark.sh -b
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/bin
 
==16266== Memcheck, a memory error detector
==16266== Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward et al.
==16266== Using Valgrind-3.13.0 and LibVEX; rerun with -h for copyright info
==16266== Command:
/home/wireshark/builders/wireshark-master-fuzz/clangcodeanalysis/install.plain/bin/tshark
-nr /fuzz/buildbot/clangcodeanalysis/valgrind-fuzz/fuzz-2019-01-25-4370.pcap
==16266== 
==16266== Conditional jump or move depends on uninitialised value(s)
==16266==at 0xC98D106: ??? (in /lib/x86_64-linux-gnu/libgcrypt.so.20.2.1)
==16266==by 0xC9855E4: ??? (in /lib/x86_64-linux-gnu/libgcrypt.so.20.2.1)
==16266==by 0x76AC674: update_preauth_hash (packet-smb2.c:834)
==16266==by 0x76A857F: dissect_smb2_session_setup_request
(packet-smb2.c:3163)
==16266==by 0x76A6F3A: dissect_smb2_command (packet-smb2.c:9189)
==16266==by 0x76A62BE: dissect_smb2 (packet-smb2.c:9543)
==16266==by 0x76A2ED9: dissect_smb2_heur (packet-smb2.c:9598)
==16266==by 0x816604F: dissector_try_heuristic (packet.c:2750)
==16266==by 0x7332D74: dissect_netbios_payload (packet-nbt.c:1066)
==16266==by 0x73332F6: dissect_nbss_packet (packet-nbt.c:1374)
==16266==by 0x7330D35: dissect_nbss (packet-nbt.c:1674)
==16266==by 0x8167D87: call_dissector_through_handle (packet.c:706)
==16266== 
==16266== Conditional jump or move depends on uninitialised value(s)
==16266==at 0x4C366F2: memmove (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==16266==by 0x76AC6E2: update_preauth_hash (packet-smb2.c:837)
==16266==by 0x76A857F: dissect_smb2_session_setup_request
(packet-smb2.c:3163)
==16266==by 0x76A6F3A: dissect_smb2_command (packet-smb2.c:9189)
==16266==by 0x76A62BE: dissect_smb2 (packet-smb2.c:9543)
==16266==by 0x76A2ED9: dissect_smb2_heur (packet-smb2.c:9598)
==16266==by 0x816604F: dissector_try_heuristic (packet.c:2750)
==16266==by 0x7332D74: dissect_netbios_payload (packet-nbt.c:1066)
==16266==by 0x73332F6: dissect_nbss_packet (packet-nbt.c:1374)
==16266==by 0x7330D35: dissect_nbss (packet-nbt.c:1674)
==16266==by 0x8167D87: call_dissector_through_handle (packet.c:706)
==16266==by 0x8163A59: call_dissector_work (packet.c:791)
==16266== 
==16266== Conditional jump or move depends on uninitialised value(s)
==16266==at 0x4C36702: memmove (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==16266==by 0x76AC6E2: update_preauth_hash (packet-smb2.c:837)
==16266==by 0x76A857F: dissect_smb2_session_setup_request
(packet-smb2.c:3163)
==16266==by 0x76A6F3A: dissect_smb2_command (packet-smb2.c:9189)
==16266==by 0x76A62BE: dissect_smb2 (packet-smb2.c:9543)
==16266==by 0x76A2ED9: dissect_smb2_heur (packet-smb2.c:9598)
==16266==by 0x816604F: dissector_try_heuristic (packet.c:2750)
==16266==by 0x7332D74: dis

[Wireshark-bugs] [Bug 7515] Possible leaks of wtap_pkthdr->opt_comment (packet comment)

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7515

Peter Wu  changed:

   What|Removed |Added

 Status|CONFIRMED   |RESOLVED
 Resolution|--- |FIXED

--- Comment #5 from Peter Wu  ---
Fixed in v2.9.1rc0-528-g31aba351e2

It could potentially be backported, but as it just addresses some memleaks,
I'll probably not do it.

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15427] Data following a TCP ZeroWindowProbe is marked as retransmission and not passed to subdissectors

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15427

Peter Wu  changed:

   What|Removed |Added

 CC||jas...@packet-foo.com

--- Comment #6 from Peter Wu  ---
Hi Jasper, resident TCP expert :)

Could you have a look at the above two patches, is it reasonable? Have you ever
run into this before?

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15427] Data following a TCP ZeroWindowProbe is marked as retransmission and not passed to subdissectors

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15427

--- Comment #4 from Gerrit Code Review  ---
Change 31731 had a related patch set uploaded by Peter Wu:
TCP: do not mark data following a ZeroWindowProbe as retransmission

https://code.wireshark.org/review/31731

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15427] Data following a TCP ZeroWindowProbe is marked as retransmission and not passed to subdissectors

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15427

--- Comment #5 from Gerrit Code Review  ---
Change 31732 had a related patch set uploaded by Peter Wu:
TCP: pass data after a ZeroWindowProbe to subdissectors

https://code.wireshark.org/review/31732

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15420] First reassembled out-of-order packet does not get "Reassembled in" marking

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15420

Peter Wu  changed:

   What|Removed |Added

 Status|IN_PROGRESS |RESOLVED
 Resolution|--- |FIXED

--- Comment #4 from Peter Wu  ---
Fixed in v2.9.1rc0-530-g0b9b531726

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15420] First reassembled out-of-order packet does not get "Reassembled in" marking

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15420

--- Comment #3 from Gerrit Code Review  ---
Change 31720 merged by Peter Wu:
tcp: fix reporting of "Reassembled in" for OoO initial segment

https://code.wireshark.org/review/31720

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 15427] Data following a TCP ZeroWindowProbe is marked as retransmission and not passed to subdissectors

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15427

Peter Wu  changed:

   What|Removed |Added

   Hardware|x86-64  |All
 OS|Windows 7   |All
 Status|CONFIRMED   |IN_PROGRESS
Summary|New data not passed to TCP  |Data following a TCP
   |subdissector if part of |ZeroWindowProbe is marked
   |data is retrasmission   |as retransmission and not
   ||passed to subdissectors

-- 
You are receiving this mail because:
You are watching all bug changes.___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe