Wireshark-dev: [Wireshark-dev] [PATCH] DCCP: variable-length checksums
From: "Francesco Fondelli" <francesco.fondelli@xxxxxxxxx>
Date: Mon, 13 Nov 2006 11:46:45 +0100
Hi, please find attached a patch file against svn rev. 19883. This is Gerrit Renker code which: * makes checksum computation dependent upon the header CsCov field (cf. RFC 4340, 5.1) * removes the case where checksums are zero (unlike UDP/packet-udp, from which the code stems, zero checksums are illegal in DCCP (as in TCP)) * fixes a minor typo - missing bitshift of the CCVal field Moreover the wiki page has been updated, please have a look at: http://wiki.wireshark.org/DCCP and new traces added. I have used and fuzz-tested this code. Please check it in. thanks, Ciao FF
Index: epan/dissectors/packet-dcp.c =================================================================== --- epan/dissectors/packet-dcp.c (revision 19883) +++ epan/dissectors/packet-dcp.c (working copy) @@ -30,10 +30,21 @@ */ -/* Note: PROTOABBREV name collision problem, 'dccp' is used by Distributed Checksum - Clearinghouse Protocol. - This dissector should be named packet-dccp.c IMHO. -*/ +/* NOTES: + * + * PROTOABBREV name collision problem, 'dccp' is used by + * Distributed Checksum Clearinghouse Protocol. + * This dissector should be named packet-dccp.c IMHO. + * + * Nov 13, 2006: makes checksum computation dependent + * upon the header CsCov field (cf. RFC 4340, 5.1) + * (Gerrit Renker) + * + * Nov 13, 2006: removes the case where checksums are zero + * (unlike UDP/packet-udp, from which the code stems, + * zero checksums are illegal in DCCP (as in TCP)) + * (Gerrit Renker) + */ #ifdef HAVE_CONFIG_H # include "config.h" @@ -541,6 +552,16 @@ } /* end while() */ } +/* compute DCCP checksum coverage according to RFC 4340, section 9 */ +static inline guint dccp_csum_coverage(const e_dcphdr *dcph, guint len) +{ + guint cov; + + if (dcph->cscov == 0) + return len; + cov = (dcph->data_offset + dcph->cscov - 1) * sizeof(guint32); + return (cov > len)? len : cov; +} static void dissect_dcp(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree) { @@ -595,7 +616,8 @@ /* DBG("dcph->data_offset: %d\n", dcph->data_offset); */ dcph->cscov=tvb_get_guint8(tvb, offset+5)&0x0F; /* DBG("dcph->cscov: %d\n", dcph->cscov); */ - dcph->ccval=tvb_get_guint8(tvb, offset+5)&0xF0; + dcph->ccval=tvb_get_guint8(tvb, offset+5) &0xF0; + dcph->ccval >>= 4; /* DBG("dcph->ccval: %d\n", dcph->ccval); */ dcph->checksum=tvb_get_ntohs(tvb, offset+6); /* DBG("dcph->checksum: %d\n", dcph->checksum); */ @@ -662,15 +684,11 @@ proto_tree_add_uint(dcp_tree, hf_dcp_ccval, tvb, offset + 5, 1, dcph->ccval); proto_tree_add_uint(dcp_tree, hf_dcp_cscov, tvb, offset + 5, 1, dcph->cscov); - /* checksum analisys taken from packet-udp */ + /* checksum analysis taken from packet-udp (difference: mandatory checksums in DCCP) */ reported_len = tvb_reported_length(tvb); len = tvb_length(tvb); - if (dcph->checksum == 0) { - /* No checksum supplied in the packet */ - proto_tree_add_uint_format_value(dcp_tree, hf_dcp_checksum, tvb, - offset + 6, 2, dcph->checksum, "0x%04x (none)", dcph->checksum); - } else if (!pinfo->fragmented && len >= reported_len) { + if (!pinfo->fragmented && len >= reported_len) { /* The packet isn't part of a fragmented datagram and isn't truncated, so we can checksum it. @@ -703,7 +721,7 @@ break; } cksum_vec[3].ptr = tvb_get_ptr(tvb, offset, len); - cksum_vec[3].len = reported_len; + cksum_vec[3].len = dccp_csum_coverage(dcph, reported_len); computed_cksum = in_cksum(&cksum_vec[0], 4); if (computed_cksum == 0) { proto_tree_add_uint_format_value(dcp_tree, hf_dcp_checksum, tvb,
- Follow-Ups:
- Re: [Wireshark-dev] [PATCH] DCCP: variable-length checksums
- From: Anders Broman
- Re: [Wireshark-dev] [PATCH] DCCP: variable-length checksums
- Prev by Date: [Wireshark-dev] COPY_ADDRESS and g_malloc()
- Next by Date: [Wireshark-dev] [patch] TIPC - show src/dst for Neighbour Discovery Packets
- Previous by thread: Re: [Wireshark-dev] COPY_ADDRESS and g_malloc()
- Next by thread: Re: [Wireshark-dev] [PATCH] DCCP: variable-length checksums
- Index(es):