[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6975

           Summary: H264 nal are not unescaped so they are shown as
                    Malformed Packets
           Product: Wireshark
           Version: 1.6.5
          Platform: x86-64
        OS/Version: Windows 7
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: sergio.garcia.murillo@xxxxxxxxx


Build Information:
Version 1.6.5 (SVN Rev 40429 from /trunk-1.6)

--
When parsing the h264 (mainly SPS) wireshark does not take into account NAL
scape codes:

static uint8_t *x264_nal_escape_c( uint8_t *dst, uint8_t *src, uint8_t *end )
{
    if( src < end ) *dst++ = *src++;
    if( src < end ) *dst++ = *src++;
    while( src < end )
    {
        if( src[0] <= 0x03 && !dst[-2] && !dst[-1] )
            *dst++ = 0x03;
        *dst++ = *src++;
    }
    return dst;
}


So the "malformed" SPS

0xae875025  42 C0 0D DA 05 82 5A 10 00 00 03 00 10 00 00 03  
0xae875035  03 28 F1 42 AA 

Becames a correct one afer unescaping:
0xae6f0020  42 C0 0D DA 05 82 5A 10 00 00 00 10 00 00 03 28  
0xae6f0030  F1 42 AA

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.