Wireshark mailing list archives

Re: Familiar with gtk/sctp_graph_dlg.c?


From: Guy Harris <guy () alum mit edu>
Date: Tue, 26 Apr 2011 10:03:02 -0700


On Apr 26, 2011, at 1:12 AM, Michael Tüxen wrote:

The fields in the packet are 4 byte aligned. But if the whole structure might not...
So should we copy them?

...or fetch them with pntohl().

Where are the contents of the structure coming from?  If they're coming from the raw packet data - i.e., if the pointer 
in question is pointing into the raw packet data from the tvbuff handed to the SCTP dissector - then not only might the 
data not be aligned on a 4-byte boundary, it might not even contain all the data you're looking at if the packet was 
cut short by a snapshot length.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: