Wireshark-bugs: [Wireshark-bugs] [Bug 12686] New: GTP: Decoding of NSAPI is broken in version 2.

Date: Fri, 29 Jul 2016 08:44:46 +0000
Bug ID 12686
Summary GTP: Decoding of NSAPI is broken in version 2.0.5
Product Wireshark
Version 2.0.5
Hardware x86
OS All
Status UNCONFIRMED
Severity Major
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Created attachment 14775 [details]
GTP packet with NSAPI

Build Information:
TShark (Wireshark) 2.0.5 (b8dd0bc from master-2.0)

Copyright 1998-2016 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with libpcap, without POSIX capabilities, without libnl, with
libz 1.2.3, with GLib 2.44.1, without SMI, without c-ares, without ADNS, with
Lua 5.1, without GnuTLS, without Gcrypt, with MIT Kerberos, without GeoIP.

Running on Linux 2.6.32-220.7.1.el6.x86_64, with locale en_US.UTF-8, with
libpcap version 1.7.2, with libz 1.2.3.
Intel(R) Xeon(R) CPU           X3440  @ 2.53GHz (with SSE4.2)

Built using gcc 4.4.7 20120313 (Red Hat 4.4.7-11).

--
It seems that changes in function decode_gtp_nsapi (packet-gtp.c) broke
decoding of NSAPI.

Wireshark 2.0.4 decodes it properly but version 2.0.5 says it is malformed
packet. Please see the attached pcap.


You are receiving this mail because:
  • You are watching all bug changes.