Wireshark-bugs: [Wireshark-bugs] [Bug 11634] ISIS Hello trigger Error/Malformed Packet length 16

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 27 Oct 2015 08:13:51 +0000

Comment # 4 on bug 11634 from 
Alexis,

Using historic packages from
https://www.wireshark.org/download/win64/all-versions/
I can confirm that:

1.11.2 (5033435add3d880b188810361fcb6bfaf0fba4b1) is ok.

1.11.3 (1dd5d3a6aae79e6a1f566a9600264d8e91ffedd6) has the issue.

It looks like 1.11.2 assumed (correctly) that the PDU starts at frame offset
0x11, but with 1.11.3 PDU we are 8 octets further into at frame offset 0x19. 
The issue is the 8 octets that comprise the "ISO 10589 ISIS InTRA Domain
Routeing Information Exchange Protocol" tree objects are no longer available to
dissect_hello_checksum_clv() in the latter version.  These initial 8 octets
appear to be a required part of the PDU for purposes of checksum calculation.

I'm guessing with fresh eyes it should be possible to find issue if the diff
between these two versions.

You are receiving this mail because:
  • You are watching all bug changes.