Re: Extract bytes from a tvbuff_t

[ronnie sahlberg <ronniesahlberg () gmail com>]

fwrite(extracted, sizeof(extracted), 1, file)

extracted is a pointer so sizeof(extracted) is the size of pointers on
your platform.   Often 4 on 32-bit platforms and 8 on 64-bit.

You need something like this :
fwrite(extracted, tvb_get_length(tvb, 0), 1, file)

On Sat, May 25, 2013 at 1:42 PM, Rion Carter <rion () rubion com> wrote:
> Hi,
>
> I'm trying to extract raw bytes from a tvbuff_t and am not having much luck.
> As a simple test I have code which tries to extract the bytes and write it
> to a file. When I compile and run I get an output file with only 4 bytes in
> it when I know there is more (extracting certificates).
>
> Here is what I've got. Any help is appreciated:
>
> guint8* extracted = (guint8*)ep_tvb_memdup(tvb, 0, -1);
> fwrite(extracted, size of extracted), 1, file);
>
> It's been awhile since I used c file io, and I'm pretty new to Wireshark
> dev. I may be missing obvious or going about this in the wrong fashion.
>
> Rion
>
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>              mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe