Wireshark dissector incorrectly decodes SCCP

This issue was migrated from bug 12332 in our old bug tracker.

Original bug information:

Reporter: Isaac
Status: RESOLVED NOTABUG
Product: Wireshark
Component: Dissection engine (libwireshark)
OS: All
Platform: x86
Version: 2.0.2

Attachments:

decode_error.tar.gz: sccp map and screenshot
: Screenshot (extracted from tarball for ease of use).
sccp-and-map.pcap: Capture file (extracted from tarball for fuzz harvesting and ease of use).

Isaac said:

Created attachment 14472 sccp map and screenshot

Build Information: Version 2.0.2 (SVN Rev Unknown from unknown)

Copyright 1998-2016 Gerald Combs <gerald@‍wireshark.org> and contributors. License GPLv2+: GNU GPL version 2 or later <http://www.gnu.org/licenses/old-licenses/gpl-2.0.html> This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with Qt 4.8.6, with libpcap, without POSIX capabilities, with libnl 1, with libz 1.2.8, with GLib 2.40.2, without SMI, without c-ares, without ADNS, without Lua, without GnuTLS, without Gcrypt, without Kerberos, with GeoIP, without QtMultimedia, without AirPcap.

Running on Linux 3.13.0-68-generic, with locale C, with libpcap version 1.5.3, with libz 1.2.8. Intel(R) Core(TM) i7 CPU 870 @ 2.93GHz (with SSE4.2)

Built using gcc 4.8.4.

Wireshark is Open Source Software released under the GNU General Public License.

Check the man page and http://www.wireshark.org for more information.

newer versions of wireshark dissections are not aligned. please see screenshot

added libwireshark version2.0 labels

Pascal Quantin said:

To get the decoding equivalent to 1.10 release, you need to change the MTP3 standard setting (Edit -> Preferences -> Protocols -> MTP3) from ITU to ANSI.

Jeff Morriss said:

Created attachment 14473 Screenshot (extracted from tarball for ease of use).

Jeff Morriss said:

Created attachment 14474 Capture file (extracted from tarball for fuzz harvesting and ease of use).

closed