On Apr 26, 2011, at 7:03 PM, Guy Harris wrote:
>
> On Apr 26, 2011, at 1:12 AM, Michael Tüxen wrote:
>
>> The fields in the packet are 4 byte aligned. But if the whole structure might not...
>> So should we copy them?
>
> ...or fetch them with pntohl().
>
> Where are the contents of the structure coming from? If they're coming from the raw packet data - i.e., if the pointer in question is pointing into the raw packet data from the tvbuff handed to the SCTP dissector - then not only might the data not be aligned on a 4-byte boundary, it might not even contain all the data you're looking at if the packet was cut short by a snapshot length.
I'll let Irene (who wrote the code) look into this. However, she is currently
on vacation. So it might take some time...
Best regards
Michael
> ___________________________________________________________________________
> Sent via: Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives: http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
> mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
>