Commit Graph

86484 Commits

Author SHA1 Message Date
Uwe Heuert eb05f77b71 BSI TR-03109 required extensions 2023-01-03 07:44:19 +00:00
Huang Qiangxiong e60dc74d90 JSON: fix a displaying two dimensional array bug in compact form 2023-01-03 07:40:06 +00:00
Martin Mathieson 872db1fe87 For 'fields' param in add_bitmask_, check item masks 2023-01-03 07:28:48 +00:00
Martin Mathieson dd8828014c Change some vals entries to equivalent common tfs 2023-01-03 07:26:20 +00:00
Martin Mathieson 704eaa1839 DEC-NWK: Fix a couple of spelling errors 2023-01-02 17:06:05 +00:00
Stig Bjørlykke ddebd0c9dd cql: Fix 64-bit print format issue 2023-01-02 12:37:55 +00:00
Stig Bjørlykke b80043835f avsp: Fix 64-bit print format issue 2023-01-02 12:35:59 +00:00
Dr. Lars Völker ca941e3881 SOME/IP-SD: improve Entry/Option handling and port registering
- Show which options are referenced by entries in entry overview.
- Show IPv6 address in option overview too (before IPv4 only).
- Only register ports of endpoint referenced by SOME/IP services.

Endpoint Options referenced by Service 0xfffe (non SOME/IP) are not
automatically registered to be SOME/IP anymore [improvement].
2023-01-02 12:33:16 +00:00
Alexis La Goutte 49e273941f BGP: Fix IP length when Root Node (IPv6) 2023-01-02 12:24:25 +00:00
Alexis La Goutte f6e92abc20 BGP: Wrong Tunnel ID format in PMSI tunnel attribute
Close #18759
2023-01-02 12:24:25 +00:00
Tomasz Moń 8c6854fb65 Qt: Cache only recently accessed columns text
Remove MINIMIZE_STRING_COPYING define because the code does not even
compile anymore. Do not cache strings when ensuring rows are colorized
to avoid thrashing cache. Store column data only for last 500 accessed
records to ensure there is upper bound for the cache size.

Fixes #18741
2023-01-02 12:22:34 +00:00
Bernhard Dick bf7be8a1ae DECT-NWK: Fix possible overflow
Calculating ipei_digits happened using signed int arithmetic due to type
promotion rules. Explicitely casting the static number to guint64
ensures usage of unsigned 64bit arithmetics.
2023-01-02 12:21:44 +00:00
Bernhard Dick 12591d0a42 DECT-NWK: Fix ELI type decoding
The extended location information type field is a four bit value. This
was handled correctly while displaying, but not by interpreting the
value. Hence the according MASK and SHIFT values have been updated.
2023-01-02 12:21:44 +00:00
Gerald Combs 659b830aef TIPC: Add a recursion check
Add a recursion check.
Fixes #18770.
2023-01-02 12:17:49 +00:00
Gerald Combs d9adb6f712 Qt: Escape HTML when setting ElidedLabel text
ElidedLabels use Qt's rich text internally, but we need to make sure the
text we're passed via setText() is plain.

Fixes #18774
2023-01-02 12:16:35 +00:00
Gerald Combs 1c24e49c67 Qt: ElidedLabel cleanup
Add Doxygen documentaiton and fix a clazy-qstring-arg warning.
2023-01-02 12:16:35 +00:00
Gerald Combs cf4d88d320 [Automatic update for 2023-01-01]
Update manuf, services enterprise numbers, translations, and other items.
2023-01-02 12:15:00 +00:00
Kevin Albertson 336c0ae992 zstd: fix leak of tvbs
Replace use of composite tvb with creation of one tvb.
2023-01-02 12:13:54 +00:00
Kevin Albertson 8ad7e2f538 zstd: add test for uncompressing 0 length 2023-01-02 12:13:54 +00:00
Yaniv Kaul a2e18feae7 packet-cql: keys with length -1 are NULL values in BATCH operations
When procssing BATCH statements, Wireshark did not properly handled keys with length < 0 , which actually means that no value
is sent on the wire..
This fixes it (and as a results, parses properly some result packets it failed to parse properly before).

Signed-off-by: Yaniv Kaul <yaniv.kaul@scylladb.com>
2023-01-02 12:13:17 +00:00
Yaniv Kaul 140ebf5829 packet-cql: keys with length -1 are NULL values
When procssing results, Wireshark did not properly handled keys with length -1, which actually means NULL.
This fixes it (and as a results, parses properly some result packets it failed to parse properly before).

Signed-off-by: Yaniv Kaul <yaniv.kaul@scylladb.com>
2023-01-02 12:13:17 +00:00
Yaniv Kaul cffdb5945e packet-cql.c: add row number in display for RESULT opcode
Signed-off-by: Yaniv Kaul <yaniv.kaul@scylladb.com>
2023-01-02 12:12:58 +00:00
Yaniv Kaul 91cf033cec packet-cql.c: distinguish between Snappy and LZ4 decompressed data
Simply print if it's Snappy or LZ4.

Signed-off-by: Yaniv Kaul <yaniv.kaul@scylladb.com>
2023-01-02 11:25:12 +00:00
Yaniv Kaul 7eb8065e63 packet-cql.c: add support for SUPPORTED mesage type
Signed-off-by: yaniv.kaul@scylladb.com
2023-01-02 09:58:24 +00:00
PMcL 7d66154242 Support for an Arista Vendor Specific Protocol subtype
packet.avsp.c: Updated to include a new protocol subtype called TGen;
packet-ethertype.c: Changed AVSP to Arista Vendor Specific Protocol;
2023-01-02 07:56:43 +00:00
João Valverde f37c7c4062 dfilter: Tweak representation for length-1 byte array
Make dfilter byte representation always use ':' for consistency.

Make 1 byte be represented as "XX:" with the colon suffix to
make it nonambiguous that is is a byte and not other type,
like a protocol.

The difference is can be seen in the following programs. In the
before representation it is not obvious at all that the second
"fc" value is a literal bytes value and not the value of the
protocol "fc", although it can be inferred from the lack of
a READ_TREE instruction. In the After we know that "fc:" must
be bytes and not a protocol.

Note that a leading colon is a syntactical expedient to say
"this value with any type is a literal value and not a protocol
field." A terminating colon is just a part of the dfilter
literal bytes syntax.

Before:

Filter: fc == :fc

Syntax tree:
 0 TEST_ANY_EQ:
   1 FIELD(fc <FT_PROTOCOL>)
   1 FVALUE(fc <FT_PROTOCOL>)

Instructions:
00000 READ_TREE		fc <FT_PROTOCOL> -> reg#0
00001 IF_FALSE_GOTO	3
00002 ANY_EQ		reg#0 == fc <FT_PROTOCOL>

After:

Filter: fc == :fc

Syntax tree:
 0 TEST_ANY_EQ:
   1 FIELD(fc <FT_PROTOCOL>)
   1 FVALUE(fc: <FT_PROTOCOL>)

Instructions:
00000 READ_TREE		fc <FT_PROTOCOL> -> reg#0
00001 IF_FALSE_GOTO	3
00002 ANY_EQ		reg#0 == fc: <FT_PROTOCOL>
2023-01-02 02:54:38 +00:00
João Valverde c762d8492b dfilter: Improve debug format 2023-01-02 02:53:21 +00:00
João Valverde f5bfe89785 dfilter: Replace global variable 2023-01-02 01:19:51 +00:00
João Valverde 5d8f495233 dfilter: Minor flex clean up
Replace flex prefix to improve readability.

Remove two no-longer-needed workarounds to suppress warnings.
2023-01-02 01:19:26 +00:00
João Valverde f2218ae5f0 Lemon: Update code and remove cruft
Remove some unused historical files.

Aggressively disable warnings to keep the lemon source
pristine and avoid the maintenance burden for lemon itself.

Lemon has its own lax policy for warnings that doesn't match our
own and they won't accept external patches to remove the
warnings, so just ignore them. Lemon is just executed to generate
code for the Wireshark build and the minor code issues it has
have no influence at runtime.

For lemon generated code we selectively disable some linting
warnings.

Remove patches for lemon and lempar, they are no longer required
with these changes to silence warnings.
2023-01-01 18:18:06 +00:00
Stig Bjørlykke 67a788b29c Happy New Year 2023 2023-01-01 10:22:36 +01:00
Alexander Clouter ee7d3507eb qt: Ignore gcc 12.1 optimization bug with Qt (more e1a6913a) 2022-12-31 20:45:15 +00:00
Alexander Clouter a8b16d74e1 eap: tweak conversation tracking to avoid breaking pinfo horribly
Looks like conversation_set_conv_addr_port_endpoints() from 66b441f3d is
designed with this use case in mind.

This should resolve issue #18622
2022-12-31 20:43:22 +00:00
Gerald Combs b15eb8a82f macOS: Don't try to copy a nonexistent plist
In the ChmodBPF postinstall script, don't try to copy
org.wireshark.ChmodBPF.plist from a nonexistent location.

Ping #18734.
2022-12-30 18:05:01 -08:00
Matan Perelman 3a23f6e6c9 gsm_a_rr: Support parsing channel requests on RACH 2022-12-30 19:44:49 +00:00
João Valverde 6bdc85e37f dfilter: Reject constant expressions
Constant logical expressions are tautologies and almost certainly
user error. Reject them as invalid.

Most of them were already rejected with insufficient type information
but some corner cases were still valid.

Before:

    Filter: ${frame.number} == 3

    Syntax tree:
     0 TEST_ANY_EQ:
       1 REFERENCE(frame.number <FT_UINT32>)
       1 FVALUE(3 <FT_UINT32>)

    Instructions:
    00000 READ_REFERENCE	${frame.number <FT_UINT32>} -> reg#0
    00001 IF_FALSE_GOTO	3
    00002 ANY_EQ		reg#0 == 3 <FT_UINT32>
    00003 RETURN

After:

    Filter: ${frame.number} == 3
    dftest: Constant expression is invalid.
    	${frame.number} == 3
    	^~~~~~~~~~~~~~~~~~~~
2022-12-30 18:46:22 +00:00
João Valverde a17fb20550 dfilter: Remove commute argument from semantic check
Take a more conservative, less flexible, maybe more elegant,
approach to type inference for now.
2022-12-30 18:46:22 +00:00
João Valverde 2ff6139307 dfilter: Add a check_nonzero() function
Small refactoring with no functional difference.
2022-12-30 18:46:22 +00:00
João Valverde bc74d2e3e4 dftest: Fix command-line argument parsing
Expressions that start with hyphen clash with command-line options.
In that case we need to pass "--" to dftest to stop processing
options.

Fix the test suite to do this. Fixes failures with dftest and
expressions like:

    -2 == tcp.port

Replace the GLib option parser with getopt while at it. The GLib API
is nice but isn't a good fit for this utility and the code appears to
be inconsistent on whether "--" is left in the argv or not.
2022-12-30 18:27:30 +00:00
João Valverde d3d06c2552 dftest: Add debug command-line options 2022-12-30 13:42:26 +00:00
John Thacker 55ffdb08bb conversation: Remove conversation from the correct table
In conversation_set_addr2, if the existing conversation has
a port2, remove it from the _no_addr2 hashtable, not the _no_port2
hashtable.

Fix #18766
2022-12-30 13:16:56 +00:00
Martin Mathieson dfd3a4d61b check_tfs: find entries that define value_string identical to common tfs 2022-12-30 11:56:41 +00:00
Joakim Karlsson a661ebaae2 DECT-NWK: fix build issue [-Werror=maybe-uninitialized] 2022-12-30 11:17:06 +00:00
Joakim Karlsson 3c0cdc9e3d SNMP: generate ASN1 2022-12-30 10:34:21 +01:00
John Thacker 67db53abbf epan: Fixup get_ascii_string change
prev needs to be advanced to ptr on an invalid character even
if there aren't any bytes to copy (because we have two invalid
characters in a row.) Fixup ba7917309a

Fix #18769.
2022-12-29 22:44:37 -05:00
Joakim Karlsson 2ce57fcc19 pfcp: correction of IE 5GS User Plane Node
Fix #18760
2022-12-30 02:09:55 +00:00
Joakim Karlsson 5c151df3ad diameter: Update geographical_description 2022-12-30 02:04:42 +00:00
Joakim Karlsson 23427cc9ba LCS-AP: Update to 3GPP TS 29.171 V17.2.0 2022-12-30 02:03:33 +00:00
Joakim Karlsson 931824f4ff gsm_common: Update geographical_description 2022-12-30 02:02:42 +00:00
João Valverde 53153725bb dftest: Add a missing goto statement 2022-12-30 01:10:27 +00:00