https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5081
Summary: Uninitialised pointer in packet-rtsp.c causes crash
Product: Wireshark
Version: SVN
Platform: Other
OS/Version: All
Status: NEW
Severity: Major
Priority: Low
Component: Wireshark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: jsethdev@xxxxxxxxxxxxxxxxxxxx
Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
The RTSP dissector fails to zero out its list of dissectors for each data
channel. This means a server sending data on a channel without first setting it
up properly will cause WS to dereference uninitialised memory.
MS-RTSP as used by WMS in particular triggers this: the packet-pair experiment
for bandwidth estimation which happens at the beginning of every RTSP-over-TCP
connection sends data out on channel 80 ('P') without prior arrangement (it's
defined as part of the spec: see
http://download.microsoft.com/download/9/5/E/95EF66AF-9026-4BB0-A41D-A4F81802D92C/%5BMS-RTSP%5D.pdf
§4.4.3 page 100.)
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.