Wireshark-bugs: [Wireshark-bugs] [Bug 2381] New: bugs in eigrp dissector

Date: Fri, 21 Mar 2008 09:32:20 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2381

           Summary: bugs in eigrp dissector
           Product: Wireshark
           Version: 0.99.8
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Major
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: maximivanov@xxxxxxx


Build Information:
Version 0.99.8 (SVN Rev 24492)

Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.12.8, with GLib 2.14.6, with WinPcap (version unknown),
with libz 1.2.3, with libpcre 7.0, with SMI 0.4.5, with ADNS, with Lua 5.1,
with
GnuTLS 1.6.1, with Gcrypt 1.2.3, with MIT Kerberos, with PortAudio V19-devel,
with AirPcap.

Running on Windows XP Service Pack 2, build 2600, with WinPcap version 4.0.2
(packet.dll version 4.0.0.1040), based on libpcap version 0.9.5, without
AirPcap.

Built using Microsoft Visual C++ 6.0 build 8804
--
Hello.
In first, sorry for my english.

1)The eigrp update packets may contain more than one destination advertisement
per one "IP external route" or "IP internal route" TLV. Dissector must analyze
the length of each TLV

2)In "packet-eigrp.c" source file is written: 
"/* XXX - the EIGRP page whose URL appears at the top says this field is 24
bits; what if the prefix length is > 24? */"
In case 24 < prefix length <= 32 length of destination is 4 bytes.

I found the document
(http://books.google.ru/books?id=IM-Y2W0RIF0C&pg=PA157&lpg=PA157&dq=eigrp+packet+formats&source=web&ots=XQUlzOUVXN&sig=B8KkLB8XnmtVMYIGhqI2Go-gGF8&hl=ru#PPA159,M1),
described this situation.

Sorry for 2 bugs per 1 report.

Best regards, Ivanov Max


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.