Commit Graph

83549 Commits

Author SHA1 Message Date
Jérôme HAMM 62489e0b57 ssh: dissecting generic user authentication packets 2022-02-10 14:29:11 +00:00
Jérôme HAMM ae394cd42a ssh: dissecting generic transport packets 2022-02-10 14:29:11 +00:00
Jérôme HAMM 15046059cb ssh: displaying sequence number 2022-02-10 14:29:11 +00:00
Jérôme HAMM 41b442d9c0 ssh: checking and showing Message Authentication Code 2022-02-10 14:29:11 +00:00
Dror Eiger 7ea9bab84b Geneve: new option classes 2022-02-10 14:07:06 +00:00
Gerald Combs e1dbf36519 Docs: Add new protocols to the release notes. 2022-02-09 11:28:07 -08:00
Alexis La Goutte 84569f3ab8 ieee80211: add support of Fortinet Vendor Specific
Only support type 10 (SYSTEM ?) with subtype 1 (AP-NAME)

See https://www.nickjvturner.com/ap-name-broadcast-support for pcap
2022-02-09 18:23:26 +00:00
David Perry 1e0d117eb7 Specify directory for temporary captures 2022-02-09 14:32:28 +00:00
John Thacker f72787e86f TCP: Fix SYN and FIN retransmission vs ooo detection
Since nextseq is incremented by an extra one byte for SYN/FIN packets,
the out-of-order check should take that into account. Otherwise an
immediately retransmitted SYN or FIN is treated as a retransmission.
Related to #13843.
2022-02-09 02:02:18 +00:00
John Thacker 26dafbae39 file: Fix memory leak in Find Packet
If we don't find the data in a packet, reset the wtap record so
that the block we just searched is freed before we lose our pointer
to it.
2022-02-08 20:03:02 -05:00
Uli Heilmeier 782e7db8c0 PER: Check length calling tvb_new_octet_aligned()
Fix calling tvb_new_octet_aligned() with length == 0

Related to #17890 case 17
2022-02-08 17:19:26 +00:00
Stefan Metzmacher 833a825c7c packet-dcerpc-netlogon: use SEC_CHAN_* values from packet-dcerpc-misc
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2022-02-08 10:45:21 +00:00
Uli Heilmeier 0fd55dbf54 WSCBOR: Add checks for length and NULL
Additional checks for NULL and length before calling
tvb_new_subset_length() or proto_tree_add_item()

Related to #17890 case 8
2022-02-08 10:12:56 +00:00
Martin Mathieson 095255481a Tidy up some masks in items. 2022-02-08 08:56:17 +00:00
Guy Harris 1e27fe59fd Clean up checking for invalid field definitions.
Add comments to indicate what types of display information various field
types are allowed.

Make the error messages for fields that only allow some particular
display information types specific to those types, rather than saying
"no field information allowed".  This also gets rid of some
fallthroughs, one of which allows BASE_PROTOCOL_INFO for floating-point
types, which makes no sense.
2022-02-07 22:01:45 -08:00
Gerald Combs a8c8ee6908 epan: Fix our FT_UINT_BYTES and FT_UINT_STRING checks.
FT_UINT_BYTES and FT_UINT_STRING lengths are always at least the width
of the count bytes. Fix for 1136ce9610 / #17891.
2022-02-08 02:29:50 +00:00
Gerald Combs e93001a8dd BP: Make sure our offset advances.
Fixes #17933.
2022-02-08 02:07:55 +00:00
Gerald Combs 8d3c217779 GDSDB: Make sure our offset advances.
Fixes #17931.
2022-02-08 01:23:28 +00:00
Roland Knall 1e795b3f8c Qt: Fix Packet bytes dialog view
Mac/Linux use a different sorting for the QDialogButtons
2022-02-07 22:03:01 +00:00
Stig Bjørlykke 3c4e4cc134 p_mul: Change display of missing sequence numbers
Show missing sequence numbers with from and to instead of listing
every number in the range as generated fields.

Bonus: explicitly show the range delimiter.

Fixes: #17932
2022-02-07 21:45:15 +00:00
Damir Franusic 027f6a02e8 GDT: add dissector for SCTP PPID 49 protocol 2022-02-07 20:20:43 +00:00
Gerald Combs 2a4171fc06 WAP: Clamp our value lengths to a usable value.
tvb_get_guintvar returns a length which is often used for arithmetic.
Clamp it to a value which is less likely to overflow. Fixes #17925.
2022-02-07 20:06:41 +00:00
Guy Harris 6b3daa9aec ZigBee ZCL: fix the zero-length item check.
The fix for #17926 got the check backwards, so non-empty arrays, sets,
and bags couldn't be dissected, as they'd always report a "zero-length
item" error.  Both versions of the check dissect zero-length items, as
they test for equality, but the old version thought that a
non-zero-length item was also bad, as the offset was greater after
dissecting the item than before dissecting the item.
2022-02-07 11:35:28 -08:00
David Perry 7f820c4a02 More descriptive names for some heuristic dissectors 2022-02-07 18:07:22 +00:00
Roland Knall 81f220ae80 Qt: Fix open explorer
Apparently on Windows, if a dialog contains spaces it is not properly
opened via /select. But opening the file via QDesktopServices leads to
the file not being selected in the open explorer windows (expectation by
the user). Therefore the original change is restored, but with a
differenc call which should handle the space issue in most cases better
than before. See
https://stackoverflow.com/questions/3490336/how-to-reveal-in-finder-or-show-in-explorer-with-qt
for a short explanation (bottom of post)

Fixes #17927
2022-02-07 15:57:59 +00:00
Joakim Karlsson b7babe8ae7 MSRCP: fix build issues [-Werror=maybe-uninitialized] 2022-02-07 14:50:13 +00:00
Stig Bjørlykke e03a590246 json: Handle application/senml+json
Add handling of application/senml+json and application/sensml+json.
2022-02-07 14:33:11 +00:00
Roman Volkov 0a2629f844 mpeg descriptor: add Service Availability Descriptor (0x72) 2022-02-07 14:22:08 +00:00
Martin Mathieson 64c4f74829 RLC-NR: work out a better id/data value for adding fragments. 2022-02-07 14:21:59 +00:00
Stefan Metzmacher 782671a99a Kerberos: handle etype == 0 in dissect_krb5_decrypt_CRED_data()
Within the cKSUMTYPE-GSSAPI (0x8003) BLOB we should not try to decrypt
CRED data if etype 0 is used.

This is used by a Heimdal client as the authenticator is already
encrypted. Windows encrypts it again using the same key that was
used to encrypt the authenticator.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
2022-02-07 13:48:50 +00:00
Stefan Metzmacher b3716be761 Kerberos: Cope with FAST ordering in TGS-REQ PA-DATA
Windows clients use pA-TGS-REQ before pA-FX-FAST, which means
we have a the subkey from the pA-TGS-REQ
AP-REQ/Authenticator before we try to decrypt the
pA-FS-FAST/enc-fast-req.

But a Heimdal client sends pA-FX-FAST before pA-TGS-REQ.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
2022-02-07 13:48:50 +00:00
Stefan Metzmacher ac71f9418a Kerberos: add support for new PAC buffers
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2022-02-07 13:48:50 +00:00
Roland Knall 835d5b3f97 Qt: Allow byteview to be hidden
Implements: #17887
2022-02-07 12:48:18 +00:00
Stig Bjørlykke 6dc92a5fb2 CBOR: Handle application/senml+cbor
Add handling of application/senml+cbor and application/sensml+cbor.

This dissector does not give a good representation of the content
and should be improved.
2022-02-07 12:21:26 +00:00
Roland Knall 5b6bf0b4f3 Qt: Fix show in folder issue
Opening a folder on Windows lead to undesired behaviour

Fixes: #17927
2022-02-07 10:54:38 +01:00
Uli Heilmeier bb8e3db0c6 MIH: Check length tvb_composite_append()
Check if length > 0 before calling tvb_composite_append()

Related to #17890 case 3
2022-02-06 18:18:21 +00:00
Gerald Combs d6fe0b3211 [Automatic update for 2022-02-06]
Update manuf, services enterprise numbers, translations, and other items.
2022-02-06 16:39:45 +00:00
Chuck Craft 8510013135 Prefs/Expert: disable Open Expert Info on Protocol Preferences context menu
Closes #17920
2022-02-06 13:10:08 +00:00
John Thacker fb38fe8573 doc: Document tshark -z stats
Document the currently undocumented -z statistics for tshark. Note
that all the stats added here exist in 3.6 as well. Fix #8353
(at least for now).
2022-02-06 12:48:46 +00:00
Stig Bjørlykke 9a11d75d4d Qt: Add Show as Json in Show Packet Bytes
Show as human readable indented Json.
2022-02-06 10:54:18 +00:00
Jim Young 42106c9688 Docs: Accurately describe our minimum GLib and where to get it 2022-02-06 10:17:25 +00:00
John Thacker 044dd69725 wsutil: Just use g_utf8_validate for now
g_utf8_validate_len doesn't exist until glib 2.60, so just
use g_utf8_validate.  It does the same thing when the length parameter
is unsigned. Fixes CentOS 7.
2022-02-05 22:34:21 -05:00
John Thacker 25d0c88251 epan: Add BASE_SHOW_UTF_8_PRINTABLE
Add BASE_SHOW_UTF_8_PRINTABLE and related function tvb_utf_8_isprint
for supporting fields of bytes that are "maybe UTF-8" (default or
SHOULD be UTF-8 but could be something else, with no encoding indicator),
such as SSID fields in IEEE 802.11 (See #16208), certain OctetString
fields in Diameter or PFCP, and other places where
BASE_SHOW_ASCII_PRINTABLE is currently used. Fix #5307
2022-02-06 00:32:13 +00:00
Gerald Combs ebe22f7b7b ZigBee ZCL: Make sure our offset advances.
Fixes #17926.
2022-02-05 11:11:32 -08:00
Uli Heilmeier a25347c59c GSM RLC MAC: Check length tvb_new_octet_aligned
Check if length not 0 before calling tvb_new_octet_aligned()

Related to #17890 case 28
2022-02-05 13:42:17 +00:00
Roland Knall d003ad9092 Qt: Display fieldname as tooltip in expert info dialog 2022-02-05 11:49:41 +00:00
Roland Knall 00149f1454 Git: Ignore Visual Studio Code workspace definition 2022-02-05 12:34:14 +01:00
Uli Heilmeier 64f98ee13c PER: Check length calling tvb_new_octet_aligned()
Fix calling tvb_new_octet_aligned() with length == 0

Related to #17890 case 1 and 6
2022-02-04 21:02:28 +01:00
Martin Mathieson 1f22c7e04c Trivial: change some formatting in hf item definitions 2022-02-04 11:56:24 +00:00
Gerald Combs 1d8690f8ef AMP: Fix large / infinite loops.
Make sure our offset advances in a few places. Fixes #17829.
2022-02-04 01:42:36 +00:00