Wireshark-bugs: [Wireshark-bugs] [Bug 12641] New: MPTCP MP_PRIO header with AddrID: incorrect Ad

Date: Fri, 22 Jul 2016 05:54:16 +0000
Bug ID 12641
Summary MPTCP MP_PRIO header with AddrID: incorrect AddrID
Product Wireshark
Version 2.0.4
Hardware x86-64
OS Windows 7
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Created attachment 14750 [details]
MP_PRIO AddrID decoded at incorrect byte offset.

Build Information:
TShark (Wireshark) 2.0.4 (v2.0.4-0-gdd7746e from master-2.0)

Copyright 1998-2016 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with WinPcap (4_1_3), with libz 1.2.8, with GLib 2.42.0, with
SMI 0.4.8, with c-ares 1.11.0, with Lua 5.2, with GnuTLS 3.2.15, with Gcrypt
1.6.2, with MIT Kerberos, with GeoIP.

Running on 64-bit Windows 7 Service Pack 1, build 7601, with locale
English_United States.1252, with WinPcap version 4.1.3 (packet.dll version
4.1.0.2980), based on libpcap version 1.0 branch 1_0_rel0b (20091008), with
GnuTLS 3.2.15, with Gcrypt 1.6.2.
      Intel(R) Core(TM) i7-3720QM CPU @ 2.60GHz (with SSE4.2), with 24508MB of
physical memory.


Built using Microsoft Visual C++ 12.0 build 40629
--
The MP_PRIO is an Option that is either 3 or 4 bytes long. In the latter case,
the fourth byte is the AddrID. However, it seems that the position from where
it is decoded is not incremented and thus the previous byte (subtype+flags) is
decoded as AddrID. See attached PCAP with a single packet to demonstrate the
issue.


You are receiving this mail because:
  • You are watching all bug changes.