https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6199
Summary: lte-rrc sib3 R9 extension addition dissect error
Product: Wireshark
Version: 1.6.1
Platform: x86
OS/Version: Windows XP
Status: NEW
Severity: Minor
Priority: Low
Component: Wireshark
AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
ReportedBy: billyjeans@xxxxxxxxx
Build Information:
Version 1.6.1 (SVN Rev 38096 from /trunk-1.6)
--
Decode LTE-RRC binary stream with the help of 3gpp message decoder:
00 80 1C 31 18 6F 21 20 00 65 89 8A E2 D0 01 02 00 54 82 77 2C B5 50 97 1C 00
C3 A1 06 FF 28 3A 8D D2 78 0A 09 DD 29 49 00
Or dissect the sample file by setting the dlt user 147 to lte-rrc.bcch.dl.sch
Also set PEM preference "display internal fields in tree" may help to check.
It seems that dissector miss the 4 bits bitmap (0b1110) prefix to the extension
addition, which is required by X.601 19.9:
If an "ExtensionAdditionGroup" contains components marked OPTIONAL or
DEFAULT, then the "ExtensionAdditionGroup" is prefixed with a bit-map that
indicates the presence/absence of values for each component marked OPTIONAL or
DEFAULT.
.... ..0. Small Number Bit: False
Number of Sequence Extensions: 1
.... .0.. Extension Present Bit: False
(lateNonCriticalExtension is NOT present)
.... ..1. Extension Present Bit: True
(s-IntraSearch-v920 is present)
Open Type Length: 4 .... ...0 0000
100
s-IntraSearch-v920
Range = 32 Bitfield length 5,
s-IntraSearchP-r9: .... ...1 1101 ....
s-IntraSearchP-r9: 29
Range = 32 Bitfield length 5,
s-IntraSearchQ-r9: .... 1101 0... ....
s-IntraSearchQ-r9: 26
[Possible encoding error full length
not decoded. Open type length 4 ,decoded 2]
[Expert Info (Warn/Malformed):
Possible encoding error full length not decoded. Open type length 4 ,decoded 2]
[Message: Possible encoding
error full length not decoded. Open type length 4 ,decoded 2]
[Severity level: Warn]
[Group: Malformed]
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.