wireshark/epan/dissectors/packet-gsm_cbch.c

649 lines
25 KiB
C
Raw Normal View History

/* packet-gsm_cbch.c
* Routines for GSM CBCH dissection - A.K.A. 3GPP 44.012 (GSM 04.12)
*
* Copyright 2011, Mike Morrin <mike.morrin [AT] ipaccess.com>
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
* Copyright 1998 Gerald Combs
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/
#include "config.h"
#include <epan/packet.h>
#include <epan/reassemble.h>
#include <epan/expert.h>
void proto_register_gsm_cbch(void);
void proto_reg_handoff_gsm_cbch(void);
#define CBCH_FRAGMENT_SIZE 22
static const value_string block_type_lpd_strings[] = {
{ 0x00, "NOT Cell Broadcast"},
{ 0x01, "Cell Broadcast"},
{ 0x02, "NOT Cell Broadcast"},
{ 0x03, "NOT Cell Broadcast"},
{ 0, NULL}
};
static const value_string block_type_seq_num_values[] = {
{ 0x00, "First Block"},
{ 0x01, "Second Block"},
{ 0x02, "Third Block"},
{ 0x03, "Fourth Block"},
{ 0x08, "First Schedule Block"},
{ 0xFF, "Null message"},
{ 0, NULL}
};
static const value_string sched_type_values[] = {
{ 0x00, "messages formatted as specified in subclause 3.5 of 3GPP 44.012"},
{ 0xFF, "Unknown schedule message format"},
{ 0, NULL}
};
/* Initialize the protocol and registered fields */
static int proto_cbch = -1;
static int hf_gsm_cbch_spare_bit = -1;
static int hf_gsm_cbch_lpd = -1;
static int hf_gsm_cbch_lb = -1;
static int hf_gsm_cbch_seq_num = -1;
static int hf_gsm_cbch_sched_type = -1;
static int hf_gsm_cbch_sched_begin_slot = -1;
static int hf_gsm_cbch_sched_spare = -1;
static int hf_gsm_cbch_sched_end_slot = -1;
static int hf_gsm_cbch_slot = -1;
/* static int hf_gsm_cbch_sched_msg_id = -1; */
static int hf_gsm_cbch_padding = -1;
static int hf_gsm_cbch_block = -1;
/* These fields are used when reassembling cbch fragments
*/
static int hf_cbch_fragments = -1;
static int hf_cbch_fragment = -1;
static int hf_cbch_fragment_overlap = -1;
static int hf_cbch_fragment_overlap_conflict = -1;
static int hf_cbch_fragment_multiple_tails = -1;
static int hf_cbch_fragment_too_long_fragment = -1;
static int hf_cbch_fragment_error = -1;
static int hf_cbch_fragment_count = -1;
static int hf_cbch_reassembled_in = -1;
static int hf_cbch_reassembled_length = -1;
/* Initialize the subtree pointers */
static gint ett_cbch_msg = -1;
static gint ett_schedule_msg = -1;
static gint ett_schedule_new_msg = -1;
static gint ett_cbch_fragment = -1;
static gint ett_cbch_fragments = -1;
static expert_field ei_gsm_cbch_sched_end_slot = EI_INIT;
static expert_field ei_gsm_cbch_seq_num_null = EI_INIT;
static expert_field ei_gsm_cbch_seq_num_reserved = EI_INIT;
static expert_field ei_gsm_cbch_lpd = EI_INIT;
static dissector_handle_t cbs_handle;
/* reassembly of CHCH blocks */
static reassembly_table cbch_block_reassembly_table;
/* Structure needed for the fragmentation routines in reassemble.c
*/
static const fragment_items cbch_frag_items = {
&ett_cbch_fragment,
&ett_cbch_fragments,
&hf_cbch_fragments,
&hf_cbch_fragment,
&hf_cbch_fragment_overlap,
&hf_cbch_fragment_overlap_conflict,
&hf_cbch_fragment_multiple_tails,
&hf_cbch_fragment_too_long_fragment,
&hf_cbch_fragment_error,
&hf_cbch_fragment_count,
&hf_cbch_reassembled_in,
&hf_cbch_reassembled_length,
/* Reassembled data field */
NULL,
"blocks"
};
static const range_string gsm_cbch_sched_begin_slot_rvals[] = {
{ 0, 0, "Out of range (ignoring message)" },
{ 1, 1, "(apparently) Scheduled Scheduling Message" },
{ 2, 48, "(apparently) Unscheduled Scheduling Message" },
{ 49, 0xFF, "Out of range (ignoring message)" },
{ 0x00, 0x00, NULL },
};
static void
dissect_schedule_message(tvbuff_t *tvb, packet_info *pinfo, proto_tree *top_tree)
{
guint len, offset = 0;
guint8 octet1, i, k = 0;
guint8 sched_begin, sched_end, new_slots[48];
gboolean valid_message = TRUE;
guint16 other_slots[48];
proto_item *item = NULL, *schedule_item = NULL;
proto_tree *sched_tree = NULL, *sched_subtree = NULL;
len = tvb_reported_length(tvb);
col_append_str(pinfo->cinfo, COL_INFO, " CBCH Schedule Message ");
schedule_item = proto_tree_add_protocol_format(top_tree, proto_cbch, tvb, 0, -1,
"GSM CBCH Schedule Message");
sched_tree = proto_item_add_subtree(schedule_item, ett_schedule_msg);
proto_tree_add_item(sched_tree, hf_gsm_cbch_sched_type, tvb, offset, 1, ENC_BIG_ENDIAN);
octet1 = tvb_get_guint8(tvb, offset);
if (0 == (octet1 & 0xC0))
{
proto_item* slot_item;
sched_begin = octet1 & 0x3F;
proto_tree_add_item(sched_tree, hf_gsm_cbch_sched_begin_slot, tvb, offset++, 1, ENC_BIG_ENDIAN);
if ((sched_begin < 1) || (sched_begin > 48))
{
valid_message = FALSE;
}
proto_tree_add_item(sched_tree, hf_gsm_cbch_sched_spare, tvb, offset, 1, ENC_BIG_ENDIAN);
sched_end = tvb_get_guint8(tvb, offset);
slot_item = proto_tree_add_item(sched_tree, hf_gsm_cbch_sched_end_slot, tvb, offset++, 1, ENC_BIG_ENDIAN);
if (sched_end < sched_begin)
{
expert_add_info(pinfo, slot_item, &ei_gsm_cbch_sched_end_slot);
valid_message = FALSE;
}
if (valid_message)
{
/* build an array of new messages */
memset(&new_slots, 0xFF, sizeof(new_slots));
memset(&other_slots, 0xFF, sizeof(other_slots));
/* iterate over the octets */
for (i=0; i<6; i++)
{
guint8 j;
octet1 = tvb_get_guint8(tvb, offset++);
/* iterate over the bits */
for (j=0; j<8; j++)
{
if (octet1 & (0x80>>j))
{
new_slots[k++] = (i<<3) + j + 1;
}
}
}
/* print the array of new messages */
sched_subtree = proto_tree_add_subtree_format(sched_tree, tvb, offset-6, 6, ett_schedule_new_msg, &item,
"This schedule contains %d slots with new messages", k);
for (i=0; i<k; i++)
{
DISSECTOR_ASSERT(new_slots[i] <= 48);
octet1 = tvb_get_guint8(tvb, offset);
if ((octet1 & 0x80) == 0x80)
{
/* MDT 1 */
guint8 octet2;
guint16 msg_id;
octet2 = tvb_get_guint8(tvb, offset + 1);
msg_id = ((octet1 &0x7F) << 8) + octet2;
proto_tree_add_uint_format_value(sched_subtree, hf_gsm_cbch_slot, tvb, offset, 2, new_slots[i],
"%d, Message ID: %d, First transmission of an SMSCB within the Schedule Period",
new_slots[i], msg_id);
offset +=2;
other_slots[new_slots[i] - 1] = msg_id;
}
else if ((octet1 & 0xC0) == 0)
{
/* MDT 00 */
if (octet1 == 0)
{
proto_tree_add_uint_format_value(sched_subtree, hf_gsm_cbch_slot, tvb, offset++, 1, new_slots[i],
"%d, Repeat of non-existent slot %d",
new_slots[i], octet1);
}
else if (octet1 < new_slots[i])
{
proto_tree_add_uint_format_value(sched_subtree, hf_gsm_cbch_slot, tvb, offset++, 1, new_slots[i],
"%d, Message ID: %d, Repeat of Slot %d",
new_slots[i], other_slots[octet1 - 1], octet1);
other_slots[new_slots[i] - 1] = other_slots[octet1 - 1];
}
else
{
proto_tree_add_uint_format_value(sched_subtree, hf_gsm_cbch_slot, tvb, offset++, 1, new_slots[i],
"%d, Apparent forward reference to slot %d",
new_slots[i], octet1);
}
}
else if (octet1 == 0x40)
{
/* MDT 010000000 */
proto_tree_add_uint_format_value(sched_subtree, hf_gsm_cbch_slot, tvb, offset++, 1, new_slots[i],
"%d Free Message Slot, optional reading", new_slots[i]);
other_slots[new_slots[i] - 1] = 0xFFFE;
}
else if (octet1 == 0x41)
{
/* MDT 010000001 */
proto_tree_add_uint_format_value(sched_subtree, hf_gsm_cbch_slot, tvb, offset++, 1, new_slots[i],
"%d Free Message Slot, reading advised", new_slots[i]);
other_slots[new_slots[i] - 1] = 0xFFFE;
}
else
{
/* reserved MDT */
proto_tree_add_uint_format_value(sched_subtree, hf_gsm_cbch_slot, tvb, offset, 1, new_slots[i],
"%d reserved MDT: %x", new_slots[i], octet1);
other_slots[new_slots[i] - 1] = 0xFFFE;
}
}
proto_item_set_end(item, tvb, offset);
/* print schedule of other messages */
sched_subtree = proto_tree_add_subtree(sched_tree, tvb, offset, 0,
ett_schedule_new_msg, &item, "Other message slots in this schedule");
for (k=0; offset < len; )
{
/* XXX I don't know if a message can validly contain more than
* 48 slots, but that's the size of the array we create so cap
* it there to avoid uninitialized memory errors (see bug
* https://gitlab.com/wireshark/wireshark/-/issues/9270) */
if (sched_end > 48)
sched_end = 48;
while ((k<sched_end) && (other_slots[k]!=0xFFFF))
{
k++;
}
if (k >= sched_end)
break;
octet1 = tvb_get_guint8(tvb, offset);
if ((octet1 & 0x80) == 0x80)
{
if ((offset+1)<len)
{
/* MDT 1 */
guint8 octet2;
guint16 msg_id;
octet2 = tvb_get_guint8(tvb, offset + 1);
msg_id = ((octet1 &0x7F) << 8) + octet2;
other_slots[k] = msg_id;
k++;
proto_tree_add_uint_format_value(sched_subtree, hf_gsm_cbch_slot, tvb, offset, 2, k,
"%d, Message: %d, First transmission of an SMSCB within the Schedule Period",
k, msg_id);
offset +=2;
}
else
{
/* I'm not sure what's supposed to be dissected in this
* case. Perhaps just an expert info is appropriate?
* Regardless, we need to increment k to prevent an
* infinite loop, see
* https://gitlab.com/wireshark/wireshark/-/issues/8730
*/
++k;
}
}
Fix an out of bounds access found by ASAN and reported by Alexis: ==21553==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7fffbc0b2a5e at pc 0x7fe8684147a3 bp 0x7fffbc0b2950 sp 0x7fffbc0b2948 READ of size 2 at 0x7fffbc0b2a5e thread T0 #0 0x7fe8684147a2 in dissect_schedule_message /home/alagoutte/wireshark-clang/epan/dissectors/packet-gsm_cbch.c:309 #1 0x7fe867ed70a9 in call_dissector_through_handle /home/alagoutte/wireshark-clang/epan/packet.c:512 #2 0x7fe867eda42c in call_dissector_only /home/alagoutte/wireshark-clang/epan/packet.c:2139 #3 0x7fe867ed70a9 in call_dissector_through_handle /home/alagoutte/wireshark-clang/epan/packet.c:512 #4 0x7fe867ed735b in dissector_try_uint_new /home/alagoutte/wireshark-clang/epan/packet.c:1030 #5 0x7fe868a3ebd4 in decode_udp_ports /home/alagoutte/wireshark-clang/epan/dissectors/packet-udp.c:411 #6 0x7fe868a41886 in dissect /home/alagoutte/wireshark-clang/epan/dissectors/packet-udp.c:747 #7 0x7fe867ed70a9 in call_dissector_through_handle /home/alagoutte/wireshark-clang/epan/packet.c:512 #8 0x7fe867ed6d03 in dissector_try_uint_new /home/alagoutte/wireshark-clang/epan/packet.c:1030 #9 0x7fe8684eaa1f in dissect_ip /home/alagoutte/wireshark-clang/epan/dissectors/packet-ip.c:2401 #10 0x7fe867ed70a9 in call_dissector_through_handle /home/alagoutte/wireshark-clang/epan/packet.c:512 #11 0x7fe867ed735b in dissector_try_uint_new /home/alagoutte/wireshark-clang/epan/packet.c:1030 #12 0x7fe868333e98 in dissect_ethertype /home/alagoutte/wireshark-clang/epan/dissectors/packet-ethertype.c:305 #13 0x7fe867ed707d in call_dissector_through_handle /home/alagoutte/wireshark-clang/epan/packet.c:508 #14 0x7fe867eda42c in call_dissector_only /home/alagoutte/wireshark-clang/epan/packet.c:2139 #15 0x7fe8683328ad in dissect_eth_common /home/alagoutte/wireshark-clang/epan/dissectors/packet-eth.c:472 #16 0x7fe867ed70a9 in call_dissector_through_handle /home/alagoutte/wireshark-clang/epan/packet.c:512 #17 0x7fe867ed735b in dissector_try_uint_new /home/alagoutte/wireshark-clang/epan/packet.c:1030 #18 0x7fe868382460 in dissect_frame /home/alagoutte/wireshark-clang/epan/dissectors/packet-frame.c:485 #19 0x7fe867ed70a9 in call_dissector_through_handle /home/alagoutte/wireshark-clang/epan/packet.c:512 #20 0x7fe867eda42c in call_dissector_only /home/alagoutte/wireshark-clang/epan/packet.c:2139 #21 0x7fe867ed5baf in call_dissector /home/alagoutte/wireshark-clang/epan/packet.c:2169 #22 0x7fe867eb6388 in epan_dissect_run_with_taps /home/alagoutte/wireshark-clang/epan/epan.c:329 #23 0x4a0ef9 in process_packet /home/alagoutte/wireshark-clang/tshark.c:3434 #24 0x49c985 in load_cap_file /home/alagoutte/wireshark-clang/tshark.c:3237 #25 0x7fe860e8ede4 in __libc_start_main /build/buildd/eglibc-2.17/csu/libc-start.c:260 #26 0x48586c in _start ??:? Address 0x7fffbc0b2a5e is located in stack of thread T0 at offset 126 in frame #0 0x7fe86841353f in dissect_cbch /home/alagoutte/wireshark-clang/epan/dissectors/packet-gsm_cbch.c:345 This frame has 2 object(s): [32, 80) 'new_slots.i' [128, 224) 'other_slots.i' <== Memory access at offset 126 underflows this variable HINT: this may be a false positive if your program uses some custom stack unwind mechanism or swapcontext (longjmp and C++ exceptions *are* supported) SUMMARY: AddressSanitizer: stack-buffer-overflow ??:0 ?? svn path=/trunk/; revision=53934
2013-12-11 12:54:10 +00:00
else if (octet1 && ((octet1 & 0xC0) == 0))
{
/* MDT 00 */
if (octet1 < k)
{
other_slots[k] = other_slots[octet1 - 1];
k++;
proto_tree_add_uint_format_value(sched_subtree, hf_gsm_cbch_slot, tvb, offset++, 1, k,
"%d, Message ID: %d, Repeat of Slot %d",
k, other_slots[octet1 - 1], octet1);
}
else
{
k++;
proto_tree_add_uint_format_value(sched_subtree, hf_gsm_cbch_slot, tvb, offset++, 1, k,
"%d, Apparent forward reference to slot %d",
k, octet1);
}
}
else if (octet1 == 0x40)
{
/* MDT 010000000 */
k++;
proto_tree_add_uint_format_value(sched_subtree, hf_gsm_cbch_slot, tvb, offset++, 1, k,
"%d Free Message Slot, optional reading", k);
}
else if (octet1 == 0x41)
{
/* MDT 010000001 */
k++;
proto_tree_add_uint_format_value(sched_subtree, hf_gsm_cbch_slot, tvb, offset++, 1, k,
"%d Free Message Slot, reading advised", k);
}
else
{
/* reserved MDT */
k++;
proto_tree_add_uint_format_value(sched_subtree, hf_gsm_cbch_slot, tvb, offset, 1, k,
"%d reserved MDT: %x", k, octet1);
}
}
proto_item_set_end(item, tvb, offset);
proto_tree_add_item(sched_tree, hf_gsm_cbch_padding, tvb, offset, -1, ENC_NA);
}
}
}
static int
dissect_cbch(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)
{
fragment_head *frag_data = NULL;
guint8 octet, lb, lpd, seq_num;
guint32 offset;
proto_item *cbch_item, *lpd_item, *seq_item;
proto_tree *cbch_tree;
tvbuff_t *reass_tvb = NULL, *msg_tvb = NULL;
offset = 0;
octet = tvb_get_guint8(tvb, offset);
/*
* create the protocol tree
*/
cbch_item = proto_tree_add_protocol_format(tree, proto_cbch, tvb, 0, -1,
"GSM CBCH - Block (0x%02x)", octet&3);
col_append_str(pinfo->cinfo, COL_PROTOCOL, " CBCH");
cbch_tree = proto_item_add_subtree(cbch_item, ett_cbch_msg);
proto_tree_add_uint(cbch_tree, hf_gsm_cbch_block, tvb, offset, 1, octet);
proto_tree_add_uint(cbch_tree, hf_gsm_cbch_spare_bit, tvb, offset, 1, octet);
lpd_item = proto_tree_add_uint(cbch_tree, hf_gsm_cbch_lpd, tvb, offset, 1, octet);
proto_tree_add_uint(cbch_tree, hf_gsm_cbch_lb, tvb, offset, 1, octet);
seq_item = proto_tree_add_uint(cbch_tree, hf_gsm_cbch_seq_num, tvb, offset, 1, octet);
seq_num = octet & 0x0F;
lpd = (octet & 0x60) >> 5;
lb = (octet & 0x10) >> 4;
if (lpd == 1)
{
switch (seq_num)
{
case 0x00:
case 0x08:
pinfo->fragmented = TRUE;
/* we should have a unique ID for the reassembled page, but we don't really have anything from the protocol...
The GSM frame number div 4 might be used for this, but it has not been passed to this layer and does not
exist at all if the message is being passed over the RSL interface.
So we just use 0... */
/* after reassembly we will need to know if this is a scheduling message,
this information is carried in the initial sequence number, not the payload,
so we prepend the reassembly with the octet containing the initial sequence number
to allow later dissection of the payload */
frag_data = fragment_add_seq_check(&cbch_block_reassembly_table,
tvb, offset, pinfo, 0, NULL,
seq_num & 0x03, CBCH_FRAGMENT_SIZE + 1, !lb);
reass_tvb = process_reassembled_data(tvb, offset, pinfo, "Reassembled CBCH message",
frag_data, &cbch_frag_items, NULL, cbch_tree);
break;
case 0x01:
case 0x02:
case 0x03:
pinfo->fragmented = TRUE;
offset++; /* step to beginning of payload */
frag_data = fragment_add_seq_check(&cbch_block_reassembly_table,
tvb, offset, pinfo, 0, NULL,
seq_num, CBCH_FRAGMENT_SIZE, !lb);
reass_tvb = process_reassembled_data(tvb, offset, pinfo, "Reassembled CBCH message",
frag_data, &cbch_frag_items, NULL, cbch_tree);
break;
case 0x0F:
expert_add_info(pinfo, seq_item, &ei_gsm_cbch_seq_num_null);
call_data_dissector(tvb, pinfo, cbch_tree);
break;
default:
expert_add_info(pinfo, seq_item, &ei_gsm_cbch_seq_num_reserved);
call_data_dissector(tvb, pinfo, cbch_tree);
break;
}
if (reass_tvb)
{
/* Reassembled */
/* the tvb contains the reassmbled message prepended with the sequence number octet from the first block
We use this to determine whether this is a normal message or a scheduling message */
offset = 0;
octet = tvb_get_guint8(reass_tvb, offset++);
msg_tvb = tvb_new_subset_remaining(reass_tvb, offset);
if (octet & 0x08)
{
dissect_schedule_message(msg_tvb, pinfo, tree);
}
else
{
call_dissector(cbs_handle, msg_tvb, pinfo, tree);
}
}
}
else
{
expert_add_info(pinfo, lpd_item, &ei_gsm_cbch_lpd);
call_data_dissector(tvb, pinfo, cbch_tree);
}
return tvb_captured_length(tvb);
}
/* Register the protocol with Wireshark */
void
proto_register_gsm_cbch(void)
{
/* Setup list of header fields */
static hf_register_info hf_smscb[] =
{
{ &hf_gsm_cbch_spare_bit,
{ "GSM CBCH spare bit", "gsm_cbch.block_type.spare",
FT_UINT8, BASE_HEX, NULL, 0x80,
NULL, HFILL}
},
{ &hf_gsm_cbch_lpd,
{ "GSM CBCH Link Protocol Discriminator", "gsm_cbch.block_type.lpd",
FT_UINT8, BASE_DEC, VALS(block_type_lpd_strings), 0x60,
NULL, HFILL}
},
{ &hf_gsm_cbch_lb,
{ "GSM CBCH Last Block", "gsm_cbch.block_type.lb",
FT_UINT8, BASE_DEC, NULL, 0x10,
NULL, HFILL}
},
{ &hf_gsm_cbch_seq_num,
{ "GSM CBCH Sequence Number", "gsm_cbch.block_type.seq_num",
FT_UINT8, BASE_DEC, VALS(block_type_seq_num_values), 0x0F,
NULL, HFILL}
},
{ &hf_gsm_cbch_sched_type,
{ "GSM CBCH Schedule Type", "gsm_cbch.sched_type",
FT_UINT8, BASE_DEC, VALS(sched_type_values), 0xC0,
NULL, HFILL}
},
{ &hf_gsm_cbch_sched_begin_slot,
{ "GSM CBCH Schedule Begin slot", "gsm_cbch.schedule_begin",
FT_UINT8, BASE_DEC|BASE_RANGE_STRING, RVALS(gsm_cbch_sched_begin_slot_rvals), 0x3F,
NULL, HFILL}
},
{ &hf_gsm_cbch_sched_spare,
{ "GSM CBCH Schedule Spare Bits", "gsm_cbch.sched_spare",
FT_UINT8, BASE_DEC, NULL, 0xC0,
NULL, HFILL}
},
{ &hf_gsm_cbch_sched_end_slot,
{ "GSM CBCH Schedule End Slot", "gsm_cbch.sched_end",
FT_UINT8, BASE_DEC, NULL, 0x3F,
NULL, HFILL}
},
{ &hf_gsm_cbch_slot,
{ "Slot", "gsm_cbch.slot",
FT_UINT8, BASE_DEC, NULL, 0x0,
NULL, HFILL}
},
{ &hf_gsm_cbch_padding,
{ "Padding", "gsm_cbch.padding",
FT_BYTES, BASE_NONE, NULL, 0x0,
NULL, HFILL}
},
{ &hf_gsm_cbch_block,
{ "CBCH Block", "gsm_cbch.block",
FT_UINT8, BASE_HEX, NULL, 0x0,
NULL, HFILL}
},
#if 0
{ &hf_gsm_cbch_sched_msg_id,
{ "GSM CBCH Schedule Message ID", "gsm_cbch.sched_msg_id",
FT_UINT16, BASE_DEC, NULL, 0x0,
NULL, HFILL}
},
#endif
/* Fragment fields
*/
{ &hf_cbch_fragment_overlap,
{ "Fragment overlap",
"gsm_cbch.fragment.overlap",
FT_BOOLEAN, BASE_NONE, NULL, 0x0,
"Fragment overlaps with other fragments", HFILL
}
},
{ &hf_cbch_fragment_overlap_conflict,
{ "Conflicting data in fragment overlap",
"gsm_cbch.fragment.overlap.conflict",
FT_BOOLEAN, BASE_NONE, NULL, 0x0,
"Overlapping fragments contained conflicting data", HFILL
}
},
{ &hf_cbch_fragment_multiple_tails,
{ "Multiple tail fragments found",
"gsm_cbch.fragment.multipletails",
FT_BOOLEAN, BASE_NONE, NULL, 0x0,
"Several tails were found when defragmenting the packet", HFILL
}
},
{ &hf_cbch_fragment_too_long_fragment,
{ "Fragment too long",
"gsm_cbch.fragment.toolongfragment",
FT_BOOLEAN, BASE_NONE, NULL, 0x0,
"Fragment contained data past end of packet", HFILL
}
},
{ &hf_cbch_fragment_error,
{ "Defragmentation error",
"gsm_cbch.fragment.error",
FT_FRAMENUM, BASE_NONE, NULL, 0x0,
"Defragmentation error due to illegal fragments", HFILL
}
},
{ &hf_cbch_fragment_count,
{ "Fragmentation count",
"gsm_cbch.fragment.count",
FT_UINT32, BASE_DEC, NULL, 0x0,
"Count of CBCH Fragments", HFILL
}
},
{ &hf_cbch_reassembled_in,
{ "Reassembled in",
"gsm_cbch.reassembled.in",
FT_FRAMENUM, BASE_NONE, NULL, 0x0,
"CBCH fragments are reassembled in the given packet", HFILL
}
},
{ &hf_cbch_reassembled_length,
{ "Reassembled message length is one less than indicated here",
"gsm_cbch.reassembled.length",
FT_UINT32, BASE_DEC, NULL, 0x0,
"The total length of the reassembled message", HFILL
}
},
{ &hf_cbch_fragment,
{ "CBCH Fragment",
"gsm_cbch.fragment",
FT_FRAMENUM, BASE_NONE, NULL, 0x0,
NULL, HFILL
}
},
{ &hf_cbch_fragments,
{ "CBCH Fragments",
"gsm_cbch.fragments",
FT_NONE, BASE_NONE, NULL, 0x0,
NULL, HFILL
}
}
};
/* Setup protocol subtree array */
static gint *ett[] = {
&ett_cbch_msg,
&ett_schedule_msg,
&ett_schedule_new_msg,
&ett_cbch_fragment,
&ett_cbch_fragments,
};
expert_module_t* expert_cbch;
static ei_register_info ei[] = {
{ &ei_gsm_cbch_sched_end_slot, { "gsm_cbch.sched_end.bad_range", PI_PROTOCOL, PI_WARN, "End Slot Number less than Begin Slot Number: ignoring message", EXPFILL }},
{ &ei_gsm_cbch_seq_num_null, { "gsm_cbch.block_type.seq_num.null", PI_PROTOCOL, PI_NOTE, "NULL message", EXPFILL }},
{ &ei_gsm_cbch_seq_num_reserved, { "gsm_cbch.block_type.seq_num.reserved", PI_PROTOCOL, PI_NOTE, "Reserved Sequence Number", EXPFILL }},
{ &ei_gsm_cbch_lpd, { "gsm_cbch.block_type.lpd.invalid", PI_PROTOCOL, PI_WARN, "Invalid Link Protocol Discriminator", EXPFILL }},
};
/* Register the protocol name and description */
proto_cbch = proto_register_protocol("GSM Cell Broadcast Channel", "GSM CBCH", "gsm_cbch");
proto_register_field_array(proto_cbch, hf_smscb, array_length(hf_smscb));
expert_cbch = expert_register_protocol(proto_cbch);
expert_register_field_array(expert_cbch, ei, array_length(ei));
/* subdissector code */
register_dissector("gsm_cbch", dissect_cbch, proto_cbch);
reassembly_table_register(&cbch_block_reassembly_table,
&addresses_reassembly_table_functions);
/* subtree array */
proto_register_subtree_array(ett, array_length(ett));
}
void
proto_reg_handoff_gsm_cbch(void)
{
cbs_handle = find_dissector_add_dependency("gsm_cbs", proto_cbch);
}
/*
* Editor modelines - https://www.wireshark.org/tools/modelines.html
*
* Local variables:
* c-basic-offset: 4
* tab-width: 8
* indent-tabs-mode: nil
* End:
*
* vi: set shiftwidth=4 tabstop=8 expandtab:
* :indentSize=4:tabSize=8:noTabs=true:
*/