[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	11933
Summary	smb2_info_t structure isn't always passed down
Product	Wireshark
Version	Git
Hardware	All
OS	All
Status	CONFIRMED
Severity	Normal
Priority	Low
Component	Dissection engine (libwireshark)
Assignee	bugzilla-admin@wireshark.org
Reporter	mmann78@netscape.net
CC	metze@samba.org

Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
While investigating bug 11931, I noticed that I couldn't duplicate on master.
The reason is that the smb2_info_t structure isn't passed down to the MS-WSP
dissector.  The functionality of dissect_smb2_FSCTL_PIPE_TRANSCEIVE() changed
with Ie6f28fd7, which ends up calling heuristic dissection with no "dissector
data".  Since MS-WSP requires dissector data (smb2_info_t structure), it won't
hit the crash found by the fuzzbot.
I think the solution may be as simple as passing the dissector data through the
heuristic dissection attempt, but I'll let those more familiar with the
protocols ponder it.

---

      You are receiving this mail because:

• You are watching all bug changes.