Ethereal-dev: Re: [Ethereal-dev] Truncated frames, SCSI & decoding question

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 27 Oct 2003 23:19:39 -0800

On Oct 21, 2003, at 2:21 PM, Dinesh G Dutt wrote:

You're right. With newer versions of the feature, it is possible to get the actual frame length as part of the packet (for example it is a field in the
Boardwalk header).

OK, then:

if you have the frame length, either the ability to set the reported length of a tvbuff to a *larger* value than it currently has should be added, and you should use that, or you should construct a new "top-level" tvbuff with the specified reported length;

if you don't have the frame length, setting the reported length to MAX_INT would, I suspect, cause all out-of-bounds references to throw a BoundsError exception rather than a ReportedBoundsError exception.