Wireshark-bugs: [Wireshark-bugs] [Bug 8570] LDAP dissector doesn't account for reuse of MessageI

Date: Tue, 09 Apr 2013 07:05:24 +0000

Comment # 2 on bug 8570 from
(In reply to comment #1)
> There are probably several places where an ID that's reused is used
> (possibly in conjunction with flow/conversation endpoint identifiers) as a
> lookup key; this happens in both the reassembly code and in the various bits
> of request/response matching code in various dissectors.
> 
> In most if not all of those cases the matching also needs to take frame
> numbers into account, so that different packets with the same ID aren't
> considered the same packet.

Yes, this can be done by adding the frame number to the key and using
se_tree_lookup32_array_le() to find the corresponding request. Had to do this
for a 1.6 based dissector, triggering bug 7804.


You are receiving this mail because:
  • You are watching all bug changes.