| Bug ID |
13237
|
| Summary |
Wireshark MPEG TS PMT parser incorrectly flags PMT as malformed
|
| Product |
Wireshark
|
| Version |
2.3.x (Experimental)
|
| Hardware |
x86-64
|
| OS |
Windows 10
|
| Status |
UNCONFIRMED
|
| Severity |
Normal
|
| Priority |
Low
|
| Component |
Dissection engine (libwireshark)
|
| Assignee |
[email protected]
|
| Reporter |
[email protected]
|
Created attachment 15122 [details]
Packet capture showing PMT parser error
Build Information:
Version 2.3.0-1705-g00223bc (v2.3.0rc0-1705-g00223bc)
Copyright 1998-2016 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with Qt 5.6.1, with WinPcap (4_1_3), with GLib 2.42.0, with
zlib 1.2.8, with SMI 0.4.8, with c-ares 1.12.0, with Lua 5.2.4, with GnuTLS
3.2.15, with Gcrypt 1.6.2, with MIT Kerberos, with GeoIP, with nghttp2 1.14.0,
with LZ4, with Snappy, with QtMultimedia, with AirPcap, with SBC, with SpanDSP.
Running on 64-bit Windows 10, build 14393, with Intel(R) Core(TM) i7-6700HQ CPU
@ 2.60GHz (with SSE4.2), with 16250 MB of physical memory, with locale
English_United States.1252, with WinPcap version 4.1.2 (packet.dll version
4.1.0.2001), based on libpcap version 1.0 branch 1_0_rel0b (20091008), with
GnuTLS 3.2.15, with Gcrypt 1.6.2, without AirPcap.
Built using Microsoft Visual C++ 12.0 build 40629
Wireshark is Open Source Software released under the GNU General Public
License.
Check the man page and http://www.wireshark.org for more information.
--
Wireshark appears to be incorrectly flagging the PMT as malformed in the packet
capture I have. Manzanita MP2SAE (Commercial MPEG Analyzer) does not flag the
same PMT when I extract the MPEG TS from the capture and run it through
Manzanita.
Attaching sample packet capture and Manzanita report. You will see many of the
errors if you use the filter ip.dst_host ==239.0.1.94 && _ws.expert.severity ==
error
One specific example is in IP packet 406, which contains a PMT in MPEG packet
2439. Wireshark is flagging this as malformed, however it does not appear to
actually be malformed.
You are receiving this mail because:
- You are watching all bug changes.