Wireshark-bugs: [Wireshark-bugs] [Bug 8013] New: Packet containig GSM 0408 System Information ge

Date: Fri, 23 Nov 2012 04:07:59 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8013

           Summary: Packet containig GSM 0408 System Information gets
                    decoded wrongly
           Product: Wireshark
           Version: 1.4.6
          Platform: x86
        OS/Version: Windows 7
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Dissection engine (libwireshark)
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: arimaniac@xxxxxxxxx


Created attachment 9564
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=9564
fix for the bug

Build Information:
wireshark 1.4.6

Copyright 1998-2011 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.24.4, with GLib 2.28.6, with libpcap 1.1.1, with
libz 1.2.3.4, with POSIX capabilities (Linux), without libpcre, with SMI 0.4.8,
with c-ares 1.7.3, with Lua 5.1, without Python, with GnuTLS 2.8.6, with Gcrypt
1.4.6, with MIT Kerberos, with GeoIP, with PortAudio V19-devel (built Mar 18
2011 15:44:36), without AirPcap.

Running on Linux 2.6.38-16-generic, with libpcap version 1.1.1, with libz
1.2.3.4, GnuTLS 2.8.6, Gcrypt 1.4.6.

Built using gcc 4.5.2.

--
Fix supplied, to confirm my claim please refer to:
3GPP TS 44.018 / Table 10.5.2.34.1: SI 3 Rest Octets information element

Notice that the GPRS is not supported when the bit is LOW.
Notice that the Early Classmark Sending is forbidden when the bit is LOW.

Bug is also reproducible in 1.8 (downloaded latest trunk - bug fix on top of
revision 46151), 
I can see that the application wrongly 
identifies these bits as "H" when the bits are set to 0.
Dont know if this H/L is fixed by my change.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.