"RPC dissector bug" response when examining an "unknown" RPC program
Note: this worked before 4.4.0...
I am looking at a simple trace of a ClearCase operation, which involves communicating with the ClearCase albd server and another ClearCase server process on the same host. (The "credmap server" process, with RPC program number 390521)
When I have "Preferences/Protocols/RPC/Attempt to decode Unknown RPC's" enabled, I get a message in the trace reading:
[Dissector bug, protocol RPC: C:\gitlab-builds\builds\MsQ3pox2\0\wireshark\wireshark\epan\proto.c:4373: failed assertion "hfindex > 0 && (unsigned)hfindex < gpa_hfinfo.len" (Unregistered hf!)]
Any ideas? It's not critical since All I really care about is the program, version, procedure and whether it sent a good reply... But having EVERY RPC blurting that error is frustrating.
I can provide the sample trace, as I did this in a non-production environment.
Can you place it on a public file share then update the question with a link to it?
Also would help if the question includes the output of
wireshark -vor contents ofHelp->About Wireshark:Wiresharktab.Open an issue in Gitlab and post the capture file there please and it will be fixed. https://gitlab.com/wireshark/wireshar...
https://gitlab.com/wireshark/wireshar... fixes it. That should make it into the 4.4.2 release.
Opened a fresh bug just in case... The capture is attached.