Wireshark-bugs: [Wireshark-bugs] [Bug 13122] "Decode as" on a packet isn't working for DCERPC/SP

Date: Sun, 13 Nov 2016 04:05:07 +0000

Comment # 2 on bug 13122 from
(In reply to Pascal Quantin from comment #1)
> As seen in decode_as_dialog.cpp:
> 
>     case FT_GUID:
>         //TODO: DCE/RPC dissector table
>         break;

DCE/RPC is its own beast and may not fit nicely into the FT_GUID type. 
However, I'm not having any luck even starting to hack some DCE/RPC support in.
In the case statement mentioned above, I added

entry_str = "DCE/RPC";

(just for debugging)
And now shortly after returning from the DecodeAsDialog::entryString function
(where the case statement resides), Wireshark crashes (seemingly within Qt with
the selector_combo_box_->addItem() call that contains the entryString call.

I don't see much "obvious" setup for the other field types where FT_GUID isn't
setting up something that causes the addItem() call to fail.
Anyone have pointers?


You are receiving this mail because:
  • You are watching all bug changes.