Wireshark mailing list archives
Re: malformed packet for no reason
From: "Yosi Saggi" <yosis () designartnetworks com>
Date: Tue, 22 Mar 2011 15:56:34 +0200
Thanks. I found the problem. It was the "proto_tree_add_protocol_format" function. I gave an incorrect starting offset Yosi -----Original Message----- From: wireshark-dev-bounces () wireshark org [mailto:wireshark-dev-bounces () wireshark org] On Behalf Of Dirk Jagdmann Sent: Tuesday, March 22, 2011 4:19 AM To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] malformed packet for no reason I guess the packet you are trying to dissect is shorter than your two loops over i and j assume. In your inner loop you do something like: *plen += data_size; So plen will be greater than num_of_data_arrs*num_of_data_chunks*data_size bytes. Then you do a val_ptr = tvb_get_ptr(tvb, *plen, data_size); But tvb_get_ptr() can return NULL when out of bounds of the current packet. I guess this condition is reached on your 6th iteration. -- ---> Dirk Jagdmann ----> http://cubic.org/~doj -----> http://llg.cubic.org ________________________________________________________________________ ___ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- malformed packet for no reason Yosi Saggi (Mar 21)
- Re: malformed packet for no reason Dirk Jagdmann (Mar 21)
- Re: malformed packet for no reason Yosi Saggi (Mar 22)
- Re: malformed packet for no reason Dirk Jagdmann (Mar 21)