Wireshark-bugs: [Wireshark-bugs] [Bug 1893] New: h261.ebit misinterpreted

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 4 Oct 2007 12:39:41 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1893

           Summary: h261.ebit misinterpreted
           Product: Wireshark
           Version: 0.99.6
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: martin@xxxxxxxxxx
                CC: martin@xxxxxxxxxx


Build Information:
Compiled with GTK+ 2.12.0, with GLib 2.14.1, with libpcap 0.9.7, with libz
1.2.3.3, with libpcre 7.2, without Net-SNMP, with ADNS, without Lua, with
GnuTLS
1.6.3, with Gcrypt 1.2.4, with MIT Kerberos, with PortAudio <= V18, without
AirPcap.

Running on Linux 2.6.22-12-generic, with libpcap version 0.9.7.

Built using gcc 4.1.3 20070831 (prerelease) (Ubuntu 4.1.2-16ubuntu1).
--
The h261.ebit data from "ITU-T Recommendation H.261" (RFC 4587) specifies ebit
as a 3 bit field. "Number of least significant bits that should be ignored in
the last data octet."

For the RTP H.261 header 0xd5000000, Wireshark decodes this value to
"End bit position: 53", where the correct value should be 5 (101b).


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.