Commit Graph

82297 Commits

Author SHA1 Message Date
Pascal Quantin 1292ee5cef NRPPa: upgrade dissector to v16.5.0 2021-10-04 19:57:11 +00:00
Pascal Quantin 8faede569b NGAP: upgrade dissector to v16.7.0 2021-10-04 19:40:15 +00:00
Evan Huus 7b8938474b to_str: pull scope arg up into more addr macros
These three all had pretty minimal usage, so do them together.
2021-10-04 18:27:26 +00:00
Martin Mathieson ef2468662b check_typed_item_calls.py: Flag bits set outside mask
Current errors are:
Error: epan/dissectors/packet-asterix.c filter= asterix.021_161_TN 0x0fff with len is 4 but type FT_UINT8  indicates max of 2 and extra digits are non-zero (0f)
Error: epan/dissectors/packet-capwap.c filter= capwap.control.message_element.ieee80211_station_session_key.flags_a 0x2000 with len is 4 but type FT_BOOLEAN  indicates max of 1 and extra digits are non-zero (200)
Error: epan/dissectors/packet-capwap.c filter= capwap.control.message_element.ieee80211_station_session_key.flags_c 0x1000 with len is 4 but type FT_BOOLEAN  indicates max of 1 and extra digits are non-zero (100)
Error: epan/dissectors/packet-cfdp.c filter= cfdp.trans_stat_2_b 0x6000 with len is 4 but type FT_UINT8  indicates max of 2 and extra digits are non-zero (60)
Error: epan/dissectors/packet-cfdp.c filter= cfdp.suspension_ind_b 0x8000 with len is 4 but type FT_UINT8  indicates max of 2 and extra digits are non-zero (80)
Error: epan/dissectors/packet-ixveriwave.c filter= ixveriwave.tx.factorydebug 0x7f80 with len is 4 but type FT_UINT8  indicates max of 2 and extra digits are non-zero (7f)
Error: epan/dissectors/packet-opa-snc.c filter= opa.snc.rhf.eccerr 0x200000000 with len is 9 but type FT_BOOLEAN  indicates max of 8 and extra digits are non-zero (2)
Error: plugins/epan/ethercat/packet-ethercat-datagram.c filter= ecat.reg.ctrlstat.rdacc 0x0100 with len is 4 but type FT_BOOLEAN  indicates max of 2 and extra digits are non-zero (01)
Error: plugins/epan/ethercat/packet-ethercat-datagram.c filter= ecat.reg.ctrlstat.wracc 0x0200 with len is 4 but type FT_BOOLEAN  indicates max of 2 and extra digits are non-zero (02)
Error: plugins/epan/ethercat/packet-ethercat-datagram.c filter= ecat.reg.ctrlstat.reloadacc 0x0400 with len is 4 but type FT_BOOLEAN  indicates max of 2 and extra digits are non-zero (04)
Error: plugins/epan/ethercat/packet-ethercat-datagram.c filter= ecat.reg.ctrlstat.crcerr 0x0800 with len is 4 but type FT_BOOLEAN  indicates max of 2 and extra digits are non-zero (08)
Error: plugins/epan/ethercat/packet-ethercat-datagram.c filter= ecat.reg.ctrlstat.lderr 0x1000 with len is 4 but type FT_BOOLEAN  indicates max of 2 and extra digits are non-zero (10)
Error: plugins/epan/ethercat/packet-ethercat-datagram.c filter= ecat.reg.ctrlstat.cmderr 0x2000 with len is 4 but type FT_BOOLEAN  indicates max of 2 and extra digits are non-zero (20)
Error: plugins/epan/ethercat/packet-ethercat-datagram.c filter= ecat.reg.ctrlstat.wrerr 0x4000 with len is 4 but type FT_BOOLEAN  indicates max of 2 and extra digits are non-zero (40)
Error: plugins/epan/ethercat/packet-ethercat-datagram.c filter= ecat.reg.ctrlstat.busy 0x8000 with len is 4 but type FT_BOOLEAN  indicates max of 2 and extra digits are non-zero (80)
2021-10-04 18:07:28 +00:00
Darius Davis 9bf24deb2d WSDG: Trivial cleanups.
Fix a bogus URL in a comment in the asn2wrs documentation.

Switch a backslash in the Unix Quick Setup instructions to a slash.

Insert commas in two places where they are needed.
2021-10-04 17:49:11 +00:00
Evan Huus e578c6caee to_str: pull scope arg up into tvb_ether_to_str
There are a bunch of near-identical macros here, but I'm gonna change
one at a time or else the builder times out at the number of files
changed in one merge.
2021-10-04 17:10:17 +00:00
Anders Broman eb9ae2ffd5 Read eNode-B raw logs 2021-10-04 16:08:27 +00:00
Evan Huus 5bc06b9042 proto_data: use pinfo->pool not the global scope 2021-10-04 15:52:10 +00:00
Evan Huus 9cf7ff44e1 wscbor-test: handle jmps
Satisfy GCC that all the variables in this test program will be
initialized / not-clobbered in various exceptional/longjmp cases.
2021-10-04 15:35:44 +00:00
Anders Broman 120aab63e3 NR-RRC:Make it possible to use dissctor handles for more cases. 2021-10-04 14:48:40 +00:00
Pascal Quantin c51073bc80 X2AP: upgrade dissector to v16.7.0 2021-10-04 14:30:28 +02:00
Pascal Quantin 1f7de4c724 S1AP: upgrade dissector to v16.7.0 2021-10-04 13:55:09 +02:00
Stig Bjørlykke 25ca031f53 Release notes: Add note about improved Reload Lua Plugins
Add a note about improved Reload Lua Plugins.
2021-10-04 09:40:42 +00:00
Stig Bjørlykke e724ab1b41 Qt: Handle fieldsChanged before prefs_apply_all
Improve reload Lua plugins to handle fieldsChanged before calling
the preferences apply callback, because a proto.prefs_changed()
function may call reload_packets() or redissect_packets(), and this
requires the fields to be updated.
2021-10-04 10:08:30 +02:00
Stig Bjørlykke e866034c55 Qt: Handle errors when reloading Lua FileHandler
Reloading the capture file after reloading a Lua FileHandler
may fail because of Lua errors. Handle this by closing the file.

Related to #17615
2021-10-04 07:15:11 +00:00
John Thacker 5c185238a4 BT-DHT: Test packets even if the dissector is set
BitTorrent clients use the same UDP conversation for both DHT and
uTP, switching back and forth between the two at connection start.
So even if the dissector has been set for the conversation or
ports to BT-DHT, test the packet and reject it if not DHT in order
to give the uTP dissector a chance. Fix #17626
2021-10-04 06:58:46 +00:00
John Thacker e05f704606 wiretap: camins, vwr: Stop heuristics after 1GiB
Very large 64 bit files are supported, so the CAM Inspector and
Ixia Veriwave heuristics, which are fairly weak and either always
(CAM Inspector) or possibly (Veriwave) try to read the entire file
should stop their heuristics and make a decision after some reasonable
length.

Without this, the GUI freezes for seconds, minutes, or even hours
by merely clicking on a large file in the file chooser, as
wtap_open_offline attempts to determine the file type. The same issue
occurs in capinfos, captype, tshark, editcap, etc.

In addition, previously the CAM Inspector heuristics could give the wrong
result on very large files, because 10 * invalid_pairs could overflow
its guint32 and then end up comparing as less than valid_pairs.

Fix #17620
2021-10-03 20:01:37 +00:00
Alexis La Goutte 7ca5d99d1e core: Fix -Wdocumentation
packet-cose.c:422:5: warning: '@return' command used in a comment that is attached to a function returning void [-Wdocumentation]
2021-10-03 19:22:06 +00:00
Alexis La Goutte f0da2cf58f core: Fix Wmissing-prototypes
packet-cose.c:1221:6: warning: no previous prototype for function 'proto_reg_handoff_cose' [-Wmissing-prototypes]
packet-cose.c:1185:6: warning: no previous prototype for function 'proto_register_cose' [-Wmissing-prototypes]
2021-10-03 19:22:06 +00:00
Alexis La Goutte 3cce9e3a74 core: Fix Clang Analyzer Warning
Value stored to 'sublen' is never read
2021-10-03 19:22:06 +00:00
Gerald Combs 4bda9dfd3d [Automatic update for 2021-10-03]
Update manuf, services enterprise numbers, translations, and other items.
2021-10-03 10:51:10 +00:00
Adrian Granados da11ef5770 ieee80211: Add 6E support when converting freq. to channel number.
Converting from freq to channel only needed the 6 GHz freq. range
to be added, however, converting from channel to freq. will require
the function ieee80211_chan_to_mhz to take a starting frequency as
there's overlap in the channel numbering between 2.4/5 GHz and 6 GHz
bands. This may not be possible in some cases, so for now the
function will continue to do the conversion based on the order
on which the freq. ranges are defined. Specifically, it will favor
2.4/5 GHz over 6 GHz.
2021-10-03 10:03:45 +00:00
Stig Bjørlykke 41f4855443 Lua: Make FileHandler seek_read() optional
When FileHandler seek_read() is not implemented use a default
implementation which does the same as the provided example to
file_seek() and then call the FileHandler read().
2021-10-03 11:04:29 +02:00
Stig Bjørlykke c6b046abd7 rdp: Fix compile errors
Remove double typedef zgfx_context_t.
Change from size_t to guint32 for a `residue` variable.
2021-10-03 10:31:07 +02:00
David Fort 09f762ba5e rdp: add dissector for the egfx channel
This patch adds basic dissection for the egfx channel. It also fixes fragmentation
in the dynamic channel, and also introduces some of the decompressors involved in RDP
traffic.
2021-10-02 11:15:32 +02:00
David Fort 7b5661dfe0 rdp: dissect close requests PDU in drdynvc channel
This patch adds the display of the corresponding channel name.
2021-10-02 11:04:03 +02:00
David Fort 3841bcd82c rdp: set the server address in the right place
In some cases the server address was set too late, this patch fixes that.
2021-10-02 11:04:03 +02:00
Ed 4e61cf4b73 UBDP: Update the UBDP header dissection and add username TLV
Update

Update
2021-10-02 08:15:27 +00:00
John Thacker ced4f00447 UI: Fix "Follow Stream" spin box for protocols without substreams
If the substream spin box is not visible, then we don't need to
go looking for a new substream value. Fix #17624
2021-10-01 22:32:24 -04:00
Gerald Combs cfc3212ae2 Docs: Miscellaneous man page updates.
Add the program version to more commonly-used commands. We were labeling
output with "Output" and "Example output". Use "Example output"
everywhere. Other miscellaneous updates.
2021-10-01 23:57:21 +00:00
Gerald Combs ce22d958a8 Test: Add external tests.
Add test/suite_external.py, which can dynamically generate tests from a
configuration file. This is intended to make happy-shark useful, but it
should make it easy to add simple TShark tests elsewhere.

The configuration file format must currently be JSON as described in the
Developer's Guide.
2021-10-01 23:40:17 +00:00
Gerald Combs 436dd46720 GitLab CI: Switch all Linux builds to our container registry.
Switch all of the remaining Linux builds to
registry.gitlab.com/wireshark/wireshark-containers/
2021-10-01 15:52:38 -07:00
Gerald Combs f9279ddaea GitLab CI: Switch the openSUSE 15.2 image.
Switch to the image in the wireshark/wireshark-containers registry.
2021-10-01 22:23:53 +00:00
Martin Mathieson 58a9b77fb8 F1AP: Don't export PDUs as L7
This is because exporting as L3 (should be L4) over SCTP works
well enough.
2021-10-01 21:09:09 +00:00
Gerald Combs fee7f31e63 GitLab CI: Switch the CentOS 8 image.
Switch to the image in the wireshark/wireshark-containers registry.
2021-10-01 20:13:31 +00:00
Gerald Combs 8705dfbe74 Docs: Update some man page markup and remove pod2adoc.py.
Remove pod2adoc.py since it's no longer needed. Add versions to the
Wireshark, TShark, and Dumpcap man pages. Use definition lists in the
TShark glossary descriptions. Other minor fixes.
2021-10-01 19:24:59 +00:00
Gerald Combs 7f47511653 Try to fix RPM packaging.
Asciidoctor is now required for packaging. Try to make sure it's
installed on CentOS 8 and openSUSE 15.2. Note that CentOS 8 doesn't have
an Asciidoctor package, which complicates our SPEC.
2021-10-01 18:26:24 +00:00
Stig Bjørlykke ec2746c910 capture: Check for valid wtap when capture.show_info
Changing profile during capture may change the capture_opts->show_info
setting. Always init cap_session->wtap and check if valid before doing
capture_info_new_packets(). Always close dialog and cap_session->wtap
in capture_input_closed().

This will not bring up the Capture Information dialog when switching
to a profile having this enabled.

Fixes #17622
2021-10-01 17:16:13 +00:00
João Valverde c7dc907d0e dfilter: Rename some identifiers in grammar
Prefer grammar names for readibility over C names.

Prefer rel_binop to rel_op2. Clean formatting.
2021-10-01 16:58:42 +00:00
Gerald Combs 84ab55cf75 Docs+Packaging: Convert our man pages to Asciidoctor.
Convert doc/*.pod to Asciidoctor. This:

* Means we use the same markup for our man pages, the guides, and
  release notes.
* Lets us add versions to our man pages.
* Gives us more formatting options, e.g. AsciiDoc supports `commands`,
  nested lists and makes it easy to include version information. The
  manpage backend doesn't seem to support tables very well,
  unfortunately.

Convert our CMake configuration to produce *roff and html man pages
using Asciidoctor. Add a "manarg" block macro which makes our synopses
wrap correctly.

Similar to the release notes, guides, and FAQ, if Asciidoctor isn't
found the man pages won't be generated or installed.

Move Asciidoctor to the list of package build dependencies in various
places.

This commit includes the conversion script (pod2adoc.py), which will be
removed later.

Line count sanity check:

Man page         .pod .adoc
androiddump       260  280
asn2deb            93  105
capinfos          401  471
captype            54   55
ciscodump         241  269
dftest             42   42
dpauxmon          153  169
dumpcap           464  534
editcap           528  583
etwdump           136  156
extcap            157  181
idl2deb            91  103
idl2wrs           120  100
mergecap          206  207
mmdbresolve        75   75
randpkt           107  111
randpktdump       158  184
rawshark          558  610
reordercap         76   78
sdjournal         145  157
sshdump           272  302
text2pcap         274  312
tshark           2135 2360
udpdump           133  151
wireshark-filter  486  479
wireshark        2967 3420
2021-10-01 16:42:34 +00:00
Gerald Combs 9f1607ab47 Docs: Prep for POD to Asciidoctor conversion.
[skip ci]

Rename each of our .pod files to .adoc. Add pod2adoc.py, which converts
POD markup to Asciidoctor, along with customizations specific to us.
2021-10-01 16:42:34 +00:00
João Valverde 04b0e2b80b dfilter: Extend function 'tostr' method
Print function arguments instead of just a count.
2021-10-01 16:04:37 +00:00
João Valverde 90dc58a942 dfilter: Add range 'tostr' method 2021-10-01 16:04:37 +00:00
João Valverde dcf41b93a8 dfilter: Add set 'tostr' method 2021-10-01 16:04:37 +00:00
João Valverde 2c55bffb41 dfilter: Improve syntax error message
Pass simple token value and use it for the error message. This string
is freed in the parser destructor.
2021-10-01 16:04:37 +00:00
João Valverde db18865e55 dfilter: Save token value to syntax tree
When parsing we save the token value to the syntax tree. This is
useful for better error reporting. Use it to report an invalid
entity for the slice operation. Before only the memory location
was reported, which is not a good error message.

Before:
  % dftest '"01:02:03:04"[0:3] == foo'
  Filter: ""01:02:03:04"[0:3] == foo"
  dftest: Range is not supported for entity <0x7f6c84017740> of type STRING

After:
  % dftest '"01:02:03:04"[0:3] == foo'
  Filter: ""01:02:03:04"[0:3] == foo"
  dftest: Range is not supported for entity 01:02:03:04 of type STRING

When creating a new node from an old one we need to copy the token
value. Simple tokens such as RBRACKET, COMMA and COLON are
not part of the AST and don't have an associated semantic value.
2021-10-01 16:04:37 +00:00
João Valverde 487e2b6bc3 dfilter: Remove unnecessary log activation check
Use log_write_always_full() instead of ws_log() to avoid a useless
activation check.

Rename stnode_log() to log_stnode() for consistency.
2021-10-01 16:04:37 +00:00
Pascal Quantin 728061fa17 NR RRC: upgrade dissector to v16.6.0 2021-10-01 14:36:49 +00:00
Pascal Quantin 35826bbb95 LTE RRC: upgrade dissector to v16.6.0 2021-10-01 15:05:02 +02:00
João Valverde de6f5b9d82 dfilter: Fixup syntax tree node display 2021-09-30 19:11:17 +01:00