Wireshark-bugs: [Wireshark-bugs] [Bug 7707] New: Homeplug AV dissectors does not properly dissec

Date: Sun, 9 Sep 2012 08:13:57 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7707

           Summary: Homeplug AV dissectors does not properly dissect short
                    frames
           Product: Wireshark
           Version: SVN
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Dissection engine (libwireshark)
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: florian@xxxxxxxxxxx


Created attachment 9103
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=9103
Patch to properly fix dissection of small Homeplug AV frames

Build Information:
wireshark 1.9.0 (SVN Rev 44815 from /trunk)

Copyright 1998-2012 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.24.10, with Cairo 1.10.2, with Pango 1.30.0, with
GLib 2.32.3, with libpcap, with libz 1.2.3.4, without POSIX capabilities,
without libnl, without SMI, without c-ares, without ADNS, without Lua, without
Python, with GnuTLS 2.12.14, with Gcrypt 1.5.0, without Kerberos, without
GeoIP,
without PortAudio, with AirPcap.

Running on Linux 3.2.0-30-generic, with locale fr_FR, with libpcap version
1.1.1, with libz 1.2.3.4, GnuTLS 2.12.14, Gcrypt 1.5.0, without AirPcap.

Built using gcc 4.6.3.
--
The homeplug AV dissector checks that it can access at least 46 bytes of
Ethernet frame payload, which is a way too big check for small Homeplug AV MAC
management frames only consisting of the Homeplug AV MAC management header (3
bytes) such as "Software version request" or "Network info request".

There is already a check on the MAC management header of 3 bytes, so just
remove the bogus 46 bytes check to let dissection of these small frames work
properly.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.