From ad7caed698ff554f760e0fce994c386be5b18653 Mon Sep 17 00:00:00 2001 From: Michael Mann Date: Fri, 23 Dec 2016 22:24:05 -0500 Subject: [TRANSUM] smb2.msg_id is now a FT_UINT64. Per bug 12915, SMB2 message ID should be treated as a unsigned 64bit value. Have transum logic match that as it was assuming SMB2 message ID was a signed 64bit value Change-Id: Ide0c12b505d1eef2aeb89d165a3ea59058e6be34 Reviewed-on: https://code.wireshark.org/review/19407 Reviewed-by: Michael Mann --- plugins/transum/decoders.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'plugins/transum') diff --git a/plugins/transum/decoders.c b/plugins/transum/decoders.c index fc535e8f05..0e55fbcc49 100644 --- a/plugins/transum/decoders.c +++ b/plugins/transum/decoders.c @@ -179,7 +179,7 @@ int decode_smb(packet_info *pinfo _U_, proto_tree *tree) sub_packet[0].rrpd.calculation = RTE_CALC_SMB2; sub_packet[0].pkt_of_interest = TRUE; - extract_si64(tree, hf_of_interest.smb2_msg_id, msg_id, &msg_id_count); + extract_ui64(tree, hf_of_interest.smb2_msg_id, msg_id, &msg_id_count); if (msg_id_count) /* test for header information */ { extract_ui64(tree, hf_of_interest.smb2_ses_id, ses_id, &ses_id_count); -- cgit v1.2.1