Gerald Combs [Wed, 28 Nov 2012 18:44:10 +0000 (28 18:44 -0000)]
Build 1.8.4.
svn path=/trunk-1.8/; revision=46250
Gerald Combs [Wed, 28 Nov 2012 00:33:28 +0000 (28 00:33 -0000)]
Copy over r46238 from the trunk:
------------------------------------------------------------------------
r46238 | morriss | 2012-11-27 15:05:03 -0800 (Tue, 27 Nov 2012) | 8 lines
Changed paths:
M /trunk/tshark.c
Delay the reading of the hosts file ("-H") until after cf_open() has been
called. (cf_open() calls init_dissection() which, since r45511,
re-initializes the name resolution database.)
Complain if the user gives an invalid argument to "-W".
Specify the invalid argument if we don't like a "-z" argument.
------------------------------------------------------------------------
Update the release notes.
svn path=/trunk-1.8/; revision=46241
Gerald Combs [Tue, 27 Nov 2012 18:38:20 +0000 (27 18:38 -0000)]
Update the release notes.
svn path=/trunk-1.8/; revision=46235
Gerald Combs [Tue, 27 Nov 2012 01:14:18 +0000 (27 01:14 -0000)]
Add missing items from the Roadmap wiki page.
svn path=/trunk-1.8/; revision=46216
Gerald Combs [Mon, 26 Nov 2012 22:56:22 +0000 (26 22:56 -0000)]
Remove a bunch of "mergeinfo" properties.
svn path=/trunk-1.8/; revision=46213
Gerald Combs [Mon, 26 Nov 2012 22:55:23 +0000 (26 22:55 -0000)]
Copy over revisions from the trunk:
------------------------------------------------------------------------
r46003 | eapache | 2012-11-11 12:29:06 -0800 (Sun, 11 Nov 2012) | 7 lines
Changed paths:
M /trunk/epan/dissectors/packet-tpncp.c
Fix part of https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6665
Make sure the array of names is always null-terminated, even if we have
enough names to fill the entire thing. Also use a gboolean instead of a
gint for one variable.
------------------------------------------------------------------------
r46004 | eapache | 2012-11-11 12:54:12 -0800 (Sun, 11 Nov 2012) | 5 lines
Changed paths:
M /trunk/epan/dissectors/packet-tpncp.c
Fix the rest of https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6665
Catch exceptions thrown while registering the dynamically generated tpncp
fields, and take that as a hint that the .dat file is corrupt.
------------------------------------------------------------------------
r46153 | ruengeler | 2012-11-23 05:16:04 -0800 (Fri, 23 Nov 2012) | 2 lines
Changed paths:
M /trunk/ui/gtk/sctp_stat.c
Fix bug reported in https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8011
------------------------------------------------------------------------
Copy over with manual intervention:
------------------------------------------------------------------------
r46005 | pascal | 2012-11-11 15:17:09 -0800 (Sun, 11 Nov 2012) | 6 lines
Changed paths:
M /trunk/epan/dissectors/packet-ssl.c
From Erik Tews via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7967 :
Fix dissection of Server Name Indication extension in SSL/TLS traffic
From me:
Fix a few errors found by checkhf.pl and fix-encoding-args.pl
------------------------------------------------------------------------
Update the release notes.
svn path=/trunk-1.8/; revision=46212
Gerald Combs [Mon, 26 Nov 2012 22:35:09 +0000 (26 22:35 -0000)]
Copy over revisions from the trunk:
------------------------------------------------------------------------
r45674 | darkjames | 2012-10-20 13:50:25 -0700 (Sat, 20 Oct 2012) | 2 lines
Changed paths:
M /trunk/epan/addr_resolv.c
Make r45511 work also without HAVE_C_ARES.
------------------------------------------------------------------------
Copy over with manual intervention:
------------------------------------------------------------------------
r45511 | gerald | 2012-10-12 14:37:02 -0700 (Fri, 12 Oct 2012) | 9 lines
Changed paths:
M /trunk/epan/addr_resolv.c
M /trunk/epan/packet.c
M /trunk/wiretap/file_access.c
M /trunk/wiretap/pcapng.c
Use seasonal allocation for name resolution. This effectively scrubs our
resolution information between capture files so that we don't leak host
entries from one file to another (e.g. embarassing-host-name.example.com
from file1.pcapng into a name resolution block in file2.pcapng).
host_name_lookup_cleanup and host_name_lookup_init must now be called
after each call to se_free_all. As a result we now end up reading our
various name resolution files much more than we should.
------------------------------------------------------------------------
Update the release notes.
svn path=/trunk-1.8/; revision=46211
Pascal Quantin [Mon, 26 Nov 2012 13:24:58 +0000 (26 13:24 -0000)]
Copy over from trunk:
------------------------------------------------------------------------
r46202 | pascal | 2012-11-26 14:21:18 +0100 (lun., 26 nov. 2012) | 2 lines
Add missing OPTIONAL keyword in RRCConnectionRequest message
svn path=/trunk-1.8/; revision=46203
Gerald Combs [Sun, 25 Nov 2012 15:34:04 +0000 (25 15:34 -0000)]
[Automatic manuf, services and enterprise-numbers update for 2012-11-25]
svn path=/trunk-1.8/; revision=46179
Anders Broman [Thu, 22 Nov 2012 07:36:39 +0000 (22 07:36 -0000)]
Copy over:
Revision 46125 - fix
/home/wireshark/builders/trunk/ubuntu1204x64/build/epan/dissectors/packet-bssgp.c: In function de_bssgp_son_transfer_app_id:
/home/wireshark/builders/trunk/ubuntu1204x64/build/epan/dissectors/packet-bssgp.c:3173:12: error: variable next_tvb set but not used
[-Werror=unused-but-set-variable]
cc1: all warnings being treated as errors
svn path=/trunk-1.8/; revision=46136
Anders Broman [Wed, 21 Nov 2012 18:52:24 +0000 (21 18:52 -0000)]
Copy over:
Revision 46113 - The previous change means the "len" argument is now being used.
--------------------------------------------------------------------------------
Revision 46111 - Allign the tables for dissection.
From me try to fix the dissection of SONtransferApplicationIdentity_PDU.
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8008
--------------------------------------------------------------------------------
Revision 46081 - - In de_bssgp_pdu_in_error() use current_offset isof 0.
- in function de_bssgp_ran_inf_error_rim_cont. Error rim
container doesn't have field rim sequence number. This field exists in the rest
of containers but not in this one. So I have removed this field.
In this function we have field pdu in error and this field is mandatory, not
optional
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8000
svn path=/trunk-1.8/; revision=46114
Stig Bjørlykke [Wed, 21 Nov 2012 11:05:50 +0000 (21 11:05 -0000)]
Copy over from trunk:
------------------------------------------------------------------------
r46078 | stig | 2012-11-18 20:15:34 +0100 (Sun, 18 Nov 2012) | 2 lines
Added check for missing/empty ProtoField abbrev.
svn path=/trunk-1.8/; revision=46106
Bill Meier [Wed, 21 Nov 2012 00:55:55 +0000 (21 00:55 -0000)]
Copy over from trunk:
------------------------------------------------------------------------
r46098 | wmeier | 2012-11-20 19:41:32 -0500 (Tue, 20 Nov 2012) | 4 lines
From Stephen Tarr: Fix 'misspelling (typo) in display filter field name'.
ipv6.framgent --> ipv6.fragment
#BACKPORT
------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=46100
Pascal Quantin [Sun, 18 Nov 2012 16:43:47 +0000 (18 16:43 -0000)]
Fix compilation broken in r46030 due to backport of changes present in trunk and not in trunk-1.8
svn path=/trunk-1.8/; revision=46074
Gerald Combs [Sun, 18 Nov 2012 15:34:03 +0000 (18 15:34 -0000)]
[Automatic manuf, services and enterprise-numbers update for 2012-11-18]
svn path=/trunk-1.8/; revision=46071
Greg Morris [Wed, 14 Nov 2012 19:28:29 +0000 (14 19:28 -0000)]
Fix for NCP malformed packets due to hash table corruption
Fix for NCP 89,6 request packet not displaying 1 char path
Fix for NMAS malformed packet
Fix for OES Linux server flag
svn path=/trunk-1.8/; revision=46030
Anders Broman [Mon, 12 Nov 2012 15:02:11 +0000 (12 15:02 -0000)]
Reverted:
Revision 45180 - Replace g_strcmp0 with strcmp. It was introduced in GLib 2.16 and our minimum version is 2.14.
Copy over:
Revision 45707 - g_strcmp0 first occures in GLIB 2.16 define it localy if it does not exist
to make builds on Fedora 8 with GTK 2.12 work.
svn path=/trunk-1.8/; revision=46011
Gerald Combs [Sun, 11 Nov 2012 15:34:20 +0000 (11 15:34 -0000)]
[Automatic manuf, services and enterprise-numbers update for 2012-11-11]
svn path=/trunk-1.8/; revision=45998
Anders Broman [Fri, 9 Nov 2012 12:25:14 +0000 (9 12:25 -0000)]
Copy over:
Revision 45950 -Fix dissection of NAS security parameters to/from E-UTRA
svn path=/trunk-1.8/; revision=45982
Anders Broman [Fri, 9 Nov 2012 12:08:41 +0000 (9 12:08 -0000)]
Copy over:
Revision 45980 - GSM classmark3 8-PSK decode error
proto_tree_add_bits_item() can't be called with a length value of -1.
Calculate the value, fixes BUG:
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7964
svn path=/trunk-1.8/; revision=45981
Anders Broman [Mon, 5 Nov 2012 14:31:02 +0000 (5 14:31 -0000)]
Copy over:
----------------------------------------------------------------------------------------
Revision 43854 - Fix some clang warnings: implicit conversion from enumeration type 'GtkStateType' to different enumeration type 'GtkStateFlags' [-Werror,-Wconversion]
GTK_STATE_NORMAL and GTK_STATE_FLAG_NORMAL are both 0.
----------------------------------------------------------------------------------------
Revision 44186 - Get rid of some GTK_CHECK_VERSION instances by using compabillity macros.
----------------------------------------------------------------------------------------
Revision 45820 - fix https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7913
When we create a new color filter, we prepend the color filter list with
a default entry and launch an edit dialogue. If the user cancels, we
have to remove this _first_ entry from the list (not the last one).
----------------------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45928
Anders Broman [Mon, 5 Nov 2012 14:30:13 +0000 (5 14:30 -0000)]
Back out Revision 45866 - This patch will print the information if an invalid string was entered. It would be better to have a button to click on in the UAT dialog to show valid values, but I don't know how I could do that with the UAT system. So I'm simply printing it now in the error dialog, which should be good enough.
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7949
And add missing patch to epan.c
svn path=/trunk-1.8/; revision=45927
Anders Broman [Mon, 5 Nov 2012 13:48:45 +0000 (5 13:48 -0000)]
Copy over:
----------------------------------------------------------------------------------------
Revision 44611 - From Teguh via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7657
Replace the last instance of gnutls_datum with gnutls_datum_t. The former
is deprecated, and the latter is already being used elsewhere in the file.
----------------------------------------------------------------------------------------
Revision 45465 - Make the SSL dissector work with GnuTLS compiled with nettle.
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6869
----------------------------------------------------------------------------------------
Revision 45865 - Print the GNUTLS error message upon import failure.
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7948
----------------------------------------------------------------------------------------
Revision 45866 - This patch will print the information if an
invalid string was entered. It would be better to have a button to click on in
the UAT dialog to show valid values, but I don't know how I could do that with
the UAT system. So I'm simply printing it now in the error dialog, which should
be good enough.
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7949
svn path=/trunk-1.8/; revision=45926
Anders Broman [Mon, 5 Nov 2012 13:33:44 +0000 (5 13:33 -0000)]
Copy over:
Revision 45867 - Patch to update the decryption status right after the user updates
WEP/WPA keys in the UAT.
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7921
svn path=/trunk-1.8/; revision=45925
Gerald Combs [Sun, 4 Nov 2012 15:34:39 +0000 (4 15:34 -0000)]
[Automatic manuf, services and enterprise-numbers update for 2012-11-04]
svn path=/trunk-1.8/; revision=45890
Anders Broman [Wed, 31 Oct 2012 17:14:15 +0000 (31 17:14 -0000)]
Copy over:
Revision 44634 - Fix extended value-string linear search: remove 2 dups from value-string array.
-------------------------------------------------------------------------------------------------------------------
Revision 45852 - The GTP dissector can't handle long APN names, max is 100.
Bug https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7932
-------------------------------------------------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45853
Anders Broman [Wed, 31 Oct 2012 09:56:13 +0000 (31 09:56 -0000)]
Copy over:
evision 44281 - Create (fake)interface information when loading a libpcap file it might be needed when wrinting the file if the format is converted to pcapng.
Should we do this for other file formats as well?
A pcapng file with per packet encapsulation will need an IDB per encapsulation as the EPB does not have a linktype indicator only a interface index.
-------------------------------------------------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45845
Anders Broman [Wed, 31 Oct 2012 09:38:55 +0000 (31 09:38 -0000)]
Copy over:
Revision 45843 - From report of VinsWorldcom via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7938 IPv6 Option Pad1 Incorrect dissection
Wireshark 1.8.3 does not decode the IPv6 Option Pad1 (RFC 2460 Section 4.2)
RFC say : NOTE! the format of the Pad1 option is a special case -- it does not have length and value fields.
-------------------------------------------------------------------------------------------------------------------
Revision 43779 - Fix some system header files that were #included with "" instead of <>. They made cppcheck unhappy.
-------------------------------------------------------------------------------------------------------------------
Revision 43363 - Add proto_tree_add_unicode_string() to add UTF-8 string to tree.
Convert some proto_tree_add_string_format_value(..., val, "%s", val); to use new function.
-------------------------------------------------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45844
Anders Broman [Tue, 30 Oct 2012 16:02:51 +0000 (30 16:02 -0000)]
Copy over:
Revision 43761 - Use same capitalization for Service request message as for other messages
--------------------------------------------------------------------------------------
Revision 44082 - Fix a few Clang warnings (dead increment, dead assignment)
--------------------------------------------------------------------------------------
Revision 44514 - bugfix minor memory leaks with GString use
--------------------------------------------------------------------------------------
Revision 45046 - Test Procedures messages should be also integrity protected
--------------------------------------------------------------------------------------
Revision 45267 - Use a value string array for EPS Bearer Identity and remove useless de_esm_lnkd_eps_bearer_id function
--------------------------------------------------------------------------------------
Revision 45660 - Add back the "%!" removed in r33773; otherwise, for some unknown reason, only 1 page will be viewable. (Tested w/gsview 5.0 and ghostscript 9.06)
#BACKPORT(1.8, 1.6)
--------------------------------------------------------------------------------------
Revision 45614 - fix https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7869
make tpiLen a guint such that it can store 2 + tvb_get_guint8(...)
without overflow
--------------------------------------------------------------------------------------
Revision 45696 - From Sho Amano via https://www.wireshark.org/lists/wireshark-dev/201210/msg00186.html:
Fix WLAN decryption when using a WPA PSK key
--------------------------------------------------------------------------------------
Revision 45717 - Avoid potential infinite loops. Fixes https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7879
--------------------------------------------------------------------------------------
Revision 45742 - From Steve Magnani
fix USB descriptor parsing
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7909
--------------------------------------------------------------------------------------
Revision 45770 - Allow <interval> to be successfully sscanf'd no matter the locale for the
decimal symbol. Fixes https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2880 (again).
--------------------------------------------------------------------------------------
Revision 45789 - From Umberto Corponi via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7912 :
Allow dissection of ESM messages with integrity protection and EEA0 ciphering
From me:
Tighten heuristic to check for allowed EPS bearer identity values
--------------------------------------------------------------------------------------
Revision 45823 - Fix https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7790 :
Add missing offset increment after displaying minimum count
svn path=/trunk-1.8/; revision=45837
Gerald Combs [Sun, 28 Oct 2012 14:33:58 +0000 (28 14:33 -0000)]
[Automatic manuf, services and enterprise-numbers update for 2012-10-28]
svn path=/trunk-1.8/; revision=45816
Gerald Combs [Sun, 21 Oct 2012 14:33:53 +0000 (21 14:33 -0000)]
[Automatic manuf, services and enterprise-numbers update for 2012-10-21]
svn path=/trunk-1.8/; revision=45676
Guy Harris [Thu, 18 Oct 2012 05:23:03 +0000 (18 05:23 -0000)]
Copy over revisions from trunk:
------------------------------------------------------------------------
r45627 | guy | 2012-10-17 22:20:09 -0700 (Wed, 17 Oct 2012) | 9 lines
Handle the fractions-of-a-second part of the time stamp correctly.
Extract it as a string, not a number, and determine the resolution based
on the length of the string, i.e. on the number of digits presented.
(If you base it on the numerical value, leading zeroes will not be taken
into account, but they aren't any different from other digits when
determining the resolution.) The resolution is 1/10^ndigits seconds, so
we have to multiply it by 10^(9-ndigits) to convert the number to
nanoseconds.
------------------------------------------------------------------------
r45626 | guy | 2012-10-17 21:52:33 -0700 (Wed, 17 Oct 2012) | 24 lines
Redo the processing of lines in iSeries text packet dumps.
Process several different flavors of header lines the same: "IP Header",
"IPv6 Header", "ARP Header", "TCP Header", "UDP Header", "ICMP Header",
"ICMPv6 Hdr", "Option Hdr" - the hex data for all of them should be
included in the packet data. Process continuation lines if those
headers wrap over more than one line.
Do not assume, or require, that *any* of those be present; there is no
guarantee that "IP Header" or "IPv6 Header" will be present (there's at
least one IBM page showing a packet with "ARP Header" in a trace), and
there is no guarantee that "TCP Header" will be present (there are
traces with "UDP Header" and "ICMPv6 Hdr").
Do not impose limits, other than the overall line limit, on the amount
of hex data in header or data lines; there is no guarantee that, for
example, a TCP header is 20 bytes long (if there are TCP options, it
*will* have more than 20 bytes).
Make sure we have an even number of hex digits.
Set "caplen" to the actual number of bytes we've read, even if that's
less than the purported packet length.
svn path=/trunk-1.8/; revision=45628
Guy Harris [Wed, 17 Oct 2012 21:37:31 +0000 (17 21:37 -0000)]
Copy over r45621 from trunk:
------------------------------------------------------------------------
r45621 | darkjames | 2012-10-17 14:14:14 -0700 (Wed, 17 Oct 2012) | 2 lines
Only cap_len (not pkt_len) bytes of buffer are valid.
svn path=/trunk-1.8/; revision=45623
Guy Harris [Wed, 17 Oct 2012 21:31:53 +0000 (17 21:31 -0000)]
Copy over r45620 from trunk:
------------------------------------------------------------------------
r45620 | darkjames | 2012-10-17 14:11:58 -0700 (Wed, 17 Oct 2012) | 2 lines
Fix a copy/paste error
svn path=/trunk-1.8/; revision=45622
Guy Harris [Wed, 17 Oct 2012 01:28:56 +0000 (17 01:28 -0000)]
Copy over r45609 from trunk:
------------------------------------------------------------------------
r45609 | guy | 2012-10-16 18:23:13 -0700 (Tue, 16 Oct 2012) | 13 lines
The first 4 bytes of the Prism header are, apparently, a "message code",
and it apparently either has the value 0x00000044 or 0x00000041. If
those bytes aren't the magic number for an AVS header and aren't one of
those "message code" values, assume there's no Prism header, just an
802.11 frame - that fixes at least one capture where some packets have
AVS radio headers and other packets have no radio header.
Note that this might also let us handle big-endian Prism headers (see
which byte order the message code is in, and assume everything else is
in the same byte order).
Display the message code in hex, not decimal.
svn path=/trunk-1.8/; revision=45610
Anders Broman [Tue, 16 Oct 2012 14:42:25 +0000 (16 14:42 -0000)]
Copy over:
Revision 45585 - '*' wildcard in the 'Src IP' or 'Dest IP' field of the ESP SA dialog does not work
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7866
svn path=/trunk-1.8/; revision=45586
Anders Broman [Tue, 16 Oct 2012 12:58:07 +0000 (16 12:58 -0000)]
Copy over:
Revision 43157 - Fix some dead assignments.
-------------------------------------------------------------------------------------------------
Revision 44076 - Some more debug info.
-------------------------------------------------------------------------------------------------
Revision 45431 - From Mark Phillips via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7820
wlan_mgt.ht.capabilities bits 8-15 incorrectly decoded (from wrong packet offset)
The bug is that the code defines the bit fields as 16 bit, but increments the
offset in-between decoding B0-B7 and B8-B15 which causes the wrong bits to be
decoded.
Also fix to change "Capability" to "Capabilities" to match spec
From me : Fix wrong length for A-MPDU
-------------------------------------------------------------------------------------------------
Revision 45510 - Do not use private_data from caller dissector as IKEv2 decryption parameters
svn path=/trunk-1.8/; revision=45580
Anders Broman [Tue, 16 Oct 2012 12:04:06 +0000 (16 12:04 -0000)]
Copy over:
Revision 45408 - fix https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7800
use correct data types in eigrp dissector to prevent overflow
--------------------------------------------------------------------------------
Revision 45361 - Clean up properly when we can't find a radius $INCLUDE regardless of the
state of errno. Don't treat it as a fatal parse error because it isn't,
so we keep parsing the rest of the dictionaries even if one is missing.
--------------------------------------------------------------------------------
Revision 45360 - Don't destroy the in-memory radius dictionary if we hit a parse error:
- If it's something as simple as a missing $INCLUDE then we probably still want
whatever we could parse
- We weren't doing it consistently anyways
- There were a whole bunch of places where we were using it regardless of
whether or not the parse failed, leading to read-after-free errors.
--------------------------------------------------------------------------------
Revision 45359 - Clean up better if we can't open a radius dictionary included by another
radius dictionary. One of many issues with the way we load radius
dictionaries.
Part of https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7803
--------------------------------------------------------------------------------
Revision 45354 - Work around bug 7803 by not freeing the old name value until after it's been
replaced in the key-set of the hash table. This doesn't really provide proper
behaviour, it just stops us from accessing freed memory.
Also, add modelines.
--------------------------------------------------------------------------------
Revision 43681 - Don't call subdissectors / expert...() / col...() under 'if (tree)'
Also:
Remove some uneeded initializers;
Do some whitespace cleanup and re-formatting.
svn path=/trunk-1.8/; revision=45579
Anders Broman [Tue, 16 Oct 2012 11:29:36 +0000 (16 11:29 -0000)]
Copy over:
--------------------------------------------------------------------------------
Revision 45462 - Change 'for (i=1; i<=n;...' to 'for (i=0; i<n; ...)'
Done on general principles altho none of the cases
changed would have actually resulted in an infinite
loop because a Bounds error would eventually occur.
--------------------------------------------------------------------------------
Revision 45355 - Fix https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7802 :
Avoid an infinite loop when number_of_dup_tsns is equal to 65535
--------------------------------------------------------------------------------
Revision 45338 - pinfo is now used
--------------------------------------------------------------------------------
Revision 45337 - Fix https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7801 :
Ensure that the sub-type length is at least 2 (for sub-type and length fields).
Prevents an infinite loop when the length equals 0.
--------------------------------------------------------------------------------
Revision 45329 - The sFlow specification says there's an address type "unknown", with an
address type value of 0, and with zero bytes of address; handle it
explicitly, and don't treat it as an error.
In the sFlow dissectors, do all the checks for "is this an sFlow
packet?" *before* we do anything to the columns and the protocol tree.
--------------------------------------------------------------------------------
Revision 45324 - fix fuzz test failures in sflow
in dissect_sflow_245_address_type(), don't reset the offset to 0 when
the address family is unkown
bring up an expert info instead and increment offset by the number of
bytes processed
--------------------------------------------------------------------------------
Revision 45321 - From Sven Eckelmann:
Fix dissection of IEEE 802.11 Channel Switch Announcement element.
--------------------------------------------------------------------------------
Revision 44559 - Use capture scoped memory for hash table functionality
--------------------------------------------------------------------------------
Revision 44438 - Use val_to_str_const() where appropriate;(...) - Done only for affected files for easier compare.
--------------------------------------------------------------------------------
Revision 43538 - Update FSF address - part II. - - Done only for affected files for easier compare.
--------------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45578
Anders Broman [Mon, 15 Oct 2012 16:03:10 +0000 (15 16:03 -0000)]
Copy over:
Revision 45559 -From Rakesh Kumar:
Error in AUXILIARY SECURITY HEADER Parsing for 802.15.4 in dissect_ieee802154_common function.
Offset should be +8 not +4
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7864
svn path=/trunk-1.8/; revision=45560
Guy Harris [Sun, 14 Oct 2012 22:55:51 +0000 (14 22:55 -0000)]
Copy over revisions from trunk:
------------------------------------------------------------------------
r45548 | guy | 2012-10-14 15:53:25 -0700 (Sun, 14 Oct 2012) | 2 lines
Clean up the "round up to a multiple of 4" code a bit.
------------------------------------------------------------------------
r45524 | eapache | 2012-10-13 15:12:52 -0700 (Sat, 13 Oct 2012) | 9 lines
Fix https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7858
Use a full 32-bit literal instead of just a 16-bit one. Fixes case where
the value we're &-ing with just slips over 2^16, making us get stuck
in an infinite loop.
I'm not sure this matches the iscsi spec anymore, the comment in the code
about padding bytes is ambiguous as to whether they're leading or trailing.
svn path=/trunk-1.8/; revision=45549
Guy Harris [Sun, 14 Oct 2012 22:40:43 +0000 (14 22:40 -0000)]
Copy over r45545 from trunk:
------------------------------------------------------------------------
r45545 | guy | 2012-10-14 15:38:58 -0700 (Sun, 14 Oct 2012) | 28 lines
According to
http://home.martin.cc/linux/prism
there's a set of DID type values different from the ones we were using,
and there are captures out there that use values from both sets.
Support both sets.
That page also says that a "status" value of 0 means "supplied"; treat
zero as meaning "supplied", and, if it's not zero for a field, don't
include it.
The "Mac Time" is, according to that page, the lower 32 bits of the MAC
timestamp; report it as such.
Fix some field names that were copied-and-pasted but not changed.
The RSSI and signal quality values are numbers, so show them in decimal.
The "signal" and "noise" values appear to be signed numbers, so make
them signed rather than unsigned and show them in decimal.
Show the data rate in the same style as it's shown in the radiotap
dissector.
Show the frame length in decimal; we probably have relatively few users
with 16 fingers.
svn path=/trunk-1.8/; revision=45546
Gerald Combs [Sun, 14 Oct 2012 14:34:18 +0000 (14 14:34 -0000)]
[Automatic manuf, services and enterprise-numbers update for 2012-10-14]
svn path=/trunk-1.8/; revision=45532
Guy Harris [Sun, 14 Oct 2012 02:55:07 +0000 (14 02:55 -0000)]
Copy over r45529 from trunk:
------------------------------------------------------------------------
r45529 | guy | 2012-10-13 19:54:25 -0700 (Sat, 13 Oct 2012) | 10 lines
Some of the changes claimed to be in the previous checkin weren't there.
Label the data sources for reassembled fragments as "Reassembled
6LoWPAN".
Fix the capitalization of "6LoWPAN".
Also, label the data sources for decompressed fragments as "Decompressed
6LoWPAN xxx".
svn path=/trunk-1.8/; revision=45530
Guy Harris [Sun, 14 Oct 2012 02:36:22 +0000 (14 02:36 -0000)]
Copy over r45527 from trunk:
------------------------------------------------------------------------
r45527 | guy | 2012-10-13 19:33:26 -0700 (Sat, 13 Oct 2012) | 12 lines
*Always* create a new data source when we decompress an IPv6 header.
Label the data sources for them as "6LoWPAN xxx", where "xxx" is the
type of compression, and label the data sources for reassembled
fragments as "Reassembled 6LoWPAN".
Fix the capitalization of "6LoWPAN".
Note that if reassembly fails, continuing dissection is not the right
thing to do, at least not if it failed because we don't *yet* have all
the fragments.
svn path=/trunk-1.8/; revision=45528
Guy Harris [Sat, 13 Oct 2012 22:23:12 +0000 (13 22:23 -0000)]
Copy over r45525 from trunk with manual intervention:
------------------------------------------------------------------------
r45525 | guy | 2012-10-13 15:20:34 -0700 (Sat, 13 Oct 2012) | 6 lines
The Interface Name field of the Interface Name sub-object of the
Interface Information object for ICMP is *NOT* null-terminated. Use
tvb_format_text() for now, to properly null-terminate the display string
and to cope with non-ASCII data. (It should ultimately be a named field
with an encoding of UTF-8.)
svn path=/trunk-1.8/; revision=45526
Guy Harris [Fri, 12 Oct 2012 21:00:51 +0000 (12 21:00 -0000)]
Copy over r45507 from trunk:
------------------------------------------------------------------------
r45507 | guy | 2012-10-12 13:59:08 -0700 (Fri, 12 Oct 2012) | 4 lines
And that also means that we need to split the data rate from the
pseudo-header into two bytes and fill in both the rate and direction
fields when writing CommView NCF files out.
svn path=/trunk-1.8/; revision=45508
Guy Harris [Fri, 12 Oct 2012 20:52:02 +0000 (12 20:52 -0000)]
Copy over r45504 from trunk:
------------------------------------------------------------------------
r45504 | guy | 2012-10-12 13:51:04 -0700 (Fri, 12 Oct 2012) | 14 lines
The "rate" field in the CommView NCF format is 1 byte long, not 2 bytes
long; that means we read only one byte into our structure, so make its
"rate" element one byte long, so we don't fill in half the "rate"
element with the read - and the *wrong* half on big-endian machines -
and leave the other half un-set and thus containing some random possibly
non-zero data.
In addition, that's not the full data rate for faster networks; for
Wi-Fi, the one-byte "direction" field is actually the upper 8 bits of
the data rate, so combine them when we fill in the data rate in the
pseudo-header.
svn path=/trunk-1.8/; revision=45505
Bill Meier [Fri, 12 Oct 2012 19:34:15 +0000 (12 19:34 -0000)]
Copy over from trunk:
------------------------------------------------------------------------
r45500 | wmeier | 2012-10-12 14:31:31 -0400 (Fri, 12 Oct 2012) | 2 lines
Fix (what appears to be) a minor "off by one" bug in 'for' loop.
------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45501
Guy Harris [Fri, 12 Oct 2012 03:56:58 +0000 (12 03:56 -0000)]
Copy over r45495 from trunk:
------------------------------------------------------------------------
r45495 | guy | 2012-10-11 20:55:10 -0700 (Thu, 11 Oct 2012) | 13 lines
If we see an SHB after we've read the first SHB, report that as an
unsupported feature.
If we see an IDB after all the IDBs at the beginning of the file,
process it. Fixes bug 7851.
Get rid of unused read_idbs flag in pcapng_t structure. (Also, as per
the above, just because we've read all the IDBs at the beginning of the
section, that doesn't necessarily mean we've read all the IDBs in the
section.)
Fix some places where we reject SPBs.
svn path=/trunk-1.8/; revision=45496
Bill Meier [Thu, 11 Oct 2012 21:05:03 +0000 (11 21:05 -0000)]
Copy over from trunk
------------------------------------------------------------------------
r45486 | wmeier | 2012-10-11 17:01:51 -0400 (Thu, 11 Oct 2012) | 2 lines
Correction to SVN #45476
------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45487
Bill Meier [Thu, 11 Oct 2012 20:45:24 +0000 (11 20:45 -0000)]
Copy over changes from trunk
------------------------------------------------------------------------
r45477 | wmeier | 2012-10-11 15:20:21 -0400 (Thu, 11 Oct 2012) | 11 lines
Change 'for (i=1; i<=n;...' to 'for (i=0; i<n; ...)
The changes fix definite problems or
are done "just in case" for cases not esily determined
to be a problem by quick inspection.
Note: in some cases for loop index variables have been renamed
to ensure all required codes changes detected.
##backport
------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45484
Bill Meier [Thu, 11 Oct 2012 20:37:39 +0000 (11 20:37 -0000)]
copy over changes from trunk
------------------------------------------------------------------------
r45476 | wmeier | 2012-10-11 15:14:29 -0400 (Thu, 11 Oct 2012) | 12 lines
Change 'for (i=1; i<=n;...' to 'for (i=0; i<n; ...)'.
The changes fix possibly problematical cases
(not clear upon quick inspection).
Also: fix several bugs wherein an inner 'for' loop used
the same index variable name as an outer loop thus
messing up the outerloop.
##backport
------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45482
Guy Harris [Thu, 11 Oct 2012 08:31:58 +0000 (11 08:31 -0000)]
Copy over changes from trunk:
------------------------------------------------------------------------
r45464 | guy | 2012-10-11 01:23:29 -0700 (Thu, 11 Oct 2012) | 4 lines
hf_isup_cic is now BASE_DEC, so there's no reason to use
proto_tree_add_uint_format() to make it display in decimal -
proto_tree_add_uint() suffices.
------------------------------------------------------------------------
r45463 | etxrab | 2012-10-11 01:12:41 -0700 (Thu, 11 Oct 2012) | 4 lines
"Prepare/Apply a filter" on ISUP CIC should make a filter with decimal
CIC number, not hex.
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7848
------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45467
Guy Harris [Thu, 11 Oct 2012 02:01:52 +0000 (11 02:01 -0000)]
Copy over r45459 from trunk:
r45459 | guy | 2012-10-10 17:02:14 -0700 (Wed, 10 Oct 2012) | 13 lines
The usual idiom in C for "do this N times" is "for (i = 0; i < N; i++)",
not "for (i = 1; i < N+1; i++)".
Even if it weren't the idiom, it'd be safer, at least for unsigned
values, as, if i and N are the same width, and N has the maximum
possible value for that width, the first of those runs i from 0 to N-1,
all of which fit in a variable of that width, and the second of those
runs i from 1 to N, the latter of which doesn't fit into a variable of
that width, so modulo arithmetic turns it into 0 and the loop keeps
running forever.
Fixes bug 7844.
svn path=/trunk-1.8/; revision=45460
Anders Broman [Wed, 10 Oct 2012 07:50:18 +0000 (10 07:50 -0000)]
Copy over:
--------------------------------------------------------------------------------
Revision 45370 - This is an attempt to improve the default window placement position when there's more than one monitor and Wireshark's main window isn't located on the primary monitor. New windows will now open on the same monitor as Wireshark's main window, at a fixed location slightly offset from the main window. Previously, new windows would always open on the primary monitor regardless of the monitor that Wireshark was on. Note that this is only the default position and future patches will likely cause many windows to change this position. Further usage/feedback will determine if this is a good temporary stategy or not. It *may* help obviate the need to save every window's x,y & size though.
--------------------------------------------------------------------------------
Revision 45331 - A minor modification to Stephen Fisher's r34265 patch to [attempt to] resolve bug 553. This change takes into account that viewable_area.[x|y] may not be 0,0. Will this finally fix https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=553 ?Unknown, but I am unable to reproduce it.
--------------------------------------------------------------------------------
Revision 45212 - Revert most of r45210. We don't use the return value of GetExitCodeProcess(), but it still needs to be called to get childstatus.
--------------------------------------------------------------------------------
Revision 45210 - Don't fetch the exit code of our child process, we never use it.
--------------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45443
Anders Broman [Wed, 10 Oct 2012 07:34:02 +0000 (10 07:34 -0000)]
Copy over:
Revision 43841 - Pass in proper offset to dfilter_sip_status_line(). Was seeing problems
with 180 + 200 responses in same frame (over TCP).
-----------------------------------------------------------------------------------------
Revision 45429 - Set fence after finishing writing to the info col in order to show
info from more than one (SIP) message in the frame.
-----------------------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45442
Anders Broman [Mon, 8 Oct 2012 21:22:24 +0000 (8 21:22 -0000)]
Copy over:
Revision 45339 - Fix error caught by valgrind where we were running off the end of a
variable because we were passing the address of a single guint8 as a
char*. Work around it by making the guint8 an array and filling the last
element with 0 as if it were a null-terminated string.
--------------------------------------------------------------------------------
Revision 45310 - try to fix usb-related fuzz test crashes
in dissect_usb_interface_descriptor() and
dissect_usb_endpoint_descriptor, the offset should be incremented
depending on the number of bytes we dissected, not based on the len
field (len field==0 would then cause an endless loop)
also fixed one occurrence of old_offset-offset, that's probably a typo,
the values will always be negative...
svn path=/trunk-1.8/; revision=45410
Anders Broman [Mon, 8 Oct 2012 21:10:26 +0000 (8 21:10 -0000)]
Copy:
--------------------------------------------------------------------------------
Revision 44438 - Use val_to_str_const() where appropriate;
Also (for a few files):
- create/use some extended value strings;
- remove unneeded #include files;
- remove unneeded variable initialization;
- re-order fcns slightly so prefs_reg_handoff...() at end, etc
Revision 44515 - (view) (download) - [select for diffs]
Modified Wed Aug 15 13:56:59 2012 UTC (7 weeks, 5 days ago) by mmann
File length: 97575 byte(s)
Diff to previous 44511
convert GStrings to more "ephemeral friendly" use.
--------------------------------------------------------------------------------
Revision 44511 - Move registration to a better place.
--------------------------------------------------------------------------------
Revision 45081 - Move potential dereference until *after* the null-check.
Caught by cppcheck.
svn path=/trunk-1.8/; revision=45409
Gerald Combs [Sun, 7 Oct 2012 14:33:51 +0000 (7 14:33 -0000)]
[Automatic manuf, services and enterprise-numbers update for 2012-10-07]
svn path=/trunk-1.8/; revision=45365
Jaap Keuter [Sat, 6 Oct 2012 16:21:36 +0000 (6 16:21 -0000)]
------------------------------------------------------------------------
r45340 | jake | 2012-10-06 16:35:59 +0200 (Sat, 06 Oct 2012) | 2 lines
Vastly improve the debug presentation( of trees)+.
------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45348
Gerald Combs [Thu, 4 Oct 2012 22:51:12 +0000 (4 22:51 -0000)]
Remove the previous distribution file.
svn path=/trunk-1.8/; revision=45327
Gerald Combs [Thu, 4 Oct 2012 19:26:34 +0000 (4 19:26 -0000)]
Add a "patch-bzip2" target which creates a patch from the previous micro
release.
svn path=/trunk-1.8/; revision=45319
Gerald Combs [Tue, 2 Oct 2012 19:45:57 +0000 (2 19:45 -0000)]
Update for 1.8.4.
svn path=/trunk-1.8/; revision=45263
Gerald Combs [Tue, 2 Oct 2012 19:45:24 +0000 (2 19:45 -0000)]
1.8.3 → 1.8.4.
svn path=/trunk-1.8/; revision=45262
Gerald Combs [Tue, 2 Oct 2012 15:52:32 +0000 (2 15:52 -0000)]
Add CVE IDs.
svn path=/trunk-1.8/; revision=45256
Gerald Combs [Tue, 2 Oct 2012 15:37:55 +0000 (2 15:37 -0000)]
Build 1.8.3.
svn path=/trunk-1.8/; revision=45254
Gerald Combs [Mon, 1 Oct 2012 23:46:41 +0000 (1 23:46 -0000)]
Copy over revisions from the trunk:
------------------------------------------------------------------------
r45229 | morriss | 2012-10-01 00:14:03 -0700 (Mon, 01 Oct 2012) | 5 lines
Changed paths:
M /trunk/doc/wireshark.pod.template
The -B option is no longer only available in Win32: remove the Win32
restriction from the Synopsis.
This is the man page for Wireshark, not Tshark (fix a cut-n-pasteo).
------------------------------------------------------------------------
Copy over with manual intervention:
------------------------------------------------------------------------
r45242 | jake | 2012-10-01 14:43:34 -0700 (Mon, 01 Oct 2012) | 1 line
Changed paths:
M /trunk/epan/dissectors/packet-ieee802a.c
Make protocol 5 octets long and cut down code clutter,
------------------------------------------------------------------------
Update the release notes.
svn path=/trunk-1.8/; revision=45247
Gerald Combs [Mon, 1 Oct 2012 18:21:58 +0000 (1 18:21 -0000)]
Copy over revisions from the trunk:
------------------------------------------------------------------------
r45216 | alagoutte | 2012-09-30 03:05:18 -0700 (Sun, 30 Sep 2012) | 24 lines
Changed paths:
M /trunk/epan/dissectors/packet-bgp.c
From Olivier Benghozi via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7734
BGP bad decoding for Graceful Restart Capability with only helper support
BGP Capability in OPEN message: Graceful restart capability (64).
So when the length of the capability value is smaller that 6 (6 meaning full
support of GR capa, with significants elements and at least one AFI/SAFI), the
code interprets it as erroneous.
However,as described in RFC4724: " When a sender of this capability does not
include any <AFI, SAFI> in the capability, it means that the sender is not
capable of preserving its forwarding state during BGP restart, but supports
procedures for the Receiving Speaker (as defined in Section 4.2 of this
document). In that case, the value of the Restart Time field advertised by the
sender is irrelevant".
So, length of exactly 2 is valid but has to be interpreted with a particular
meaning.
In the dissector code, a length of 2 should be a special case for this capa,
decoding as "Graceful Restart helper mode only" or something like that, and
maybe also displaying an expert message if the Restart flag is not 0 in this
case, since here it's not expected to be possible.
------------------------------------------------------------------------
Update the release notes.
svn path=/trunk-1.8/; revision=45237
Martin Kaiser [Sun, 30 Sep 2012 18:48:34 +0000 (30 18:48 -0000)]
copy from the trunk
------------------------------------------------------------------------
r45224 | martink | 2012-09-30 19:58:45 +0200 (Sun, 30 Sep 2012) | 2 lines
dvb-ci: display cc item's name in the subtree title
svn path=/trunk-1.8/; revision=45228
Gerald Combs [Sun, 30 Sep 2012 14:33:46 +0000 (30 14:33 -0000)]
[Automatic manuf, services and enterprise-numbers update for 2012-09-30]
svn path=/trunk-1.8/; revision=45221
Gerald Combs [Fri, 28 Sep 2012 23:54:02 +0000 (28 23:54 -0000)]
Copy over revisions from the trunk:
------------------------------------------------------------------------
r44338 | etxrab | 2012-08-08 07:06:29 -0700 (Wed, 08 Aug 2012) | 1 line
Changed paths:
M /trunk/file.c
M /trunk/merge.h
Make it possible to merge libpcap files with different encapsulation types by making the output file a pcapng file and construkting SHB and IDB
------------------------------------------------------------------------
r44500 | tuexen | 2012-08-14 13:31:49 -0700 (Tue, 14 Aug 2012) | 3 lines
Changed paths:
M /trunk/epan/dissectors/packet-sctp.c
M /trunk/epan/sctpppids.h
Update SCTP PPIDs.
This also fixes https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7635
------------------------------------------------------------------------
r44501 | morriss | 2012-08-14 13:44:58 -0700 (Tue, 14 Aug 2012) | 1 line
Changed paths:
M /trunk/epan/dissectors/packet-diameter.c
Register for Diameter's SCTP PPID.
------------------------------------------------------------------------
r44502 | tuexen | 2012-08-14 13:53:39 -0700 (Tue, 14 Aug 2012) | 2 lines
Changed paths:
M /trunk/epan/dissectors/packet-dtls.c
Register DIAMETER/DTLS/SCTP.
------------------------------------------------------------------------
r45174 | cmaynard | 2012-09-27 07:02:37 -0700 (Thu, 27 Sep 2012) | 4 lines
Changed paths:
M /trunk/epan/dissectors/packet-image-jfif.c
Allow dissection of partial jpegs by a modification of the heuristics.
Fixes https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6230
#BACKPORT(1.8, 1.6)
------------------------------------------------------------------------
Copy over with manual intervention:
------------------------------------------------------------------------
r44589 | eapache | 2012-08-19 14:24:02 -0700 (Sun, 19 Aug 2012) | 6 lines
Changed paths:
M /trunk/ui/gtk/capture_file_dlg.c
Split test_file_close out of do_file_close and use it in file_open_cmd_cb.
Means we don't end up closing the current file if the user decides not
to open a new file after all.
Fixes https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7649
------------------------------------------------------------------------
r45025 | etxrab | 2012-09-20 06:16:27 -0700 (Thu, 20 Sep 2012) | 1 line
Changed paths:
M /trunk/ui/gtk/file_import_dlg.c
M /trunk/ui/text_import.c
Have File->import write pcapng files.
------------------------------------------------------------------------
Update the release notes.
svn path=/trunk-1.8/; revision=45204
Gerald Combs [Fri, 28 Sep 2012 23:06:42 +0000 (28 23:06 -0000)]
Update the release notes to match the current completed list on the
RoadMap. Clear the ChangeLog.
svn path=/trunk-1.8/; revision=45203
Anders Broman [Fri, 28 Sep 2012 15:32:48 +0000 (28 15:32 -0000)]
Copy over:
Revision 44052 - Fix memleak in window_icon_realize_cb()
gtk_window_set_icon_list() duplicates list so after setting we need
to free generated one.
Revision 44066 - Fix reference counting of GdkPixbuf, unref after creating GtkImage (aka fix memleaks)
Revision 44889 - Use consistent indentation and formatting.
svn path=/trunk-1.8/; revision=45192
Anders Broman [Fri, 28 Sep 2012 09:48:55 +0000 (28 09:48 -0000)]
Copy over:
Revision 43455 - Size wrong in "File Set List" for just-finished captures.
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7370
-----------------------------------------------------------------------------
Revision 43722 - (view) (download) - [select for diffs]
Modified Sun Jul 15 14:56:40 2012 UTC (2 months, 1 week ago) by cmaynard
File length: 150102 byte(s)
Diff to previous 43536
From Michael Mann via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7356:
Print only visible columns.
-----------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45188
Anders Broman [Fri, 28 Sep 2012 09:17:40 +0000 (28 09:17 -0000)]
Copy over:
Revision 44814 - Use g_hash_table_new_full() instead of g_hash_table_new() for subdissector
registration tables, and use g_free as the value_destroy_func. This saves us
from manually freeing the value when we remove an item, and prevents us from
leaking memory when we accidentally overwrite an existing item.
--------------------------------------------------------------------------------
Revision 44698 - Add casts to fix compilation with GCC.
Remove * from gconstpointers, they are already pointer types.
Add modelines to packet.c and clean up indentation a bit.
--------------------------------------------------------------------------------
Revision 44697 - Fix memleak.
svn path=/trunk-1.8/; revision=45187
Anders Broman [Fri, 28 Sep 2012 09:09:20 +0000 (28 09:09 -0000)]
Copy over:
Revision 43921 - Only initialize fields in the print_args that are actually used.
This prevents a memory leak where we were allocating for print_args.range
but never freeing.
-------------------------------------------------------------------------------
Revision 44696
Fix Bug 7348 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7348)
svn path=/trunk-1.8/; revision=45186
Gerald Combs [Thu, 27 Sep 2012 20:38:17 +0000 (27 20:38 -0000)]
Replace g_strcmp0 with strcmp. It was introduced in GLib 2.16 and our
minimum version is 2.14.
svn path=/trunk-1.8/; revision=45180
Anders Broman [Thu, 27 Sep 2012 13:14:04 +0000 (27 13:14 -0000)]
Copy over:
Revision 43616 - Grab-bag of unused variables.
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7452
------------------------------------------------------------------------------
Revision 43617 - Fix leaks
- don't g_strdup a string just to use it in a g_strdup_printf
- clean up properly in error cases in lua bindings
- misc. other missing g_free() calls
- one missing fclose() in the new 80211_utils
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7454
------------------------------------------------------------------------------
Revision 45146 - Fix https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5016 - No markers show up when maps are displayed.
#BACKPORT(1.8, 1.6)
Revision 45148 - Revision 45146 fixed only the first map. This patch fixes all maps.
#BACKPORT(1.6, 1.8)
svn path=/trunk-1.8/; revision=45173
Anders Broman [Thu, 27 Sep 2012 11:39:54 +0000 (27 11:39 -0000)]
Copy over:
Revision 45111 - From Steve Magnani via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7753 :
Fix display of WRITE BUFFER and SEND DIAGNOSTIC fields in SCSI dissector
--------------------------------------------------------------------------------
Revision 45142
Implement and document the Custom plugin system. Create relevant example files and add them to the distribution. Rewrite README.plugins to describe how to use this system.
-------------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45172
Anders Broman [Thu, 27 Sep 2012 10:48:01 +0000 (27 10:48 -0000)]
Copy over:
evision 44885 - Also disable the resize grip on the profile bar (as it is on the info and
packets bars; this is for GTK < 3.0).
This fixes the problem I had that the profile bar normally took up way too
much (horizontal) room when I start Wireshark (causing the contents of the
much more interesting packets bar to be truncated).
Revision 45012 - Fix https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7731 :
Allow the configured number of dfilters to be added to the drop-down list
(instead of limiting the list--on a freshly installed system with no recent
dfilters--to just 2). Regression caused by r42439.
--------------------------------------------------------------------------------
Revision 45108 - allow setting a capture comment from the statusbar when a capture was started
for the decision to allow input of a capture comment, we should make no
difference between the statusbar icon and Statistics / Summary menu item
svn path=/trunk-1.8/; revision=45171
Anders Broman [Thu, 27 Sep 2012 10:26:29 +0000 (27 10:26 -0000)]
Copy over:
Revision 45058 - Fix for bug 7744:
Have the DND data receiver make sure that the URI-list is always correctly terminated. Do so for any source, either X server, Windows or OS X.
--------------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45169
Anders Broman [Thu, 27 Sep 2012 09:01:46 +0000 (27 09:01 -0000)]
Copy over with manual intervention:
Revision 45007 - Fix request/response tracking with checksum corner case.
--------------------------------------------------------------------------------
Revision 43705 - If there's not enough data left for a timestamp, be sure there's at least some data to pass off to the generic data dissector.
svn path=/trunk-1.8/; revision=45168
Anders Broman [Thu, 27 Sep 2012 08:07:01 +0000 (27 08:07 -0000)]
Copy over:
Revision 45004 - From LI Hai via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7736 :
Fix dissection error of D-RELEASE and D-CONNECT in TETRA dissector
Revision 44928 - Add packet-interlink to CMake build to maintain parity with automake as of revision 44927.
Revision 44927 - Complete process of moving packet-interlink to a built-in dissector:
- Add packet-interlink.c to Makefile.common
(Not included in SVN #37610-37612);
See: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6005
svn path=/trunk-1.8/; revision=45167
Anders Broman [Tue, 25 Sep 2012 14:59:55 +0000 (25 14:59 -0000)]
Copy over:
Revision 44967 - Only provide the parameter data in the tvb used when calling subdissector for private extensions.
Add vendor ID to item.
Show flags in hex.
--------------------------------------------------------------------------------
Revision 44891 - From Claude LeFrancois:
Cosmetic changes to GTPv2(Add text to itenms)
Minor code changes by me.
--------------------------------------------------------------------------------
Revision 44881 - From Esa Haapamäki via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7718 :
Fix dissection of NAS Uplink and Downlink Count in MM Context IE
svn path=/trunk-1.8/; revision=45132
Anders Broman [Tue, 25 Sep 2012 14:27:00 +0000 (25 14:27 -0000)]
Copy over:
evision 44823 - From Florian Fainelli via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7707 :
Fix dissection of small Homeplug AV frames
--------------------------------------------------------------------------------
Revision 44163 - From Florian Fainelli via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7548
HomeplugAV dissector: decode device id
adds proper device id decoding the in the Homeplug AV "Get Device/SW Version
Confirm (A001)" response.
--------------------------------------------------------------------------------
Revision 44073 - Create/use extended value strings to access certain value string arrays;
Remove unneeded initializers;
Use consistent indentation.
svn path=/trunk-1.8/; revision=45131
Anders Broman [Tue, 25 Sep 2012 14:17:15 +0000 (25 14:17 -0000)]
Copy over:
Revision 44801 -From Aditya Ambadkar via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7046 :
Fix CID 703472 and (external) fuzz failure 7567:
The dissect_subtlv_interface_parameters is missing the handling of BFD 2..4.
For the crash patch, we decided to add the bfd2..4 in dissect_tlc function(in
the diff). We plan to open a separate bug to fix
dissect_subtlv_interface_parameters to make it handle BFD2..4. (Thanks to Arun
Arunachalam for this analysis)
From me: fix up some indentation and replace tabs with spaces (for consistency).
--------------------------------------------------------------------------------
part of Revision 44438
svn path=/trunk-1.8/; revision=45130
Anders Broman [Tue, 25 Sep 2012 12:54:40 +0000 (25 12:54 -0000)]
Copy over:
--------------------------------------------------------------------------------
Revision 44792 - Fix https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7697 :
Fix dissection of release 98 and release 99 QoS profiles (bug introduced in r43312)
--------------------------------------------------------------------------------
Revision 44790 - From Masashi Honma via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7691
TKIP dissection : wrong IS_TKIP macro
In [1] "11.4.2.2 TKIP MPDU formats", we could see below sentence.
"WEPSeed[1] is not used to construct the TSC, but is set to (TSC1 | 0x20) &
0x7f."
But the IS_TKIP macro only checks (WEPSeed[1] & 0x20).
So sometimes IS_TKIP macro mis-dissects a CCMP frame as a TKIP frame.
This patch changes IS_TKIP macro to do more better check.
[1] IEEE Std 802.11.-2012
--------------------------------------------------------------------------------
Revision 44760 - fix a typo in dvb service descriptor
--------------------------------------------------------------------------------
Revision 44749 - Fix https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7666 :
Check that DRDA command has a minimum length of 10 bytes to prevent a potential infinite loop
--------------------------------------------------------------------------------
Revision 44642 - Comment out all but first value_string array entries with dup values:
kept: first dup since that's the one which would
be found with a linear search.
--------------------------------------------------------------------------------
Revision 44496 - more ephemeral memory cleanup
--------------------------------------------------------------------------------
Revision 44438 - Use val_to_str_const() where appropriate;
Also (for a few files):
- create/use some extended value strings;
- remove unneeded #include files;
- remove unneeded variable initialization;
- re-order fcns slightly so prefs_reg_handoff...() at end, etc
--------------------------------------------------------------------------------
Revision 44413 - convert some simple uses to use ephemeral memory
--------------------------------------------------------------------------------
Revision 44003 - Create/use extended value strings as appropriate;
Remove unneeded initializers;
Do whitespace changes.
--------------------------------------------------------------------------------
Revision 43700 - Fix https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7474 :
Dissect LTE RADIUS AVP 3GPP-User-Location-Info
--------------------------------------------------------------------------------
Revision 43681 - Don't call subdissectors / expert...() / col...() under 'if (tree)'
Also:
Remove some uneeded initializers;
Do some whitespace cleanup and re-formatting.
--------------------------------------------------------------------------------
Revision 43320 - Fix typos.
--------------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45129
Anders Broman [Tue, 25 Sep 2012 11:43:10 +0000 (25 11:43 -0000)]
Copy over:
Revision 44701 -Fix Session ID parsing. Patch from Fransesco Fondelli via bug 6881.
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6881
--------------------------------------------------------------------------------
Revision 44119 - Minor cleanup.
--------------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45128
Anders Broman [Tue, 25 Sep 2012 11:29:10 +0000 (25 11:29 -0000)]
Copy over:
Revision 44694 - Allow wpa-psk decryption keys to be successfully entered.
Problems reported on ask.wireshark.org here:
1) http://ask.wireshark.org/questions/13951/invalid-key-format-wireshark-182
2) http://ask.wireshark.org/questions/13688/error-updating-record-invalid-key-format
svn path=/trunk-1.8/; revision=45127
Anders Broman [Tue, 25 Sep 2012 11:17:57 +0000 (25 11:17 -0000)]
Copy over:
Revision 44959 - Initialize ett's and hf's to "-1", not "- 1".
--------------------------------------------------------------------------------
Revision 44872 - Add data parameter to call_dissector_only.
--------------------------------------------------------------------------------
Revision 44689 - Yet another case of bug #7316 (r42989) and bug #7668 (r44688)
Use correct field type for ccp.opt.oui
--------------------------------------------------------------------------------
Revision 44688 - Fix bug #7668 Use correct field type for lcp.opt.oui
--------------------------------------------------------------------------------
Revision 44538 - col_...() and expert...() fcns should not be under 'if (tree)';
'tab-width/tabstop/tabSize' in editor modelines should really always be 8;
--------------------------------------------------------------------------------
Revision 43210 - Don't define value_string arrays in a .h file (included in multiple places).
Also:
- don't use val_to_str_const() with a "format" default string;
- rename 'opt_len_type' enumeration identifiers to be less generic.
--------------------------------------------------------------------------------
Revision 43157 - Fix some dead assignments.
--------------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45126
Anders Broman [Tue, 25 Sep 2012 08:57:21 +0000 (25 08:57 -0000)]
Copy over:
Revision 44454 - Revert r41311, fix bug #7581
----------------------------------------------------------
Revision 44438 - Use val_to_str_const() where appropriate;
Also (for a few files):
- create/use some extended value strings;
- remove unneeded #include files;
- remove unneeded variable initialization;
- re-order fcns slightly so prefs_reg_handoff...() at end, etc
svn path=/trunk-1.8/; revision=45125
Anders Broman [Tue, 25 Sep 2012 08:44:18 +0000 (25 08:44 -0000)]
Copy over:
--------------------------------------------------------------------------------
Revision 44438 - Use val_to_str_const() where appropriate;
Also (for a few files):
- create/use some extended value strings;
- remove unneeded #include files;
- remove unneeded variable initialization;
- re-order fcns slightly so prefs_reg_handoff...() at end, etc
--------------------------------------------------------------------------------
Revision 44207 - From Lori Tribble via https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7556 :
The BACnet GetEnrollmentSummary-ACK has an optional parameter Notification
Class. The Wireshark decoding does not correctly decode when this parameter is
missing.
The fix is to verify the context exists before attempting to decode this
parameter.
From me: replace the few remaining tabs in the file with spaces.
--------------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45124
Anders Broman [Tue, 25 Sep 2012 08:28:59 +0000 (25 08:28 -0000)]
Copy over:
Revision 43590 - Display (and allow filtering on) the "reserved for national use" bit in the AI.
(This bit is already decoded as the "national indicator" bit in ANSI.)
svn path=/trunk-1.8/; revision=45123
Guy Harris [Mon, 24 Sep 2012 08:27:41 +0000 (24 08:27 -0000)]
Copy over r45085 from the trunk:
------------------------------------------------------------------------
r45085 | guy | 2012-09-24 00:41:19 -0700 (Mon, 24 Sep 2012) | 10 lines
Just as we don't show the "Wireless Settings" button for non-AirPcap
adapters, we don't show the "Remote Settings" button for local adapters.
(Back when the buttons were in the Capture Options dialog, always having
the button there and making it sensitive or insensitive based on the
interface you specified may have made sense; now that it's in a dialog
popped up when you double-click on a particular interface, so the dialog
always applies to a particular interface, it no longer makes sense.)
Get rid of the unused E_OPT_REMOTE_BT_KEY key.
svn path=/trunk-1.8/; revision=45086
Guy Harris [Mon, 24 Sep 2012 07:21:05 +0000 (24 07:21 -0000)]
Copy over r45056 from trunk with some manual intervention:
------------------------------------------------------------------------
r45056 | guy | 2012-09-22 13:09:55 -0700 (Sat, 22 Sep 2012) | 7 lines
Do not display a "Wireless Settings" button for non-AirPcap interfaces;
it can confuse users, so that they ask why this is grayed out on their
non-Windows machine and ask how to enable it.
Nobody uses the AIRPCAP_OPTIONS_ADVANCED_KEY datum attached to the box
in which the button appears, so get rid of it.
svn path=/trunk-1.8/; revision=45084
Pascal Quantin [Sun, 23 Sep 2012 20:22:39 +0000 (23 20:22 -0000)]
Copy over from trunk:
------------------------------------------------------------------------
r45075 | pascal | 2012-09-23 22:12:46 +0200 (Sun, 23 Sep 2012) | 2 lines
Add AlcatelLucent.xml to NSIS installer
------------------------------------------------------------------------
svn path=/trunk-1.8/; revision=45076
Gerald Combs [Sun, 23 Sep 2012 14:33:49 +0000 (23 14:33 -0000)]
[Automatic manuf, services and enterprise-numbers update for 2012-09-23]
svn path=/trunk-1.8/; revision=45066
Jaap Keuter [Fri, 21 Sep 2012 18:40:59 +0000 (21 18:40 -0000)]
Fix for bug 7408:
Use the correct lib versions in wireshark-common.files and wireshark-commin.shlibs.
svn path=/trunk-1.8/; revision=45045
Anders Broman [Thu, 20 Sep 2012 06:49:38 +0000 (20 06:49 -0000)]
Copy over
Revision 44424 -Add diameter/AlcatelLucent.xml to the distribution
svn path=/trunk-1.8/; revision=45021