PageRenderTime 66ms CodeModel.GetById 15ms RepoModel.GetById 0ms app.codeStats 0ms

/epan/dissectors/packet-ieee802154.c

https://github.com/labx-technologies-llc/wireshark
C | 2806 lines | 1635 code | 326 blank | 845 comment | 300 complexity | d478e8a8a02678e6e8f8e4e714a3f0ec MD5 | raw file
Possible License(s): GPL-2.0, BSD-3-Clause 
    

  1. /* packet-ieee802154.c
    2. 

  2.  *
    3. 

  3.  * $Id$
    4. 

  4.  *
    5. 

  5.  * Auxiliary Security Header support and
    6. 

  6.  * option to force TI CC24xx FCS format
    7. 

  7.  * By Jean-Francois Wauthy <jfw@info.fundp.ac.be>
    8. 

  8.  * Copyright 2009 The University of Namur, Belgium
    9. 

  9.  *
    10. 

  10.  * IEEE 802.15.4 Dissectors for Wireshark
    11. 

  11.  * By Owen Kirby <osk@exegin.com>
    12. 

  12.  * Copyright 2007 Exegin Technologies Limited
    13. 

  13.  *
    14. 

  14.  * Wireshark - Network traffic analyzer
    15. 

  15.  * By Gerald Combs <gerald@wireshark.org>
    16. 

  16.  * Copyright 1998 Gerald Combs
    17. 

  17.  *
    18. 

  18.  * This program is free software; you can redistribute it and/or
    19. 

  19.  * modify it under the terms of the GNU General Public License
    20. 

  20.  * as published by the Free Software Foundation; either version 2
    21. 

  21.  * of the License, or (at your option) any later version.
    22. 

  22.  *
    23. 

  23.  * This program is distributed in the hope that it will be useful,
    24. 

  24.  * but WITHOUT ANY WARRANTY; without even the implied warranty of
    25. 

  25.  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    26. 

  26.  * GNU General Public License for more details.
    27. 

  27.  *
    28. 

  28.  * You should have received a copy of the GNU General Public License
    29. 

  29.  * along with this program; if not, write to the Free Software
    30. 

  30.  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
    31. 

  31.  *------------------------------------------------------------
    32. 

  32.  *
    33. 

  33.  *  In IEEE 802.15.4 packets, all fields are little endian. And
    34. 

  34.  *  Each byte is transmitted least significant bit first (reflected
    35. 

  35.  *  bit ordering).
    36. 

  36.  *------------------------------------------------------------
    37. 

  37.  *
    38. 

  38.  *  IEEE 802.15.4 Packets have the following format:
    39. 

  39.  *  |  FCF  |Seq No|  Addressing |         Data          |  FCS  |
    40. 

  40.  *  |2 bytes|1 byte|0 to 20 bytes|Length-(Overhead) bytes|2 Bytes|
    41. 

  41.  *------------------------------------------------------------
    42. 

  42.  *
    43. 

  43.  *  CRC16 is calculated using the x^16 + x^12 + x^5 + 1 polynomial
    44. 

  44.  *  as specified by ITU-T, and is calculated over the IEEE 802.15.4
    45. 

  45.  *  packet (excluding the FCS) as transmitted over the air. Note,
    46. 

  46.  *  that because the least significan bits are transmitted first, this
    47. 

  47.  *  will require reversing the bit-order in each byte. Also, unlike
    48. 

  48.  *  most CRC algorithms, IEEE 802.15.4 uses an initial and final value
    49. 

  49.  *  of 0x0000, instead of 0xffff (which is used by the CCITT).
    50. 

  50.  *------------------------------------------------------------
    51. 

  51.  *
    52. 

  52.  *  This dissector supports both link-layer IEEE 802.15.4 captures
    53. 

  53.  *  and IEEE 802.15.4 packets encapsulated within other layers.
    54. 

  54.  *  Additionally, support has been provided for various formats
    55. 

  55.  *  of the frame check sequence:
    56. 

  56.  *      - IEEE 802.15.4 compliant FCS.
    57. 

  57.  *      - ChipCon/Texas Instruments CC24xx style FCS.
    58. 

  58.  *------------------------------------------------------------
    59. 

  59.  */
    60. 

  60. 

  61. /*  Include files */
    62. 

  62. #include "config.h"
    63. 

  63. 

  64. #include <string.h>
    65. 

  65. 

  66. #include <sys/stat.h>
    67. 

  67. 

  68. #include <glib.h>
    69. 

  69. 

  70. #include <epan/wmem/wmem.h>
    71. 

  71. #include <epan/packet.h>
    72. 

  72. #include <epan/crc16-tvb.h>
    73. 

  73. #include <epan/expert.h>
    74. 

  74. #include <epan/addr_resolv.h>
    75. 

  75. #include <epan/prefs.h>
    76. 

  76. #include <epan/uat.h>
    77. 

  77. #include <epan/strutil.h>
    78. 

  78. #include <epan/show_exception.h>
    79. 

  79. 

  80. /* Use libgcrypt for cipher libraries. */
    81. 

  81. #ifdef HAVE_LIBGCRYPT
    82. 

  82. #include <wsutil/wsgcrypt.h>
    83. 

  83. #endif /* HAVE_LIBGCRYPT */
    84. 

  84. 

  85. #include "packet-ieee802154.h"
    86. 

  86. #include "packet-sll.h"
    87. 

  87. 

  88. /* Dissection Options for dissect_ieee802154_common */
    89. 

  89. #define DISSECT_IEEE802154_OPTION_CC24xx    0x00000001  /* FCS field contains a TI CC24xx style FCS. */
    90. 

  90. #define DISSECT_IEEE802154_OPTION_LINUX     0x00000002  /* Addressing fields are padded DLT_IEEE802_15_4_LINUX, not implemented. */
    91. 

  91. 

  92. /* ethertype for 802.15.4 tag - encapsulating an Ethernet packet */
    93. 

  93. static unsigned int ieee802154_ethertype = 0x809A;
    94. 

  94. 

  95. /* boolean value set if the FCS field is using the TI CC24xx format */
    96. 

  96. static gboolean ieee802154_cc24xx = FALSE;
    97. 

  97. 

  98. /* boolean value set if the FCS must be ok before payload is dissected */
    99. 

  99. static gboolean ieee802154_fcs_ok = TRUE;
    100. 

  100. 

  101. /* User string with the decryption key. */
    102. 

  102. static const gchar *ieee802154_key_str = NULL;
    103. 

  103. static gboolean     ieee802154_key_valid;
    104. 

  104. static guint8       ieee802154_key[IEEE802154_CIPHER_SIZE];
    105. 

  105. static const char  *ieee802154_user    = "User";
    106. 

  106. 

  107. /*-------------------------------------
    108. 

  108.  * Address Hash Tables
    109. 

  109.  *-------------------------------------
    110. 

  110.  */
    111. 

  111. static ieee802154_map_tab_t ieee802154_map = { NULL, NULL };
    112. 

  112. 

  113. /*-------------------------------------
    114. 

  114.  * Static Address Mapping UAT
    115. 

  115.  *-------------------------------------
    116. 

  116.  */
    117. 

  117. /* UAT entry structure. */
    118. 

  118. typedef struct {
    119. 

  119.     guchar *eui64;
    120. 

  120.     guint   eui64_len;
    121. 

  121.     guint   addr16;
    122. 

  122.     guint   pan;
    123. 

  123. } static_addr_t;
    124. 

  124. 

  125. /* UAT variables */
    126. 

  126. static uat_t         *static_addr_uat  = NULL;
    127. 

  127. static static_addr_t *static_addrs     = NULL;
    128. 

  128. static guint          num_static_addrs = 0;
    129. 

  129. 

  130. /* Sanity-checks a UAT record. */
    131. 

  131. static void
    132. 

  132. addr_uat_update_cb(void *r, const char **err)
    133. 

  133. {
    134. 

  134.     static_addr_t *map = (static_addr_t *)r;
    135. 

  135.     /* Ensure a valid short address */
    136. 

  136.     if (map->addr16 >= IEEE802154_NO_ADDR16) {
    137. 

  137.         *err = "Invalid short address";
    138. 

  138.     }
    139. 

  139.     /* Ensure a valid PAN identifier. */
    140. 

  140.     if (map->pan >= IEEE802154_BCAST_PAN) {
    141. 

  141.         *err = "Invalid PAN identifier";
    142. 

  142.     }
    143. 

  143.     /* Ensure a valid EUI-64 length */
    144. 

  144.     if (map->eui64_len != sizeof(guint64)) {
    145. 

  145.         *err = "Invalid EUI-64 length";
    146. 

  146.     }
    147. 

  147. } /* ieee802154_addr_uat_update_cb */
    148. 

  148. 

  149. /* Field callbacks. */
    150. 

  150. UAT_HEX_CB_DEF(addr_uat, addr16, static_addr_t)
    151. 

  151. UAT_HEX_CB_DEF(addr_uat, pan, static_addr_t)
    152. 

  152. UAT_BUFFER_CB_DEF(addr_uat, eui64, static_addr_t, eui64, eui64_len)
    153. 

  153. 

  154. /*-------------------------------------
    155. 

  155.  * Dissector Function Prototypes
    156. 

  156.  *-------------------------------------
    157. 

  157.  */
    158. 

  158. /* Register Functions. Loads the dissector into Wireshark. */
    159. 

  159. void proto_reg_handoff_ieee802154   (void);
    160. 

  160. 

  161. /* Dissection Routines. */
    162. 

  162. static void dissect_ieee802154_nonask_phy   (tvbuff_t *, packet_info *, proto_tree *);
    163. 

  163. static void dissect_ieee802154              (tvbuff_t *, packet_info *, proto_tree *);
    164. 

  164. static void dissect_ieee802154_nofcs        (tvbuff_t *, packet_info *, proto_tree *);
    165. 

  165. static void dissect_ieee802154_cc24xx       (tvbuff_t *, packet_info *, proto_tree *);
    166. 

  166. /*static void dissect_ieee802154_linux        (tvbuff_t *, packet_info *, proto_tree *);  TODO: Implement Me. */
    167. 

  167. static void dissect_ieee802154_common       (tvbuff_t *, packet_info *, proto_tree *, guint);
    168. 

  168. 

  169. /* Sub-dissector helpers. */
    170. 

  170. static void dissect_ieee802154_fcf          (tvbuff_t *, packet_info *, proto_tree *, ieee802154_packet *, guint *);
    171. 

  171. static void dissect_ieee802154_superframe   (tvbuff_t *, packet_info *, proto_tree *, guint *);
    172. 

  172. static void dissect_ieee802154_gtsinfo      (tvbuff_t *, packet_info *, proto_tree *, guint *);
    173. 

  173. static void dissect_ieee802154_pendaddr     (tvbuff_t *, packet_info *, proto_tree *, guint *);
    174. 

  174. static void dissect_ieee802154_assoc_req    (tvbuff_t *, packet_info *, proto_tree *, ieee802154_packet *);
    175. 

  175. static void dissect_ieee802154_assoc_rsp    (tvbuff_t *, packet_info *, proto_tree *, ieee802154_packet *);
    176. 

  176. static void dissect_ieee802154_disassoc     (tvbuff_t *, packet_info *, proto_tree *, ieee802154_packet *);
    177. 

  177. static void dissect_ieee802154_realign      (tvbuff_t *, packet_info *, proto_tree *, ieee802154_packet *);
    178. 

  178. static void dissect_ieee802154_gtsreq       (tvbuff_t *, packet_info *, proto_tree *, ieee802154_packet *);
    179. 

  179. 

  180. /* Decryption helpers. */
    181. 

  181. typedef enum {
    182. 

  182.     DECRYPT_PACKET_SUCCEEDED,
    183. 

  183.     DECRYPT_NOT_ENCRYPTED,
    184. 

  184.     DECRYPT_VERSION_UNSUPPORTED,
    185. 

  185.     DECRYPT_PACKET_TOO_SMALL,
    186. 

  186.     DECRYPT_PACKET_NO_EXT_SRC_ADDR,
    187. 

  187.     DECRYPT_PACKET_NO_KEY,
    188. 

  188.     DECRYPT_PACKET_DECRYPT_FAILED,
    189. 

  189.     DECRYPT_PACKET_MIC_CHECK_FAILED
    190. 

  190. } ws_decrypt_status;
    191. 

  191. 

  192. static tvbuff_t * dissect_ieee802154_decrypt(tvbuff_t *, guint, packet_info *, ieee802154_packet *,
    193. 

  193.         ws_decrypt_status *);
    194. 

  194. static void ccm_init_block          (gchar *, gboolean, gint, guint64, ieee802154_packet *, gint);
    195. 

  195. static gboolean ccm_ctr_encrypt     (const gchar *, const gchar *, gchar *, gchar *, gint);
    196. 

  196. static gboolean ccm_cbc_mac         (const gchar *, const gchar *, const gchar *, gint, const gchar *, gint, gchar *);
    197. 

  197. 

  198. /*  Initialize Protocol and Registered fields */
    199. 

  199. static int proto_ieee802154_nonask_phy = -1;
    200. 

  200. static int hf_ieee802154_nonask_phy_preamble = -1;
    201. 

  201. static int hf_ieee802154_nonask_phy_sfd = -1;
    202. 

  202. static int hf_ieee802154_nonask_phy_length = -1;
    203. 

  203. 

  204. static int proto_ieee802154 = -1;
    205. 

  205. static int hf_ieee802154_frame_length = -1;
    206. 

  206. static int hf_ieee802154_frame_type = -1;
    207. 

  207. static int hf_ieee802154_security = -1;
    208. 

  208. static int hf_ieee802154_pending = -1;
    209. 

  209. static int hf_ieee802154_ack_request = -1;
    210. 

  210. static int hf_ieee802154_intra_pan = -1;
    211. 

  211. static int hf_ieee802154_seqno = -1;
    212. 

  212. static int hf_ieee802154_src_addr_mode = -1;
    213. 

  213. static int hf_ieee802154_dst_addr_mode = -1;
    214. 

  214. static int hf_ieee802154_version = -1;
    215. 

  215. static int hf_ieee802154_dst_panID = -1;
    216. 

  216. static int hf_ieee802154_dst16 = -1;
    217. 

  217. static int hf_ieee802154_dst64 = -1;
    218. 

  218. static int hf_ieee802154_src_panID = -1;
    219. 

  219. static int hf_ieee802154_src16 = -1;
    220. 

  220. static int hf_ieee802154_src64 = -1;
    221. 

  221. static int hf_ieee802154_src64_origin = -1;
    222. 

  222. static int hf_ieee802154_fcs = -1;
    223. 

  223. static int hf_ieee802154_rssi = -1;
    224. 

  224. static int hf_ieee802154_fcs_ok = -1;
    225. 

  225. static int hf_ieee802154_correlation = -1;
    226. 

  226. 

  227. /*  Registered fields for Command Packets */
    228. 

  228. static int hf_ieee802154_cmd_id = -1;
    229. 

  229. static int hf_ieee802154_cinfo_alt_coord = -1;
    230. 

  230. static int hf_ieee802154_cinfo_device_type = -1;
    231. 

  231. static int hf_ieee802154_cinfo_power_src = -1;
    232. 

  232. static int hf_ieee802154_cinfo_idle_rx = -1;
    233. 

  233. static int hf_ieee802154_cinfo_sec_capable = -1;
    234. 

  234. static int hf_ieee802154_cinfo_alloc_addr = -1;
    235. 

  235. static int hf_ieee802154_assoc_addr = -1;
    236. 

  236. static int hf_ieee802154_assoc_status = -1;
    237. 

  237. static int hf_ieee802154_disassoc_reason = -1;
    238. 

  238. static int hf_ieee802154_realign_pan = -1;
    239. 

  239. static int hf_ieee802154_realign_caddr = -1;
    240. 

  240. static int hf_ieee802154_realign_channel = -1;
    241. 

  241. static int hf_ieee802154_realign_addr = -1;
    242. 

  242. static int hf_ieee802154_realign_channel_page = -1;
    243. 

  243. static int hf_ieee802154_gtsreq_len = -1;
    244. 

  244. static int hf_ieee802154_gtsreq_dir = -1;
    245. 

  245. static int hf_ieee802154_gtsreq_type = -1;
    246. 

  246. 

  247. /*  Registered fields for Beacon Packets */
    248. 

  248. static int hf_ieee802154_beacon_order = -1;
    249. 

  249. static int hf_ieee802154_superframe_order = -1;
    250. 

  250. static int hf_ieee802154_cap = -1;
    251. 

  251. static int hf_ieee802154_superframe_battery_ext = -1;
    252. 

  252. static int hf_ieee802154_superframe_coord = -1;
    253. 

  253. static int hf_ieee802154_assoc_permit = -1;
    254. 

  254. static int hf_ieee802154_gts_count = -1;
    255. 

  255. static int hf_ieee802154_gts_permit = -1;
    256. 

  256. static int hf_ieee802154_gts_direction = -1;
    257. 

  257. static int hf_ieee802154_pending16 = -1;
    258. 

  258. static int hf_ieee802154_pending64 = -1;
    259. 

  259. 

  260. /*  Registered fields for Auxiliary Security Header */
    261. 

  261. static int hf_ieee802154_security_level = -1;
    262. 

  262. static int hf_ieee802154_key_id_mode = -1;
    263. 

  263. static int hf_ieee802154_aux_sec_reserved = -1;
    264. 

  264. static int hf_ieee802154_aux_sec_frame_counter = -1;
    265. 

  265. static int hf_ieee802154_aux_sec_key_source = -1;
    266. 

  266. static int hf_ieee802154_aux_sec_key_index = -1;
    267. 

  267. 

  268. /* 802.15.4-2003 security */
    269. 

  269. static int hf_ieee802154_sec_frame_counter = -1;
    270. 

  270. static int hf_ieee802154_sec_key_sequence_counter = -1;
    271. 

  271. 

  272. /*  Initialize Subtree Pointers */
    273. 

  273. static gint ett_ieee802154_nonask_phy = -1;
    274. 

  274. static gint ett_ieee802154_nonask_phy_phr = -1;
    275. 

  275. static gint ett_ieee802154 = -1;
    276. 

  276. static gint ett_ieee802154_fcf = -1;
    277. 

  277. static gint ett_ieee802154_auxiliary_security = -1;
    278. 

  278. static gint ett_ieee802154_aux_sec_control = -1;
    279. 

  279. static gint ett_ieee802154_aux_sec_key_id = -1;
    280. 

  280. static gint ett_ieee802154_fcs = -1;
    281. 

  281. static gint ett_ieee802154_cmd = -1;
    282. 

  282. static gint ett_ieee802154_superframe = -1;
    283. 

  283. static gint ett_ieee802154_gts = -1;
    284. 

  284. static gint ett_ieee802154_gts_direction = -1;
    285. 

  285. static gint ett_ieee802154_gts_descriptors = -1;
    286. 

  286. static gint ett_ieee802154_pendaddr = -1;
    287. 

  287. 

  288. /*  Dissector handles */
    289. 

  289. static dissector_handle_t       data_handle;
    290. 

  290. static heur_dissector_list_t    ieee802154_heur_subdissector_list;
    291. 

  291. 

  292. /* Name Strings */
    293. 

  293. static const value_string ieee802154_frame_types[] = {
    294. 

  294.     { IEEE802154_FCF_BEACON,    "Beacon" },
    295. 

  295.     { IEEE802154_FCF_DATA,      "Data" },
    296. 

  296.     { IEEE802154_FCF_ACK,       "Ack" },
    297. 

  297.     { IEEE802154_FCF_CMD,       "Command" },
    298. 

  298.     { 0, NULL }
    299. 

  299. };
    300. 

  300. 

  301. static const value_string ieee802154_addr_modes[] = {
    302. 

  302.     { IEEE802154_FCF_ADDR_NONE, "None" },
    303. 

  303.     { IEEE802154_FCF_ADDR_SHORT,"Short/16-bit" },
    304. 

  304.     { IEEE802154_FCF_ADDR_EXT,  "Long/64-bit" },
    305. 

  305.     { 0, NULL }
    306. 

  306. };
    307. 

  307. 

  308. static const value_string ieee802154_cmd_names[] = {
    309. 

  309.     { IEEE802154_CMD_ASRQ,      "Association Request" },
    310. 

  310.     { IEEE802154_CMD_ASRSP,     "Association Response" },
    311. 

  311.     { IEEE802154_CMD_DISAS,     "Disassociation Notification" },
    312. 

  312.     { IEEE802154_CMD_DATA_RQ,   "Data Request" },
    313. 

  313.     { IEEE802154_CMD_PANID_ERR, "PAN ID Conflict" },
    314. 

  314.     { IEEE802154_CMD_ORPH_NOTIF,"Orphan Notification" },
    315. 

  315.     { IEEE802154_CMD_BCN_RQ,    "Beacon Request" },
    316. 

  316.     { IEEE802154_CMD_COORD_REAL,"Coordinator Realignment" },
    317. 

  317.     { IEEE802154_CMD_GTS_REQ,   "GTS Request" },
    318. 

  318.     { 0, NULL }
    319. 

  319. };
    320. 

  320. 

  321. static const value_string ieee802154_sec_level_names[] = {
    322. 

  322.     { SECURITY_LEVEL_NONE,        "No Security" },
    323. 

  323.     { SECURITY_LEVEL_MIC_32,      "32-bit Message Integrity Code" },
    324. 

  324.     { SECURITY_LEVEL_MIC_64,      "64-bit Message Integrity Code" },
    325. 

  325.     { SECURITY_LEVEL_MIC_128,     "128-bit Message Integrity Code" },
    326. 

  326.     { SECURITY_LEVEL_ENC,         "Encryption" },
    327. 

  327.     { SECURITY_LEVEL_ENC_MIC_32,  "Encryption with 32-bit Message Integrity Code" },
    328. 

  328.     { SECURITY_LEVEL_ENC_MIC_64,  "Encryption with 64-bit Message Integrity Code" },
    329. 

  329.     { SECURITY_LEVEL_ENC_MIC_128, "Encryption with 128-bit Message Integrity Code" },
    330. 

  330.     { 0, NULL }
    331. 

  331. };
    332. 

  332. 

  333. static const value_string ieee802154_key_id_mode_names[] = {
    334. 

  334.     { KEY_ID_MODE_IMPLICIT,       "Implicit Key" },
    335. 

  335.     { KEY_ID_MODE_KEY_INDEX,      "Indexed Key using the Default Key Source" },
    336. 

  336.     { KEY_ID_MODE_KEY_EXPLICIT_4, "Explicit Key with 4-octet Key Source" },
    337. 

  337.     { KEY_ID_MODE_KEY_EXPLICIT_8, "Explicit Key with 8-octet Key Source" },
    338. 

  338.     { 0, NULL }
    339. 

  339. };
    340. 

  340. 

  341. static const true_false_string ieee802154_gts_direction_tfs = {
    342. 

  342.     "Receive Only",
    343. 

  343.     "Transmit Only"
    344. 

  344. };
    345. 

  345. 

  346. /* The 802.15.4-2003 security suites for the security preferences (only AES-CCM suites are supported). */
    347. 

  347. /* NOTE: The equivalent 2006 security level identifer enumerations are used to simplify 2003 & 2006 integration! */
    348. 

  348. static const enum_val_t ieee802154_2003_sec_suite_enums[] = {
    349. 

  349.     { "AES-CCM-128", "AES-128 Encryption, 128-bit Integrity Protection", SECURITY_LEVEL_ENC_MIC_128 },
    350. 

  350.     { "AES-CCM-64",  "AES-128 Encryption, 64-bit Integrity Protection",  SECURITY_LEVEL_ENC_MIC_64 },
    351. 

  351.     { "AES-CCM-32",  "AES-128 Encryption, 32-bit Integrity Protection",  SECURITY_LEVEL_ENC_MIC_32 },
    352. 

  352.     { NULL, NULL, 0 }
    353. 

  353. };
    354. 

  354. 

  355. /* Preferences for 2003 security */
    356. 

  356. static gint ieee802154_sec_suite = SECURITY_LEVEL_ENC_MIC_64;
    357. 

  357. static gboolean ieee802154_extend_auth = TRUE;
    358. 

  358. 

  359. /* Macro to check addressing, and throw a warning flag if incorrect. */
    360. 

  360. #define IEEE802154_CMD_ADDR_CHECK(_pinfo_, _item_, _cmdid_, _x_)    \
    361. 

  361.    if (!(_x_))                                                      \
    362. 

  362.      expert_add_info_format(_pinfo_, _item_, PI_MALFORMED, PI_WARN, \
    363. 

  363.                             "Invalid Addressing for %s",            \
    364. 

  364.                             val_to_str_const(_cmdid_, ieee802154_cmd_names, "Unknown Command"))
    365. 

  365. 

  366. /* CRC definitions. IEEE 802.15.4 CRCs vary from CCITT by using an initial value of
    367. 

  367.  * 0x0000, and no XOR out. IEEE802154_CRC_XOR is defined as 0xFFFF in order to un-XOR
    368. 

  368.  * the output from the CCITT CRC routines in Wireshark.
    369. 

  369.  */
    370. 

  370. #define IEEE802154_CRC_SEED     0x0000
    371. 

  371. #define IEEE802154_CRC_XOROUT   0xFFFF
    372. 

  372. #define ieee802154_crc_tvb(tvb, offset)   (crc16_ccitt_tvb_seed(tvb, offset, IEEE802154_CRC_SEED) ^ IEEE802154_CRC_XOROUT)
    373. 

  373. 

  374. 

  375. /*FUNCTION:------------------------------------------------------
    376. 

  376.  *  NAME
    377. 

  377.  *      dissect_ieee802154_fcf
    378. 

  378.  *  DESCRIPTION
    379. 

  379.  *      Dissector helper, parses and displays the frame control
    380. 

  380.  *      field.
    381. 

  381.  *
    382. 

  382.  *  PARAMETERS
    383. 

  383.  *      ieee802154_packet   *packet - Packet info structure.
    384. 

  384.  *      tvbuff_t    *tvb    - pointer to buffer containing raw packet.
    385. 

  385.  *      packet_info *pinfo  - pointer to packet information fields
    386. 

  386.  *      proto_tree  *tree   - pointer to data tree wireshark uses to display packet.
    387. 

  387.  *      ieee802154_packet *packet   - IEEE 802.15.4 packet information.
    388. 

  388.  *      guint       offset  - offset into the tvb to find the FCF.
    389. 

  389.  *  RETURNS
    390. 

  390.  *      void
    391. 

  391.  *---------------------------------------------------------------
    392. 

  392.  */
    393. 

  393. static void
    394. 

  394. dissect_ieee802154_fcf(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, ieee802154_packet *packet, guint *offset)
    395. 

  395. {
    396. 

  396.     guint16     fcf;
    397. 

  397.     proto_tree *field_tree;
    398. 

  398.     proto_item *ti;
    399. 

  399. 

  400.     /* Get the FCF field. */
    401. 

  401.     fcf = tvb_get_letohs(tvb, *offset);
    402. 

  402. 

  403.      /* Parse FCF Flags. */
    404. 

  404.     packet->frame_type      = fcf & IEEE802154_FCF_TYPE_MASK;
    405. 

  405.     packet->security_enable = fcf & IEEE802154_FCF_SEC_EN;
    406. 

  406.     packet->frame_pending   = fcf & IEEE802154_FCF_FRAME_PND;
    407. 

  407.     packet->ack_request     = fcf & IEEE802154_FCF_ACK_REQ;
    408. 

  408.     packet->intra_pan       = fcf & IEEE802154_FCF_INTRA_PAN;
    409. 

  409.     packet->version         = (fcf & IEEE802154_FCF_VERSION) >> 12;
    410. 

  410.     packet->dst_addr_mode   = (fcf & IEEE802154_FCF_DADDR_MASK) >> 10;
    411. 

  411.     packet->src_addr_mode   = (fcf & IEEE802154_FCF_SADDR_MASK) >> 14;
    412. 

  412. 

  413.     /* Display the frame type. */
    414. 

  414.     proto_item_append_text(tree, " %s", val_to_str_const(packet->frame_type, ieee802154_frame_types, "Reserved"));
    415. 

  415.     col_set_str(pinfo->cinfo, COL_INFO, val_to_str_const(packet->frame_type, ieee802154_frame_types, "Reserved"));
    416. 

  416. 

  417.     /* Add the FCF to the protocol tree. */
    418. 

  418.     if (tree) {
    419. 

  419.         /*  Create the FCF subtree. */
    420. 

  420.         ti = proto_tree_add_text(tree, tvb, *offset, 2, "Frame Control Field: %s (0x%04x)",
    421. 

  421.                 val_to_str_const(packet->frame_type, ieee802154_frame_types, "Unknown"), fcf);
    422. 

  422.         field_tree = proto_item_add_subtree(ti, ett_ieee802154_fcf);
    423. 

  423. 

  424.         /* FCF Fields. */
    425. 

  425.         proto_tree_add_uint(field_tree, hf_ieee802154_frame_type, tvb, *offset, 1, fcf & IEEE802154_FCF_TYPE_MASK);
    426. 

  426.         proto_tree_add_boolean(field_tree, hf_ieee802154_security, tvb, *offset, 1, fcf & IEEE802154_FCF_SEC_EN);
    427. 

  427.         proto_tree_add_boolean(field_tree, hf_ieee802154_pending, tvb, *offset, 1, fcf & IEEE802154_FCF_FRAME_PND);
    428. 

  428.         proto_tree_add_boolean(field_tree, hf_ieee802154_ack_request, tvb, *offset, 1, fcf & IEEE802154_FCF_ACK_REQ);
    429. 

  429.         proto_tree_add_boolean(field_tree, hf_ieee802154_intra_pan, tvb, *offset, 1, fcf & IEEE802154_FCF_INTRA_PAN);
    430. 

  430.         proto_tree_add_uint(field_tree, hf_ieee802154_dst_addr_mode, tvb, (*offset)+1, 1, fcf & IEEE802154_FCF_DADDR_MASK);
    431. 

  431.         proto_tree_add_uint(field_tree, hf_ieee802154_version, tvb, (*offset)+1, 1, fcf & IEEE802154_FCF_VERSION);
    432. 

  432.         proto_tree_add_uint(field_tree, hf_ieee802154_src_addr_mode, tvb, (*offset)+1, 1, fcf & IEEE802154_FCF_SADDR_MASK);
    433. 

  433.     }
    434. 

  434. 

  435.     *offset += 2;
    436. 

  436. } /* dissect_ieee802154_fcf */
    437. 

  437. 

  438. /*FUNCTION:------------------------------------------------------
    439. 

  439.  *  NAME
    440. 

  440.  *      dissect_ieee802154_nonask_phy
    441. 

  441.  *  DESCRIPTION
    442. 

  442.  *      Dissector for IEEE 802.15.4 non-ASK PHY packet with an FCS containing
    443. 

  443.  *      a 16-bit CRC value.
    444. 

  444.  *
    445. 

  445.  *  PARAMETERS
    446. 

  446.  *      tvbuff_t *tvb       - pointer to buffer containing raw packet.
    447. 

  447.  *      packet_info *pinfo  - pointer to packet information fields
    448. 

  448.  *      proto_tree *tree    - pointer to data tree wireshark uses to display packet.
    449. 

  449.  *  RETURNS
    450. 

  450.  *      void
    451. 

  451.  *---------------------------------------------------------------
    452. 

  452.  */
    453. 

  453. static void
    454. 

  454. dissect_ieee802154_nonask_phy(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree)
    455. 

  455. {
    456. 

  456.     proto_tree *ieee802154_tree = NULL;
    457. 

  457.     proto_item *proto_root      = NULL;
    458. 

  458. 

  459.     guint       offset          = 0;
    460. 

  460.     guint32     preamble;
    461. 

  461.     guint8      sfd,phr;
    462. 

  462.     tvbuff_t*   mac;
    463. 

  463. 

  464.     /* Create the protocol tree. */
    465. 

  465.     if (tree) {
    466. 

  466.         proto_root = proto_tree_add_protocol_format(tree, proto_ieee802154_nonask_phy, tvb, 0, tvb_length(tvb), "IEEE 802.15.4 non-ASK PHY");
    467. 

  467.         ieee802154_tree = proto_item_add_subtree(proto_root, ett_ieee802154_nonask_phy);
    468. 

  468.     }
    469. 

  469. 

  470.     /* Add the protocol name. */
    471. 

  471.     col_set_str(pinfo->cinfo, COL_PROTOCOL, "IEEE 802.15.4 non-ASK PHY");
    472. 

  472.     /* Add the packet length. */
    473. 

  473.     col_clear(pinfo->cinfo, COL_PACKET_LENGTH);
    474. 

  474.     col_add_fstr(pinfo->cinfo, COL_PACKET_LENGTH, "%i", tvb_length(tvb));
    475. 

  475. 

  476.     preamble=tvb_get_letohl(tvb,offset);
    477. 

  477.     sfd=tvb_get_guint8(tvb,offset+4);
    478. 

  478.     phr=tvb_get_guint8(tvb,offset+4+1);
    479. 

  479. 

  480.     if(tree) {
    481. 

  481.         proto_tree *phr_tree;
    482. 

  482.         proto_item *pi;
    483. 

  483.         guint loffset=offset;
    484. 

  484. 

  485.         proto_tree_add_uint(ieee802154_tree, hf_ieee802154_nonask_phy_preamble, tvb, loffset, 4, preamble);
    486. 

  486.         loffset+=4;
    487. 

  487.         proto_tree_add_uint(ieee802154_tree, hf_ieee802154_nonask_phy_sfd, tvb, loffset, 1, sfd);
    488. 

  488.         loffset+=1;
    489. 

  489. 

  490.         pi = proto_tree_add_text(ieee802154_tree, tvb, loffset, 1, "PHR: 0x%02x", phr);
    491. 

  491.         phr_tree = proto_item_add_subtree(pi, ett_ieee802154_nonask_phy_phr);
    492. 

  492. 

  493.         proto_tree_add_uint(phr_tree, hf_ieee802154_nonask_phy_length, tvb, loffset, 1, phr);
    494. 

  494.     }
    495. 

  495. 

  496.     offset+=4+2*1;
    497. 

  497.     mac=tvb_new_subset(tvb,offset,-1, phr & IEEE802154_PHY_LENGTH_MASK);
    498. 

  498. 

  499.     /* Call the common dissector. */
    500. 

  500.     dissect_ieee802154(mac, pinfo, ieee802154_tree);
    501. 

  501. } /* dissect_ieee802154_nonask_phy */
    502. 

  502. 

  503. /*FUNCTION:------------------------------------------------------
    504. 

  504.  *  NAME
    505. 

  505.  *      dissect_ieee802154
    506. 

  506.  *  DESCRIPTION
    507. 

  507.  *      Dissector for IEEE 802.15.4 packet with an FCS containing
    508. 

  508.  *      a 16-bit CRC value.
    509. 

  509.  *
    510. 

  510.  *  PARAMETERS
    511. 

  511.  *      tvbuff_t *tvb       - pointer to buffer containing raw packet.
    512. 

  512.  *      packet_info *pinfo  - pointer to packet information fields
    513. 

  513.  *      proto_tree *tree    - pointer to data tree wireshark uses to display packet.
    514. 

  514.  *  RETURNS
    515. 

  515.  *      void
    516. 

  516.  *---------------------------------------------------------------
    517. 

  517.  */
    518. 

  518. static void
    519. 

  519. dissect_ieee802154(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree)
    520. 

  520. {
    521. 

  521.     /* Call the common dissector. */
    522. 

  522.     dissect_ieee802154_common(tvb, pinfo, tree, (ieee802154_cc24xx ? DISSECT_IEEE802154_OPTION_CC24xx : 0));
    523. 

  523. } /* dissect_ieee802154 */
    524. 

  524. 

  525. /*FUNCTION:------------------------------------------------------
    526. 

  526.  *  NAME
    527. 

  527.  *      dissect_ieee802154_nofcs
    528. 

  528.  *  DESCRIPTION
    529. 

  529.  *      Dissector for IEEE 802.15.4 packet with no FCS present.
    530. 

  530.  *
    531. 

  531.  *  PARAMETERS
    532. 

  532.  *      tvbuff_t *tvb       - pointer to buffer containing raw packet.
    533. 

  533.  *      packet_info *pinfo  - pointer to packet information fields
    534. 

  534.  *      proto_tree *tree    - pointer to data tree wireshark uses to display packet.
    535. 

  535.  *  RETURNS
    536. 

  536.  *      void
    537. 

  537.  *---------------------------------------------------------------
    538. 

  538.  */
    539. 

  539. static void
    540. 

  540. dissect_ieee802154_nofcs(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree)
    541. 

  541. {
    542. 

  542.     tvbuff_t    *new_tvb;
    543. 

  543.     /* If there is no FCS present in the reported packet, then the length of
    544. 

  544.      * the true IEEE 802.15.4 packet is actually 2 bytes longer. Re-create
    545. 

  545.      * the buffer with an extended reported length so that the packet will
    546. 

  546.      * be handled as though the FCS were truncated.
    547. 

  547.      *
    548. 

  548.      * Note, we can't just call tvb_set_reported_length(), because it includes
    549. 

  549.      * checks to ensure that the new reported length is not longer than the old
    550. 

  550.      * reported length (why?), and will throw an exception.
    551. 

  551.      */
    552. 

  552.     new_tvb = tvb_new_subset(tvb, 0, -1, tvb_reported_length(tvb)+IEEE802154_FCS_LEN);
    553. 

  553.     /* Call the common dissector. */
    554. 

  554.     dissect_ieee802154_common(new_tvb, pinfo, tree, 0);
    555. 

  555. } /* dissect_ieee802154_nofcs */
    556. 

  556. 

  557. /*FUNCTION:------------------------------------------------------
    558. 

  558.  *  NAME
    559. 

  559.  *      dissect_ieee802154_cc24xx
    560. 

  560.  *  DESCRIPTION
    561. 

  561.  *      Dissector for IEEE 802.15.4 packet with a ChipCon/Texas
    562. 

  562.  *      Instruments compatible FCS. This is typically called by
    563. 

  563.  *      layers encapsulating an IEEE 802.15.4 packet.
    564. 

  564.  *
    565. 

  565.  *  PARAMETERS
    566. 

  566.  *      tvbuff_t *tvb       - pointer to buffer containing raw packet.
    567. 

  567.  *      packet_info *pinfo  - pointer to packet information fields
    568. 

  568.  *      proto_tree *tree    - pointer to data tree wireshark uses to display packet.
    569. 

  569.  *  RETURNS
    570. 

  570.  *      void
    571. 

  571.  *---------------------------------------------------------------
    572. 

  572.  */
    573. 

  573. static void
    574. 

  574. dissect_ieee802154_cc24xx(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree)
    575. 

  575. {
    576. 

  576.     /* Call the common dissector. */
    577. 

  577.     dissect_ieee802154_common(tvb, pinfo, tree, DISSECT_IEEE802154_OPTION_CC24xx);
    578. 

  578. } /* dissect_ieee802154_cc24xx */
    579. 

  579. 

  580. /*FUNCTION:------------------------------------------------------
    581. 

  581.  *  NAME
    582. 

  582.  *      dissect_ieee802154_common
    583. 

  583.  *  DESCRIPTION
    584. 

  584.  *      IEEE 802.15.4 packet dissection routine for Wireshark.
    585. 

  585.  *      This function extracts all the information first before displaying.
    586. 

  586.  *      If payload exists, that portion will be passed into another dissector
    587. 

  587.  *      for further processing.
    588. 

  588.  *
    589. 

  589.  *      This is called after the individual dissect_ieee802154* functions
    590. 

  590.  *      have been called to determine what sort of FCS is present.
    591. 

  591.  *      The dissect_ieee802154* functions will set the parameters
    592. 

  592.  *      in the ieee802154_packet structure, and pass it to this one
    593. 

  593.  *      through the pinfo->private_data pointer.
    594. 

  594.  *
    595. 

  595.  *  PARAMETERS
    596. 

  596.  *      tvbuff_t *tvb       - pointer to buffer containing raw packet.
    597. 

  597.  *      packet_info *pinfo  - pointer to packet information fields
    598. 

  598.  *      proto_tree *tree    - pointer to data tree wireshark uses to display packet.
    599. 

  599.  *      guint options       - bitwise or of dissector options (see DISSECT_IEEE802154_OPTION_xxx).
    600. 

  600.  *  RETURNS
    601. 

  601.  *      void
    602. 

  602.  *---------------------------------------------------------------
    603. 

  603.  */
    604. 

  604. static void
    605. 

  605. dissect_ieee802154_common(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, guint options)
    606. 

  606. {
    607. 

  607.     tvbuff_t                *volatile payload_tvb;
    608. 

  608.     proto_tree              *volatile ieee802154_tree = NULL;
    609. 

  609.     proto_item              *volatile proto_root = NULL;
    610. 

  610.     proto_item              *hidden_item;
    611. 

  611.     proto_item              *ti;
    612. 

  612.     void                    *pd_save;
    613. 

  613. 

  614.     guint                   offset = 0;
    615. 

  615.     volatile gboolean       fcs_ok = TRUE;
    616. 

  616.     const char              *saved_proto;
    617. 

  617.     ws_decrypt_status       status;
    618. 

  618. 

  619.     ieee802154_packet      *packet = wmem_new(wmem_packet_scope(), ieee802154_packet);
    620. 

  620.     ieee802154_short_addr   addr16;
    621. 

  621.     ieee802154_hints_t     *ieee_hints;
    622. 

  622. 

  623.     /* Link our packet info structure into the private data field for the
    624. 

  624.      * Network-Layer heuristic subdissectors. */
    625. 

  625.     pd_save = pinfo->private_data;
    626. 

  626.     pinfo->private_data = packet;
    627. 

  627. 

  628.     packet->short_table = ieee802154_map.short_table;
    629. 

  629. 

  630.     /* Allocate frame data with hints for upper layers */
    631. 

  631.     if(!pinfo->fd->flags.visited){
    632. 

  632.         ieee_hints = se_new0(ieee802154_hints_t);
    633. 

  633.         p_add_proto_data(pinfo->fd, proto_ieee802154, 0, ieee_hints);
    634. 

  634.     } else {
    635. 

  635.         ieee_hints = (ieee802154_hints_t *)p_get_proto_data(pinfo->fd, proto_ieee802154, 0);
    636. 

  636.     }
    637. 

  637. 

  638.     /* Create the protocol tree. */
    639. 

  639.     if (tree) {
    640. 

  640.         proto_root = proto_tree_add_protocol_format(tree, proto_ieee802154, tvb, 0, tvb_length(tvb), "IEEE 802.15.4");
    641. 

  641.         ieee802154_tree = proto_item_add_subtree(proto_root, ett_ieee802154);
    642. 

  642.     }
    643. 

  643.     /* Add the protocol name. */
    644. 

  644.     col_set_str(pinfo->cinfo, COL_PROTOCOL, "IEEE 802.15.4");
    645. 

  645.     /* Add the packet length. */
    646. 

  646.     col_clear(pinfo->cinfo, COL_PACKET_LENGTH);
    647. 

  647.     col_add_fstr(pinfo->cinfo, COL_PACKET_LENGTH, "%i", tvb_length(tvb));
    648. 

  648. 

  649.     /* Add the packet length to the filter field */
    650. 

  650.     hidden_item = proto_tree_add_uint(ieee802154_tree, hf_ieee802154_frame_length, NULL, 0, 0, tvb_reported_length(tvb));
    651. 

  651.     PROTO_ITEM_SET_HIDDEN(hidden_item);
    652. 

  652. 

  653.     /*=====================================================
    654. 

  654.      * FRAME CONTROL FIELD
    655. 

  655.      *=====================================================
    656. 

  656.      */
    657. 

  657.     dissect_ieee802154_fcf(tvb, pinfo, ieee802154_tree, packet, &offset);
    658. 

  658. 

  659.     /*=====================================================
    660. 

  660.      * SEQUENCE NUMBER
    661. 

  661.      *=====================================================
    662. 

  662.      */
    663. 

  663.     packet->seqno = tvb_get_guint8(tvb, offset);
    664. 

  664.     if (tree) {
    665. 

  665.         proto_tree_add_uint(ieee802154_tree, hf_ieee802154_seqno, tvb, offset, 1, packet->seqno);
    666. 

  666.         /* For Ack packets display this in the root. */
    667. 

  667.         if (packet->frame_type == IEEE802154_FCF_ACK) {
    668. 

  668.             proto_item_append_text(proto_root, ", Sequence Number: %u", packet->seqno);
    669. 

  669.         }
    670. 

  670.     }
    671. 

  671.     offset += 1;
    672. 

  672. 

  673.     /*=====================================================
    674. 

  674.      * ADDRESSING FIELDS
    675. 

  675.      *=====================================================
    676. 

  676.      */
    677. 

  677.     /* Clear out the addressing strings. */
    678. 

  678.     SET_ADDRESS(&pinfo->dst, AT_NONE, 0, NULL);
    679. 

  679.     SET_ADDRESS(&pinfo->src, AT_NONE, 0, NULL);
    680. 

  680.     SET_ADDRESS(&pinfo->dl_dst, AT_NONE, 0, NULL);
    681. 

  681.     SET_ADDRESS(&pinfo->dl_src, AT_NONE, 0, NULL);
    682. 

  682.     SET_ADDRESS(&pinfo->net_dst, AT_NONE, 0, NULL);
    683. 

  683.     SET_ADDRESS(&pinfo->net_src, AT_NONE, 0, NULL);
    684. 

  684. 

  685.     /* Get and display the destination PAN, if present. */
    686. 

  686.     if ( (packet->dst_addr_mode == IEEE802154_FCF_ADDR_SHORT) ||
    687. 

  687.          (packet->dst_addr_mode == IEEE802154_FCF_ADDR_EXT) ) {
    688. 

  688.         packet->dst_pan = tvb_get_letohs(tvb, offset);
    689. 

  689.         if (tree) {
    690. 

  690.             proto_tree_add_uint(ieee802154_tree, hf_ieee802154_dst_panID, tvb, offset, 2, packet->dst_pan);
    691. 

  691.         }
    692. 

  692.         offset += 2;
    693. 

  693.     }
    694. 

  694. 

  695.     /* Get destination address. */
    696. 

  696.     if (packet->dst_addr_mode == IEEE802154_FCF_ADDR_SHORT) {
    697. 

  697.         char dst_addr[32];
    698. 

  698. 

  699.         /* Get the address. */
    700. 

  700.         packet->dst16 = tvb_get_letohs(tvb, offset);
    701. 

  701. 

  702.         /* Display the destination address. */
    703. 

  703.         if ( packet->dst16 == IEEE802154_BCAST_ADDR ) {
    704. 

  704.             g_snprintf(dst_addr, 32, "Broadcast");
    705. 

  705.         }
    706. 

  706.         else {
    707. 

  707.             g_snprintf(dst_addr, 32, "0x%04x", packet->dst16);
    708. 

  708.         }
    709. 

  709.         /* Provide address hints to higher layers that need it. */
    710. 

  710.         if (ieee_hints) {
    711. 

  711.             ieee_hints->dst16 = packet->dst16;
    712. 

  712.         }
    713. 

  713. 

  714.         TVB_SET_ADDRESS(&pinfo->dl_dst, AT_IEEE_802_15_4_SHORT, tvb, offset, 2);
    715. 

  715.         TVB_SET_ADDRESS(&pinfo->dst, AT_IEEE_802_15_4_SHORT, tvb, offset, 2);
    716. 

  716. 

  717.         if (tree) {
    718. 

  718.             proto_tree_add_uint(ieee802154_tree, hf_ieee802154_dst16, tvb, offset, 2, packet->dst16);
    719. 

  719.             proto_item_append_text(proto_root, ", Dst: %s", dst_addr);
    720. 

  720.         }
    721. 

  721. 

  722.         col_append_fstr(pinfo->cinfo, COL_INFO, ", Dst: %s", dst_addr);
    723. 

  723.         offset += 2;
    724. 

  724.     }
    725. 

  725.     else if (packet->dst_addr_mode == IEEE802154_FCF_ADDR_EXT) {
    726. 

  726.         static guint64 addr; /* has to be static due to SET_ADDRESS */
    727. 

  727. 

  728.         /* Get the address */
    729. 

  729.         packet->dst64 = tvb_get_letoh64(tvb, offset);
    730. 

  730. 

  731.         /* Copy and convert the address to network byte order. */
    732. 

  732.         addr = pntoh64(&(packet->dst64));
    733. 

  733. 

  734.         /* Display the destination address. */
    735. 

  735.         /* XXX - OUI resolution doesn't happen when displaying resolved
    736. 

  736.          * EUI64 addresses; that should probably be fixed in
    737. 

  737.          * epan/addr_resolv.c.
    738. 

  738.          */
    739. 

  739.         SET_ADDRESS(&pinfo->dl_dst, AT_EUI64, 8, &addr);
    740. 

  740.         SET_ADDRESS(&pinfo->dst, AT_EUI64, 8, &addr);
    741. 

  741.         if (tree) {
    742. 

  742.             proto_tree_add_item(ieee802154_tree, hf_ieee802154_dst64, tvb, offset, 8, ENC_LITTLE_ENDIAN);
    743. 

  743.             proto_item_append_text(proto_root, ", Dst: %s", get_eui64_name(packet->dst64));
    744. 

  744.         }
    745. 

  745.         col_append_fstr(pinfo->cinfo, COL_INFO, ", Dst: %s", get_eui64_name(packet->dst64));
    746. 

  746.         offset += 8;
    747. 

  747.     }
    748. 

  748.     else if (packet->dst_addr_mode != IEEE802154_FCF_ADDR_NONE) {
    749. 

  749.         /* Invalid Destination Address Mode. Abort Dissection. */
    750. 

  750.         expert_add_info_format(pinfo, proto_root, PI_MALFORMED, PI_ERROR, "Invalid Destination Address Mode");
    751. 

  751.         pinfo->private_data = pd_save;
    752. 

  752.         return;
    753. 

  753.     }
    754. 

  754. 

  755.     /* Get the source PAN if it exists. The source address will be present if:
    756. 

  756.      *  - The Source addressing exists and
    757. 

  757.      *  - The Destination addressing doesn't exist, or the Intra-PAN bit is unset.
    758. 

  758.      */
    759. 

  759.     if ( ((packet->src_addr_mode == IEEE802154_FCF_ADDR_SHORT) || (packet->src_addr_mode == IEEE802154_FCF_ADDR_EXT)) &&
    760. 

  760.          ((packet->dst_addr_mode == IEEE802154_FCF_ADDR_NONE) || (!packet->intra_pan)) ) {
    761. 

  761.         /* Source PAN is present, extract it and add it to the tree. */
    762. 

  762.         packet->src_pan = tvb_get_letohs(tvb, offset);
    763. 

  763.         if (tree) {
    764. 

  764.             proto_tree_add_uint(ieee802154_tree, hf_ieee802154_src_panID, tvb, offset, 2, packet->src_pan);
    765. 

  765.         }
    766. 

  766.         offset += 2;
    767. 

  767.     }
    768. 

  768.     else {
    769. 

  769.         /* Set the panID field in case the intra-pan condition was met. */
    770. 

  770.         packet->src_pan = packet->dst_pan;
    771. 

  771.     }
    772. 

  772. 

  773.     if (ieee_hints) {
    774. 

  774.         ieee_hints->src_pan = packet->src_pan;
    775. 

  775.     }
    776. 

  776. 

  777.     /* Get short source address if present. */
    778. 

  778.     if (packet->src_addr_mode == IEEE802154_FCF_ADDR_SHORT) {
    779. 

  779.         char src_addr[32];
    780. 

  780. 

  781.         /* Get the address. */
    782. 

  782.         packet->src16 = tvb_get_letohs(tvb, offset);
    783. 

  783. 

  784.         /* Update the Address fields. */
    785. 

  785.         if (packet->src16==IEEE802154_BCAST_ADDR) {
    786. 

  786.             g_snprintf(src_addr, 32, "Broadcast");
    787. 

  787.         }
    788. 

  788.         else {
    789. 

  789.             g_snprintf(src_addr, 32, "0x%04x", packet->src16);
    790. 

  790. 

  791.             if (!pinfo->fd->flags.visited) {
    792. 

  792.                 /* If we know our extended source address from previous packets,
    793. 

  793.                  * provide a pointer to it in a hint for upper layers */
    794. 

  794.                 addr16.addr = packet->src16;
    795. 

  795.                 addr16.pan = packet->src_pan;
    796. 

  796. 

  797.                 if (ieee_hints) {
    798. 

  798.                     ieee_hints->src16 = packet->src16;
    799. 

  799.                     ieee_hints->map_rec = (ieee802154_map_rec *)
    800. 

  800.                         g_hash_table_lookup(ieee802154_map.short_table, &addr16);
    801. 

  801.                 }
    802. 

  802.             }
    803. 

  803.         }
    804. 

  804. 

  805.         TVB_SET_ADDRESS(&pinfo->dl_src, AT_IEEE_802_15_4_SHORT, tvb, offset, 2);
    806. 

  806.         TVB_SET_ADDRESS(&pinfo->src, AT_IEEE_802_15_4_SHORT, tvb, offset, 2);
    807. 

  807. 

  808.         /* Add the addressing info to the tree. */
    809. 

  809.         if (tree) {
    810. 

  810.             proto_tree_add_uint(ieee802154_tree, hf_ieee802154_src16, tvb, offset, 2, packet->src16);
    811. 

  811.             proto_item_append_text(proto_root, ", Src: %s", src_addr);
    812. 

  812. 

  813.             if (ieee_hints && ieee_hints->map_rec) {
    814. 

  814.                 /* Display inferred source address info */
    815. 

  815.                 ti = proto_tree_add_eui64(ieee802154_tree, hf_ieee802154_src64, tvb, offset, 0,
    816. 

  816.                         ieee_hints->map_rec->addr64);
    817. 

  817.                 PROTO_ITEM_SET_GENERATED(ti);
    818. 

  818. 

  819.                 if ( ieee_hints->map_rec->start_fnum ) {
    820. 

  820.                     ti = proto_tree_add_uint(ieee802154_tree, hf_ieee802154_src64_origin, tvb, 0, 0,
    821. 

  821.                         ieee_hints->map_rec->start_fnum);
    822. 

  822.                 }
    823. 

  823.                 else {
    824. 

  824.                     ti = proto_tree_add_text(ieee802154_tree, tvb, 0, 0, "Origin: Pre-configured");
    825. 

  825.                 }
    826. 

  826.                 PROTO_ITEM_SET_GENERATED(ti);
    827. 

  827.             }
    828. 

  828.         }
    829. 

  829. 

  830.         col_append_fstr(pinfo->cinfo, COL_INFO, ", Src: %s", src_addr);
    831. 

  831. 

  832.         offset += 2;
    833. 

  833.     }
    834. 

  834.     else if (packet->src_addr_mode == IEEE802154_FCF_ADDR_EXT) {
    835. 

  835.         static guint64 addr; /* has to be static due to SET_ADDRESS */
    836. 

  836. 

  837.         /* Get the address. */
    838. 

  838.         packet->src64 = tvb_get_letoh64(tvb, offset);
    839. 

  839. 

  840.         /* Copy and convert the address to network byte order. */
    841. 

  841.         addr = pntoh64(&(packet->src64));
    842. 

  842. 

  843.         /* Display the source address. */
    844. 

  844.         /* XXX - OUI resolution doesn't happen when displaying resolved
    845. 

  845.          * EUI64 addresses; that should probably be fixed in
    846. 

  846.          * epan/addr_resolv.c.
    847. 

  847.          */
    848. 

  848.         SET_ADDRESS(&pinfo->dl_src, AT_EUI64, 8, &addr);
    849. 

  849.         SET_ADDRESS(&pinfo->src, AT_EUI64, 8, &addr);
    850. 

  850.         if (tree) {
    851. 

  851.             proto_tree_add_item(ieee802154_tree, hf_ieee802154_src64, tvb, offset, 8, ENC_LITTLE_ENDIAN);
    852. 

  852.             proto_item_append_text(proto_root, ", Src: %s", get_eui64_name(packet->src64));
    853. 

  853.         }
    854. 

  854. 

  855.         col_append_fstr(pinfo->cinfo, COL_INFO, ", Src: %s", get_eui64_name(packet->src64));
    856. 

  856.         offset += 8;
    857. 

  857.     }
    858. 

  858.     else if (packet->src_addr_mode != IEEE802154_FCF_ADDR_NONE) {
    859. 

  859.         /* Invalid Destination Address Mode. Abort Dissection. */
    860. 

  860.         expert_add_info_format(pinfo, proto_root, PI_MALFORMED, PI_ERROR, "Invalid Source Address Mode");
    861. 

  861.         pinfo->private_data = pd_save;
    862. 

  862.         return;
    863. 

  863.     }
    864. 

  864. 

  865.     /*=====================================================
    866. 

  866.      * VERIFY FRAME CHECK SEQUENCE
    867. 

  867.      *=====================================================
    868. 

  868.      */
    869. 

  869.     /* Check, but don't display the FCS yet, otherwise the payload dissection
    870. 

  870.      * may be out of place in the tree. But we want to know if the FCS is OK in
    871. 

  871.      * case the CRC is bad (don't want to continue dissection to the NWK layer).
    872. 

  872.      */
    873. 

  873.     if (tvb_bytes_exist(tvb, tvb_reported_length(tvb)-IEEE802154_FCS_LEN, IEEE802154_FCS_LEN)) {
    874. 

  874.         /* The FCS is in the last two bytes of the packet. */
    875. 

  875.         guint16     fcs = tvb_get_letohs(tvb, tvb_reported_length(tvb)-IEEE802154_FCS_LEN);
    876. 

  876.         /* Check if we are expecting a CC2420-style FCS*/
    877. 

  877.         if (options & DISSECT_IEEE802154_OPTION_CC24xx) {
    878. 

  878.             fcs_ok = (fcs & IEEE802154_CC24xx_CRC_OK);
    879. 

  879.         }
    880. 

  880.         else {
    881. 

  881.             guint16 fcs_calc = ieee802154_crc_tvb(tvb, tvb_reported_length(tvb)-IEEE802154_FCS_LEN);
    882. 

  882.             fcs_ok = (fcs == fcs_calc);
    883. 

  883.         }
    884. 

  884.     }
    885. 

  885. 

  886.     /*=====================================================
    887. 

  887.      * AUXILIARY SECURITY HEADER
    888. 

  888.      *=====================================================
    889. 

  889.      */
    890. 

  890.     /* The Auxiliary Security Header only exists in IEEE 802.15.4-2006 */
    891. 

  891.     if (packet->security_enable && (packet->version == IEEE802154_VERSION_2006)) {
    892. 

  892.       proto_tree *header_tree, *field_tree;
    893. 

  893.       guint8                    security_control;
    894. 

  894.       guint                     aux_length = 5; /* Minimum length of the auxiliary header. */
    895. 

  895. 

  896.       /* Parse the security control field. */
    897. 

  897.       security_control = tvb_get_guint8(tvb, offset);
    898. 

  898.       packet->security_level = (ieee802154_security_level)(security_control & IEEE802154_AUX_SEC_LEVEL_MASK);
    899. 

  899.       packet->key_id_mode = (ieee802154_key_id_mode)((security_control & IEEE802154_AUX_KEY_ID_MODE_MASK) >> IEEE802154_AUX_KEY_ID_MODE_SHIFT);
    900. 

  900. 

  901.       /* Compute the length of the auxiliary header and create a subtree.  */
    902. 

  902.       if (packet->key_id_mode != KEY_ID_MODE_IMPLICIT) aux_length++;
    903. 

  903.       if (packet->key_id_mode == KEY_ID_MODE_KEY_EXPLICIT_4) aux_length += 4;
    904. 

  904.       if (packet->key_id_mode == KEY_ID_MODE_KEY_EXPLICIT_8) aux_length += 8;
    905. 

  905.       ti = proto_tree_add_text(ieee802154_tree, tvb, offset, aux_length, "Auxiliary Security Header");
    906. 

  906.       header_tree = proto_item_add_subtree(ti, ett_ieee802154_auxiliary_security);
    907. 

  907. 

  908.       /* Security Control Field */
    909. 

  909.       ti = proto_tree_add_text(header_tree, tvb, offset, 1, "Security Control Field (0x%02x)", security_control);
    910. 

  910.       field_tree = proto_item_add_subtree(ti, ett_ieee802154_aux_sec_control);
    911. 

  911.       proto_tree_add_uint(field_tree, hf_ieee802154_security_level, tvb, offset, 1, security_control & IEEE802154_AUX_SEC_LEVEL_MASK);
    912. 

  912.       proto_tree_add_uint(field_tree, hf_ieee802154_key_id_mode, tvb, offset, 1, security_control & IEEE802154_AUX_KEY_ID_MODE_MASK);
    913. 

  913.       proto_tree_add_uint(field_tree, hf_ieee802154_aux_sec_reserved, tvb, offset, 1, security_control & IEEE802154_AUX_KEY_RESERVED_MASK);
    914. 

  914.       offset++;
    915. 

  915. 

  916.       /* Frame Counter Field */
    917. 

  917.       packet->frame_counter = tvb_get_letohl (tvb, offset);
    918. 

  918.       proto_tree_add_uint(header_tree, hf_ieee802154_aux_sec_frame_counter, tvb, offset,4, packet->frame_counter);
    919. 

  919.       offset +=4;
    920. 

  920. 

  921.       /* Key identifier field(s). */
    922. 

  922.       if (packet->key_id_mode != KEY_ID_MODE_IMPLICIT) {
    923. 

  923.         /* Create a subtree. */
    924. 

  924.         ti = proto_tree_add_text(header_tree, tvb, offset, 1, "Key Identifier Field"); /* Will fix length later. */
    925. 

  925.         field_tree = proto_item_add_subtree(ti, ett_ieee802154_aux_sec_key_id);
    926. 

  926.         /* Add key source, if it exists. */
    927. 

  927.         if (packet->key_id_mode == KEY_ID_MODE_KEY_EXPLICIT_4) {
    928. 

  928.           packet->key_source.addr32 = tvb_get_ntohl(tvb, offset);
    929. 

  929.           proto_tree_add_uint64(field_tree, hf_ieee802154_aux_sec_key_source, tvb, offset, 4, packet->key_source.addr32);
    930. 

  930.           proto_item_set_len(ti, 1 + 4);
    931. 

  931.           offset += (int)sizeof (guint32);
    932. 

  932.         }
    933. 

  933.         if (packet->key_id_mode == KEY_ID_MODE_KEY_EXPLICIT_8) {
    934. 

  934.           packet->key_source.addr64 = tvb_get_ntoh64(tvb, offset);
    935. 

  935.           proto_tree_add_uint64(field_tree, hf_ieee802154_aux_sec_key_source, tvb, offset, 8, packet->key_source.addr64);
    936. 

  936.           proto_item_set_len(ti, 1 + 8);
    937. 

  937.           offset += 8;
    938. 

  938.         }
    939. 

  939.         /* Add key identifier. */
    940. 

  940.         packet->key_index = tvb_get_guint8(tvb, offset);
    941. 

  941.         proto_tree_add_uint(field_tree, hf_ieee802154_aux_sec_key_index, tvb, offset,1, packet->key_index);
    942. 

  942.         offset++;
    943. 

  943.       }
    944. 

  944.     }
    945. 

  945. 

  946.     /*=====================================================
    947. 

  947.      * NONPAYLOAD FIELDS
    948. 

  948.      *=====================================================
    949. 

  949.      */
    950. 

  950.     /* All of the beacon fields, except the beacon payload are considered nonpayload. */
    951. 

  951.     if (packet->frame_type == IEEE802154_FCF_BEACON) {
    952. 

  952.         /* Parse the superframe spec. */
    953. 

  953.         dissect_ieee802154_superframe(tvb, pinfo, ieee802154_tree, &offset);
    954. 

  954.         /* Parse the GTS information fields. */
    955. 

  955.         dissect_ieee802154_gtsinfo(tvb, pinfo, ieee802154_tree, &offset);
    956. 

  956.         /* Parse the Pending address list. */
    957. 

  957.         dissect_ieee802154_pendaddr(tvb, pinfo, ieee802154_tree, &offset);
    958. 

  958.     }
    959. 

  959.     /* Only the Command ID is considered nonpayload. */
    960. 

  960.     if (packet->frame_type == IEEE802154_FCF_CMD) {
    961. 

  961.         packet->command_id = tvb_get_guint8(tvb, offset);
    962. 

  962.         if (tree) {
    963. 

  963.             proto_tree_add_uint(ieee802154_tree, hf_ieee802154_cmd_id, tvb, offset, 1, packet->command_id);
    964. 

  964.         }
    965. 

  965.         offset++;
    966. 

  966. 

  967.         /* Display the command identifier in the info column. */
    968. 

  968.         col_set_str(pinfo->cinfo, COL_INFO, val_to_str_const(packet->command_id, ieee802154_cmd_names, "Unknown Command"));
    969. 

  969.     }
    970. 

  970.     /* No other frame types have nonpayload fields. */
    971. 

  971. 

  972.     /*=====================================================
    973. 

  973.      * PAYLOAD DISSECTION
    974. 

  974.      *=====================================================
    975. 

  975.      */
    976. 

  976.     /* IEEE 802.15.4-2003 may have security information pre-pended to payload */
    977. 

  977.     if (packet->security_enable && (packet->version == IEEE802154_VERSION_2003)) {
    978. 

  978.         /* Store security suite preference in the 2006 security level identifier to simplify 2003 integration! */
    979. 

  979.         packet->security_level = (ieee802154_security_level)ieee802154_sec_suite;
    980. 

  980. 

  981.         /* Frame Counter and Key Sequence Counter prepended to the payload of an encrypted frame */
    982. 

  982.         if (IEEE802154_IS_ENCRYPTED(packet->security_level)) {
    983. 

  983.             packet->frame_counter = tvb_get_letohl (tvb, offset);
    984. 

  984.             proto_tree_add_uint(ieee802154_tree, hf_ieee802154_sec_frame_counter, tvb, offset, (int)sizeof(guint32), packet->frame_counter);
    985. 

  985.             offset += (int)sizeof(guint32);
    986. 

  986. 

  987.             packet->key_sequence_counter = tvb_get_guint8 (tvb, offset);
    988. 

  988.             proto_tree_add_uint(ieee802154_tree, hf_ieee802154_sec_key_sequence_counter, tvb, offset, (int)sizeof(guint8), packet->key_sequence_counter);
    989. 

  989.             offset += (int)sizeof(guint8);
    990. 

  990.         }
    991. 

  991.     }
    992. 

  992. 

  993.     /* Encrypted Payload. */
    994. 

  994.     if (packet->security_enable) {
    995. 

  995.         payload_tvb = dissect_ieee802154_decrypt(tvb, offset, pinfo, packet, &status);
    996. 

  996. 

  997.         /* Get the unencrypted data if decryption failed.  */
    998. 

  998.         if (!payload_tvb) {
    999. 

  999.             /* Deal with possible truncation and the FCS field at the end. */
    1000. 

  1000.             gint            reported_len = tvb_reported_length(tvb)-offset-IEEE802154_FCS_LEN;
    1001. 

  1001.             gint            captured_len = tvb_length(tvb)-offset;
    1002. 

  1002.             if (reported_len < captured_len) captured_len = reported_len;
    1003. 

  1003.             payload_tvb = tvb_new_subset(tvb, offset, captured_len, reported_len);
    1004. 

  1004.         }
    1005. 

  1005. 

  1006.         /* Display the reason for failure, and abort if the error was fatal. */
    1007. 

  1007.         switch (status) {
    1008. 

  1008.         case DECRYPT_PACKET_SUCCEEDED:
    1009. 

  1009.         case DECRYPT_NOT_ENCRYPTED:
    1010. 

  1010.             /* No problem. */
    1011. 

  1011.             break;
    1012. 

  1012. 

  1013.         case DECRYPT_VERSION_UNSUPPORTED:
    1014. 

  1014.             /* We don't support decryption with that version of the protocol */
    1015. 

  1015.             expert_add_info_format(pinfo, proto_root, PI_UNDECODED, PI_WARN, "We don't support decryption with protocol version %u",
    1016. 

  1016.                                    packet->version);
    1017. 

  1017.             call_dissector(data_handle, payload_tvb, pinfo, tree);
    1018. 

  1018.             goto dissect_ieee802154_fcs;
    1019. 

  1019. 

  1020.         case DECRYPT_PACKET_TOO_SMALL:
    1021. 

  1021.             expert_add_info_format(pinfo, proto_root, PI_UNDECODED, PI_WARN, "Packet was too small to include the CRC and MIC");
    1022. 

  1022.             call_dissector(data_handle, payload_tvb, pinfo, tree);
    1023. 

  1023.             goto dissect_ieee802154_fcs;
    1024. 

  1024. 

  1025.         case DECRYPT_PACKET_NO_EXT_SRC_ADDR:
    1026. 

  1026.             expert_add_info_format(pinfo, proto_root, PI_UNDECODED, PI_WARN, "No extended source address - can't decrypt");
    1027. 

  1027.             call_dissector(data_handle, payload_tvb, pinfo, tree);
    1028. 

  1028.             goto dissect_ieee802154_fcs;
    1029. 

  1029. 

  1030.         case DECRYPT_PACKET_NO_KEY:
    1031. 

  1031.             expert_add_info_format(pinfo, proto_root, PI_UNDECODED, PI_WARN, "No encryption key set - can't decrypt");
    1032. 

  1032.             call_dissector(data_handle, payload_tvb, pinfo, tree);
    1033. 

  1033.             goto dissect_ieee802154_fcs;
    1034. 

  1034. 

  1035.         case DECRYPT_PACKET_DECRYPT_FAILED:
    1036. 

  1036.             expert_add_info_format(pinfo, proto_root, PI_UNDECODED, PI_WARN, "Decrypt failed");
    1037. 

  1037.             call_dissector(data_handle, payload_tvb, pinfo, tree);
    1038. 

  1038.             goto dissect_ieee802154_fcs;
    1039. 

  1039. 

  1040.         case DECRYPT_PACKET_MIC_CHECK_FAILED:
    1041. 

  1041.             expert_add_info_format(pinfo, proto_root, PI_UNDECODED, PI_WARN, "MIC check failed");
    1042. 

  1042.             /*
    1043. 

  1043.              * Abort only if the payload was encrypted, in which case we
    1044. 

  1044.              * probably didn't decrypt the packet right (eg: wrong key).
    1045. 

  1045.              */
    1046. 

  1046.             if (IEEE802154_IS_ENCRYPTED(packet->security_level)) {
    1047. 

  1047.                 call_dissector(data_handle, payload_tvb, pinfo, tree);
    1048. 

  1048.                 goto dissect_ieee802154_fcs;
    1049. 

  1049.             }
    1050. 

  1050.             break;
    1051. 

  1051.         }
    1052. 

  1052.     }
    1053. 

  1053.     /* Plaintext Payload. */
    1054. 

  1054.     else {
    1055. 

  1055.         /* Deal with possible truncation and the FCS field at the end. */
    1056. 

  1056.         gint            reported_len = tvb_reported_length(tvb)-offset-IEEE802154_FCS_LEN;
    1057. 

  1057.         gint            captured_len = tvb_length(tvb)-offset;
    1058. 

  1058.         if (reported_len < captured_len) captured_len = reported_len;
    1059. 

  1059.         payload_tvb = tvb_new_subset(tvb, offset, captured_len, reported_len);
    1060. 

  1060.     }
    1061. 

  1061. 

  1062.     /*
    1063. 

  1063.      * Wrap the sub-dissection in a try/catch block in case the payload is
    1064. 

  1064.      * broken. First we store the current protocol so we can fix it if an
    1065. 

  1065.      * exception is thrown by the subdissectors.
    1066. 

  1066.      */
    1067. 

  1067.     saved_proto = pinfo->current_proto;
    1068. 

  1068.     /* Try to dissect the payload. */
    1069. 

  1069.     TRY {
    1070. 

  1070.         if ((packet->frame_type == IEEE802154_FCF_BEACON) ||
    1071. 

  1071.             (packet->frame_type == IEEE802154_FCF_DATA)) {
    1072. 

  1072.             /* Beacon and Data packets contain a payload. */
    1073. 

  1073.             if ((fcs_ok || !ieee802154_fcs_ok) && (tvb_reported_length(payload_tvb)>0)) {
    1074. 

  1074.                 /* Attempt heuristic subdissection. */
    1075. 

  1075.                 if (!dissector_try_heuristic(ieee802154_heur_subdissector_list, payload_tvb, pinfo, tree, NULL)) {
    1076. 

  1076.                     /* Could not subdissect, call the data dissector instead. */
    1077. 

  1077.                     call_dissector(data_handle, payload_tvb, pinfo, tree);
    1078. 

  1078.                 }
    1079. 

  1079.             }
    1080. 

  1080.             else {
    1081. 

  1081.                 /* If no sub-dissector was called, call the data dissector. */
    1082. 

  1082.                 call_dissector(data_handle, payload_tvb, pinfo, tree);
    1083. 

  1083.             }
    1084. 

  1084.         }
    1085. 

  1085.         /* If the packet is a command, try to dissect the payload. */
    1086. 

  1086.         else if (packet->frame_type == IEEE802154_FCF_CMD) {
    1087. 

  1087.             switch (packet->command_id) {
    1088. 

  1088.               case IEEE802154_CMD_ASRQ:
    1089. 

  1089.                 IEEE802154_CMD_ADDR_CHECK(pinfo, proto_root, packet->command_id,
    1090. 

  1090.                     (packet->src_addr_mode == IEEE802154_FCF_ADDR_EXT) &&
    1091. 

  1091.                     (packet->dst_addr_mode != IEEE802154_FCF_ADDR_NONE));
    1092. 

  1092.                 dissect_ieee802154_assoc_req(payload_tvb, pinfo, ieee802154_tree, packet);
    1093. 

  1093.                 break;
    1094. 

  1094. 

  1095.               case IEEE802154_CMD_ASRSP:
    1096. 

  1096.                 IEEE802154_CMD_ADDR_CHECK(pinfo, proto_root, packet->command_id,
    1097. 

  1097.                     (packet->src_addr_mode == IEEE802154_FCF_ADDR_EXT) &&
    1098. 

  1098.                     (packet->dst_addr_mode == IEEE802154_FCF_ADDR_EXT));
    1099. 

  1099.                 dissect_ieee802154_assoc_rsp(payload_tvb, pinfo, ieee802154_tree, packet);
    1100. 

  1100.                 break;
    1101. 

  1101. 

  1102.               case IEEE802154_CMD_DISAS:
    1103. 

  1103.                 IEEE802154_CMD_ADDR_CHECK(pinfo, proto_root, packet->command_id,
    1104. 

  1104.                     (packet->src_addr_mode == IEEE802154_FCF_ADDR_EXT) &&
    1105. 

  1105.                     (packet->dst_addr_mode == IEEE802154_FCF_ADDR_EXT));
    1106. 

  1106.                 dissect_ieee802154_disassoc(payload_tvb, pinfo, ieee802154_tree, packet);
    1107. 

  1107.                 break;
    1108. 

  1108. 

  1109.               case IEEE802154_CMD_DATA_RQ:
    1110. 

  1110.                 IEEE802154_CMD_ADDR_CHECK(pinfo, proto_root, packet->command_id, packet->src_addr_mode != IEEE802154_FCF_ADDR_NONE);
    1111. 

  1111.                 /* No payload expected. */
    1112. 

  1112.                 break;
    1113. 

  1113. 

  1114.               case IEEE802154_CMD_PANID_ERR:
    1115. 

  1115.                 IEEE802154_CMD_ADDR_CHECK(pinfo, proto_root, packet->command_id,
    1116. 

  1116.                     (packet->src_addr_mode == IEEE802154_FCF_ADDR_EXT) &&
    1117. 

  1117.                     (packet->dst_addr_mode == IEEE802154_FCF_ADDR_EXT));
    1118. 

  1118.                 /* No payload expected. */
    1119. 

  1119.                 break;
    1120. 

  1120. 

  1121.               case IEEE802154_CMD_ORPH_NOTIF:
    1122. 

  1122.                 IEEE802154_CMD_ADDR_CHECK(pinfo, proto_root, packet->command_id,
    1123. 

  1123.                     (packet->src_addr_mode == IEEE802154_FCF_ADDR_EXT) &&
    1124. 

  1124.                     (packet->dst_addr_mode == IEEE802154_FCF_ADDR_SHORT) &&
    1125. 

  1125.                     (packet->dst16 == IEEE802154_BCAST_ADDR) &&
    1126. 

  1126.                     (packet->src_pan == IEEE802154_BCAST_PAN) &&
    1127. 

  1127.                     (packet->dst_pan == IEEE802154_BCAST_PAN));
    1128. 

  1128.                 /* No payload expected. */
    1129. 

  1129.                 break;
    1130. 

  1130. 

  1131.               case IEEE802154_CMD_BCN_RQ:
    1132. 

  1132.                 IEEE802154_CMD_ADDR_CHECK(pinfo, proto_root, packet->command_id,
    1133. 

  1133.                     (packet->dst_addr_mode == IEEE802154_FCF_ADDR_SHORT) &&
    1134. 

  1134.                     (packet->src_addr_mode == IEEE802154_FCF_ADDR_NONE) &&
    1135. 

  1135.                     (packet->dst16 == IEEE802154_BCAST_ADDR) &&
    1136. 

  1136.                     (packet->dst_pan == IEEE802154_BCAST_PAN));
    1137. 

  1137.                 /* No payload expected. */
    1138. 

  1138.                 break;
    1139. 

  1139. 

  1140.               case IEEE802154_CMD_COORD_REAL:
    1141. 

  1141.                 IEEE802154_CMD_ADDR_CHECK(pinfo, proto_root, packet->command_id,
    1142. 

  1142.                     (packet->src_addr_mode == IEEE802154_FCF_ADDR_EXT) &&
    1143. 

  1143.                     (packet->dst_pan == IEEE802154_BCAST_PAN) &&
    1144. 

  1144.                     (packet->dst_addr_mode != IEEE802154_FCF_ADDR_NONE));
    1145. 

  1145.                 if (packet->dst_addr_mode == IEEE802154_FCF_ADDR_SHORT) {
    1146. 

  1146.                     /* If directed to a 16-bit address, check that it is being broadcast. */
    1147. 

  1147.                     IEEE802154_CMD_ADDR_CHECK(pinfo, proto_root, packet->command_id, packet->dst16 == IEEE802154_BCAST_ADDR);
    1148. 

  1148.                 }
    1149. 

  1149.                 dissect_ieee802154_realign(payload_tvb, pinfo, ieee802154_tree, packet);
    1150. 

  1150.                 break;
    1151. 

  1151. 

  1152.               case IEEE802154_CMD_GTS_REQ:
    1153. 

  1153.                 /* Check that the addressing is correct for this command type. */
    1154. 

  1154.                 IEEE802154_CMD_ADDR_CHECK(pinfo, proto_root, packet->command_id,
    1155. 

  1155.                     (packet->src_addr_mode == IEEE802154_FCF_ADDR_SHORT) &&
    1156. 

  1156.                     (packet->dst_addr_mode == IEEE802154_FCF_ADDR_NONE) &&
    1157. 

  1157.                     (packet->src16 != IEEE802154_BCAST_ADDR) &&
    1158. 

  1158.                     (packet->src16 != IEEE802154_NO_ADDR16));
    1159. 

  1159.                 dissect_ieee802154_gtsreq(payload_tvb, pinfo, ieee802154_tree, packet);
    1160. 

  1160.                 break;
    1161. 

  1161. 

  1162.               default:
    1163. 

  1163.                 /* Unknown Command */
    1164. 

  1164.                 call_dissector(data_handle, payload_tvb, pinfo, ieee802154_tree);
    1165. 

  1165.                 break;
    1166. 

  1166.             } /* switch */
    1167. 

  1167.         }
    1168. 

  1168.         /* Otherwise, dump whatever is left over to the data dissector. */
    1169. 

  1169.         else {
    1170. 

  1170.             call_dissector(data_handle, payload_tvb, pinfo, tree);
    1171. 

  1171.         }
    1172. 

  1172.     }
    1173. 

  1173.     CATCH_ALL {
    1174. 

  1174.         /*
    1175. 

  1175.          * Someone encountered an error while dissecting the payload. But
    1176. 

  1176.          * we haven't yet finished processing all of our layer. Catch and
    1177. 

  1177.          * display the exception, then fall-through to finish displaying
    1178. 

  1178.          * the FCS (which we display last so the frame is ordered correctly
    1179. 

  1179.          * in the tree).
    1180. 

  1180.          */
    1181. 

  1181.         show_exception(payload_tvb, pinfo, tree, EXCEPT_CODE, GET_MESSAGE);
    1182. 

  1182.         pinfo->current_proto = saved_proto;
    1183. 

  1183.     }
    1184. 

  1184.     ENDTRY;
    1185. 

  1185. 

  1186.     /*=====================================================
    1187. 

  1187.      * FRAME CHECK SEQUENCE
    1188. 

  1188.      *=====================================================
    1189. 

  1189.      */
    1190. 

  1190. dissect_ieee802154_fcs:
    1191. 

  1191.     /* The FCS should be the last bytes of the reported packet. */
    1192. 

  1192.     offset = tvb_reported_length(tvb)-IEEE802154_FCS_LEN;
    1193. 

  1193.     /* Dissect the FCS only if it exists (captures which don't or can't get the
    1194. 

  1194.      * FCS will simply truncate the packet to omit it, but should still set the
    1195. 

  1195.      * reported length to cover the original packet length), so if the snapshot
    1196. 

  1196.      * is too short for an FCS don't make a fuss.
    1197. 

  1197.      */
    1198. 

  1198.     if (tvb_bytes_exist(tvb, offset, IEEE802154_FCS_LEN) && (tree)) {
    1199. 

  1199.         proto_tree  *field_tree;
    1200. 

  1200.         guint16     fcs = tvb_get_letohs(tvb, offset);
    1201. 

  1201. 

  1202.         /* Display the FCS depending on expected FCS format */
    1203. 

  1203.         if ((options & DISSECT_IEEE802154_OPTION_CC24xx)) {
    1204. 

  1204.             /* Create a subtree for the FCS. */
    1205. 

  1205.             ti = proto_tree_add_text(ieee802154_tree, tvb, offset, 2, "Frame Check Sequence (TI CC24xx format): FCS %s", (fcs_ok) ? "OK" : "Bad");
    1206. 

  1206.             field_tree = proto_item_add_subtree(ti, ett_ieee802154_fcs);
    1207. 

  1207.             /* Display FCS contents.  */
    1208. 

  1208.             ti = proto_tree_add_int(field_tree, hf_ieee802154_rssi, tvb, offset++, 1, (gint8) (fcs & IEEE802154_CC24xx_RSSI));
    1209. 

  1209.             proto_item_append_text(ti, " dB");  /*  Displaying Units */
    1210. 

  1210.             proto_tree_add_boolean(field_tree, hf_ieee802154_fcs_ok, tvb, offset, 1, (gboolean) (fcs & IEEE802154_CC24xx_CRC_OK));
    1211. 

  1211.             proto_tree_add_uint(field_tree, hf_ieee802154_correlation, tvb, offset, 1, (guint8) ((fcs & IEEE802154_CC24xx_CORRELATION) >> 8));
    1212. 

  1212.         }
    1213. 

  1213.         else {
    1214. 

  1214.             ti = proto_tree_add_uint(ieee802154_tree, hf_ieee802154_fcs, tvb, offset, 2, fcs);
    1215. 

  1215.             if (fcs_ok) {
    1216. 

  1216.                 proto_item_append_text(ti, " (Correct)");
    1217. 

  1217.             }
    1218. 

  1218.             else {
    1219. 

  1219.                 proto_item_append_text(ti, " (Incorrect, expected FCS=0x%04x", ieee802154_crc_tvb(tvb, offset));
    1220. 

  1220.             }
    1221. 

  1221.             /* To Help with filtering, add the fcs_ok field to the tree.  */
    1222. 

  1222.             ti = proto_tree_add_boolean(ieee802154_tree, hf_ieee802154_fcs_ok, tvb, offset, 2, fcs_ok);
    1223. 

  1223.             PROTO_ITEM_SET_HIDDEN(ti);
    1224. 

  1224.         }
    1225. 

  1225.     }
    1226. 

  1226.     else if (tree) {
    1227. 

  1227.         /* Even if the FCS isn't present, add the fcs_ok field to the tree to
    1228. 

  1228.          * help with filter. Be sure not to make it visible though.
    1229. 

  1229.          */
    1230. 

  1230.         ti = proto_tree_add_boolean_format_value(ieee802154_tree, hf_ieee802154_fcs_ok, tvb, offset, 2, fcs_ok, "Unknown");
    1231. 

  1231.         PROTO_ITEM_SET_HIDDEN(ti);
    1232. 

  1232.     }
    1233. 

  1233. 

  1234.     /* If the CRC is invalid, make a note of it in the info column. */
    1235. 

  1235.     if (!fcs_ok) {
    1236. 

  1236.         col_append_str(pinfo->cinfo, COL_INFO, ", Bad FCS");
    1237. 

  1237.         if (tree) proto_item_append_text(proto_root, ", Bad FCS");
    1238. 

  1238. 

  1239.         /* Flag packet as having a bad crc. */
    1240. 

  1240.         expert_add_info_format(pinfo, proto_root, PI_CHECKSUM, PI_WARN, "Bad FCS");
    1241. 

  1241.     }
    1242. 

  1242.     pinfo->private_data = pd_save;
    1243. 

  1243. } /* dissect_ieee802154_common */
    1244. 

  1244. 

  1245. /*FUNCTION:------------------------------------------------------
    1246. 

  1246.  *  NAME
    1247. 

  1247.  *      dissect_ieee802154_superframe
    1248. 

  1248.  *  DESCRIPTION
    1249. 

  1249.  *      Subdissector command for the Superframe specification
    1250. 

  1250.  *      sub-field within the beacon frame.
    1251. 

  1251.  *  PARAMETERS
    1252. 

  1252.  *      tvbuff_t    *tvb            - pointer to buffer containing raw packet.
    1253. 

  1253.  *      packet_info *pinfo          - pointer to packet information fields (unused).
    1254. 

  1254.  *      proto_tree  *tree           - pointer to command subtree.
    1255. 

  1255.  *      ieee802154_packet *packet   - IEEE 802.15.4 packet information (unused).
    1256. 

  1256.  *      guint       *offset         - offset into the tvbuff to begin dissection.
    1257. 

  1257.  *  RETURNS
    1258. 

  1258.  *      void
    1259. 

  1259.  *---------------------------------------------------------------
    1260. 

  1260.  */
    1261. 

  1261. static void
    1262. 

  1262. dissect_ieee802154_superframe(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, guint *offset)
    1263. 

  1263. {
    1264. 

  1264.     proto_tree *field_tree = NULL;
    1265. 

  1265.     proto_item *ti;
    1266. 

  1266.     guint16     superframe;
    1267. 

  1267. 

  1268.     /* Parse the superframe spec. */
    1269. 

  1269.     superframe = tvb_get_letohs(tvb, *offset);
    1270. 

  1270.     if (tree) {
    1271. 

  1271.         /*  Add Subtree for superframe specification */
    1272. 

  1272.         ti = proto_tree_add_text(tree, tvb, *offset, 2, "Superframe Specification");
    1273. 

  1273.         field_tree = proto_item_add_subtree(ti, ett_ieee802154_superframe);
    1274. 

  1274. 

  1275.         /*  Add Beacon Order to the superframe spec. */
    1276. 

  1276.         proto_tree_add_uint(field_tree, hf_ieee802154_beacon_order, tvb, *offset, 2, superframe & IEEE802154_BEACON_ORDER_MASK);
    1277. 

  1277.         proto_tree_add_uint(field_tree, hf_ieee802154_superframe_order, tvb, *offset, 2, superframe & IEEE802154_SUPERFRAME_ORDER_MASK);
    1278. 

  1278.         proto_tree_add_uint(field_tree, hf_ieee802154_cap, tvb, *offset, 2, superframe & IEEE802154_SUPERFRAME_CAP_MASK);
    1279. 

  1279.         proto_tree_add_boolean(field_tree, hf_ieee802154_superframe_battery_ext, tvb, *offset, 2, superframe & IEEE802154_BATT_EXTENSION_MASK);
    1280. 

  1280.         proto_tree_add_boolean(field_tree, hf_ieee802154_superframe_coord, tvb, *offset, 2, superframe & IEEE802154_SUPERFRAME_COORD_MASK);
    1281. 

  1281.         proto_tree_add_boolean(field_tree, hf_ieee802154_assoc_permit, tvb, *offset, 2, superframe & IEEE802154_ASSOC_PERMIT_MASK);
    1282. 

  1282.     }
    1283. 

  1283.     (*offset) += 2;
    1284. 

  1284. } /* dissect_ieee802154_superframe */
    1285. 

  1285. 

  1286. /*FUNCTION:------------------------------------------------------
    1287. 

  1287.  *  NAME
    1288. 

  1288.  *      dissect_ieee802154_gtsinfo
    1289. 

  1289.  *  DESCRIPTION
    1290. 

  1290.  *      Subdissector command for the GTS information fields within
    1291. 

  1291.  *      the beacon frame.
    1292. 

  1292.  *  PARAMETERS
    1293. 

  1293.  *      tvbuff_t    *tvb            - pointer to buffer containing raw packet.
    1294. 

  1294.  *      packet_info *pinfo          - pointer to packet information fields (unused).
    1295. 

  1295.  *      proto_tree  *tree           - pointer to command subtree.
    1296. 

  1296.  *      ieee802154_packet *packet   - IEEE 802.15.4 packet information (unused).
    1297. 

  1297.  *      guint       *offset         - offset into the tvbuff to begin dissection.
    1298. 

  1298.  *  RETURNS
    1299. 

  1299.  *      void
    1300. 

  1300.  *---------------------------------------------------------------
    1301. 

  1301.  */
    1302. 

  1302. static void
    1303. 

  1303. dissect_ieee802154_gtsinfo(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, guint *offset)
    1304. 

  1304. {
    1305. 

  1305.     proto_tree *field_tree = NULL;
    1306. 

  1306.     proto_tree *subtree    = NULL;
    1307. 

  1307.     proto_item *ti;
    1308. 

  1308.     guint8      gts_spec;
    1309. 

  1309.     guint8      gts_count;
    1310. 

  1310. 

  1311.     /*  Get and display the GTS specification field */
    1312. 

  1312.     gts_spec = tvb_get_guint8(tvb, *offset);
    1313. 

  1313.     gts_count = gts_spec & IEEE802154_GTS_COUNT_MASK;
    1314. 

  1314.     if (tree) {
    1315. 

  1315.         /*  Add Subtree for GTS information. */
    1316. 

  1316.         if (gts_count) {
    1317. 

  1317.             ti = proto_tree_add_text(tree, tvb, *offset, 2 + (gts_count * 3), "GTS");
    1318. 

  1318.         }
    1319. 

  1319.         else {
    1320. 

  1320.             ti = proto_tree_add_text(tree, tvb, *offset, 1, "GTS");
    1321. 

  1321.         }
    1322. 

  1322.         field_tree = proto_item_add_subtree(ti, ett_ieee802154_gts);
    1323. 

  1323. 

  1324.         proto_tree_add_uint(field_tree, hf_ieee802154_gts_count, tvb, *offset, 1, gts_count);
    1325. 

  1325.         proto_tree_add_boolean(field_tree, hf_ieee802154_gts_permit, tvb, *offset, 1, gts_spec & IEEE802154_GTS_PERMIT_MASK);
    1326. 

  1326.     }
    1327. 

  1327.     (*offset) += 1;
    1328. 

  1328. 

  1329.     /* If the GTS descriptor count is nonzero, then the GTS directions mask and descriptor list are present. */
    1330. 

  1330.     if (gts_count) {
    1331. 

  1331.         guint8  gts_directions = tvb_get_guint8(tvb, *offset);
    1332. 

  1332.         guint   gts_rx = 0;
    1333. 

  1333.         int     i;
    1334. 

  1334. 

  1335.         /* Display the directions mask. */
    1336. 

  1336.         if (tree) {
    1337. 

  1337.             proto_tree  *dir_tree = NULL;
    1338. 

  1338. 

  1339.             /* Create a subtree. */
    1340. 

  1340.             ti = proto_tree_add_text(field_tree, tvb, *offset, 1, "GTS Directions");
    1341. 

  1341.             dir_tree = proto_item_add_subtree(ti, ett_ieee802154_gts_direction);
    1342. 

  1342. 

  1343.             /* Add the directions to the subtree. */
    1344. 

  1344.             for (i=0; i<gts_count; i++) {
    1345. 

  1345.                 gboolean    dir = gts_directions & IEEE802154_GTS_DIRECTION_SLOT(i);
    1346. 

  1346.                 proto_tree_add_boolean_format(dir_tree, hf_ieee802154_gts_direction, tvb, *offset, 1, dir, "GTS Slot %i: %s", i+1, dir?"Receive Only":"Transmit Only");
    1347. 

  1347.                 if (dir) gts_rx++;
    1348. 

  1348.             } /* for */
    1349. 

  1349.             proto_item_append_text(ti, ": %i Receive & %i Transmit", gts_rx, gts_count - gts_rx);
    1350. 

  1350.         }
    1351. 

  1351.         (*offset) += 1;
    1352. 

  1352. 

  1353.         /* Create a subtree for the GTS descriptors. */
    1354. 

  1354.         if (tree) {
    1355. 

  1355.             ti = proto_tree_add_text(field_tree, tvb, *offset, gts_count * 3, "GTS Descriptors");
    1356. 

  1356.             subtree = proto_item_add_subtree(ti, ett_ieee802154_gts_descriptors);
    1357. 

  1357.         }
    1358. 

  1358. 

  1359.         /* Get and display the GTS descriptors. */
    1360. 

  1360.         for (i=0; i<gts_count; i++) {
    1361. 

  1361.             guint16 gts_addr        = tvb_get_letohs(tvb, (*offset));
    1362. 

  1362.             guint8  gts_slot        = tvb_get_guint8(tvb, (*offset)+2);
    1363. 

  1363.             guint8  gts_length      = (gts_slot & IEEE802154_GTS_LENGTH_MASK) >> IEEE802154_GTS_LENGTH_SHIFT;
    1364. 

  1364. 

  1365.             if (tree) {
    1366. 

  1366.                 /* Add address, slot, and time length fields. */
    1367. 

  1367.                 ti = proto_tree_add_text(subtree, tvb, (*offset), 3, "{Address: 0x%04x", gts_addr);
    1368. 

  1368.                 proto_item_append_text(ti, ", Slot: %i", gts_slot);
    1369. 

  1369.                 proto_item_append_text(ti, ", Length: %i}", gts_length);
    1370. 

  1370.             }
    1371. 

  1371.             (*offset) += 3;
    1372. 

  1372.         } /* for */
    1373. 

  1373.     }
    1374. 

  1374. } /* dissect_ieee802154_gtsinfo */
    1375. 

  1375. 

  1376. /*FUNCTION:------------------------------------------------------
    1377. 

  1377.  *  NAME
    1378. 

  1378.  *      dissect_ieee802154_pendaddr
    1379. 

  1379.  *  DESCRIPTION
    1380. 

  1380.  *      Subdissector command for the pending address list fields
    1381. 

  1381.  *      within the beacon frame.
    1382. 

  1382.  *  PARAMETERS
    1383. 

  1383.  *      tvbuff_t    *tvb            - pointer to buffer containing raw packet.
    1384. 

  1384.  *      packet_info *pinfo          - pointer to packet information fields (unused).
    1385. 

  1385.  *      proto_tree  *tree           - pointer to command subtree.
    1386. 

  1386.  *      ieee802154_packet *packet   - IEEE 802.15.4 packet information (unused).
    1387. 

  1387.  *      guint       *offset         - offset into the tvbuff to begin dissection.
    1388. 

  1388.  *  RETURNS
    1389. 

  1389.  *      void
    1390. 

  1390.  *---------------------------------------------------------------
    1391. 

  1391.  */
    1392. 

  1392. static void
    1393. 

  1393. dissect_ieee802154_pendaddr(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, guint *offset)
    1394. 

  1394. {
    1395. 

  1395.     proto_tree *subtree = NULL;
    1396. 

  1396.     proto_item *ti;
    1397. 

  1397.     guint8      pend_spec;
    1398. 

  1398.     guint8      pend_num16;
    1399. 

  1399.     guint8      pend_num64;
    1400. 

  1400.     int         i;
    1401. 

  1401. 

  1402.     /*  Get the Pending Addresses specification fields */
    1403. 

  1403.     pend_spec = tvb_get_guint8(tvb, *offset);
    1404. 

  1404.     pend_num16 = pend_spec & IEEE802154_PENDADDR_SHORT_MASK;
    1405. 

  1405.     pend_num64 = (pend_spec & IEEE802154_PENDADDR_LONG_MASK) >> IEEE802154_PENDADDR_LONG_SHIFT;
    1406. 

  1406.     if (tree) {
    1407. 

  1407.         /*  Add Subtree for the addresses */
    1408. 

  1408.         ti = proto_tree_add_text(tree, tvb, *offset, 1 + 2*pend_num16 + 8*pend_num64, "Pending Addresses: %i Short and %i Long", pend_num16, pend_num64);
    1409. 

  1409.         subtree = proto_item_add_subtree(ti, ett_ieee802154_pendaddr);
    1410. 

  1410.     }
    1411. 

  1411.     (*offset) += 1;
    1412. 

  1412. 

  1413.     for (i=0; i<pend_num16; i++) {
    1414. 

  1414.         guint16 addr = tvb_get_letohs(tvb, *offset);
    1415. 

  1415.         proto_tree_add_uint(subtree, hf_ieee802154_pending16, tvb, *offset, 2, addr);
    1416. 

  1416.         (*offset) += 2;
    1417. 

  1417.     } /* for */
    1418. 

  1418.     for (i=0; i<pend_num64; i++) {
    1419. 

  1419.         proto_tree_add_item(subtree, hf_ieee802154_pending64, tvb, *offset, 8, ENC_LITTLE_ENDIAN);
    1420. 

  1420.         (*offset) += 8;
    1421. 

  1421.     } /* for */
    1422. 

  1422. } /* dissect_ieee802154_pendaddr */
    1423. 

  1423. 

  1424. /*FUNCTION:------------------------------------------------------
    1425. 

  1425.  *  NAME
    1426. 

  1426.  *      dissect_ieee802154_assoc_req
    1427. 

  1427.  *  DESCRIPTION
    1428. 

  1428.  *      Command subdissector routine for the Association request
    1429. 

  1429.  *      command.
    1430. 

  1430.  *  PARAMETERS
    1431. 

  1431.  *      tvbuff_t    *tvb            - pointer to buffer containing raw packet.
    1432. 

  1432.  *      packet_info *pinfo          - pointer to packet information fields.
    1433. 

  1433.  *      proto_tree  *tree           - pointer to protocol tree.
    1434. 

  1434.  *      ieee802154_packet *packet   - IEEE 802.15.4 packet information.
    1435. 

  1435.  *  RETURNS
    1436. 

  1436.  *      void
    1437. 

  1437.  *---------------------------------------------------------------
    1438. 

  1438.  */
    1439. 

  1439. static void
    1440. 

  1440. dissect_ieee802154_assoc_req(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, ieee802154_packet *packet)
    1441. 

  1441. {
    1442. 

  1442.     proto_tree   *subtree = NULL;
    1443. 

  1443.     proto_item *  ti;
    1444. 

  1444.     guint8        capability;
    1445. 

  1445. 

  1446.     /* Create a subtree for this command frame. */
    1447. 

  1447.     if (tree) {
    1448. 

  1448.         ti = proto_tree_add_text(tree, tvb, 0, 1, "%s", val_to_str_const(packet->command_id, ieee802154_cmd_names, "Unknown Command"));
    1449. 

  1449.         subtree = proto_item_add_subtree(ti, ett_ieee802154_cmd);
    1450. 

  1450.     }
    1451. 

  1451. 

  1452.     /* Get and display capability info. */
    1453. 

  1453.     capability = tvb_get_guint8(tvb, 0);
    1454. 

  1454.     if (tree) {
    1455. 

  1455.         /* Enter the capability bits. */
    1456. 

  1456.         proto_tree_add_boolean(subtree, hf_ieee802154_cinfo_alt_coord, tvb, 0, 1, capability & IEEE802154_CMD_CINFO_ALT_PAN_COORD);
    1457. 

  1457.         ti = proto_tree_add_boolean(subtree, hf_ieee802154_cinfo_device_type, tvb, 0, 1, capability & IEEE802154_CMD_CINFO_DEVICE_TYPE);
    1458. 

  1458.         if (capability & IEEE802154_CMD_CINFO_DEVICE_TYPE) proto_item_append_text(ti, " (FFD)");
    1459. 

  1459.         else proto_item_append_text(ti, " (RFD)");
    1460. 

  1460.         ti = proto_tree_add_boolean(subtree, hf_ieee802154_cinfo_power_src, tvb, 0, 1, capability & IEEE802154_CMD_CINFO_POWER_SRC);
    1461. 

  1461.         if (capability & IEEE802154_CMD_CINFO_POWER_SRC) proto_item_append_text(ti, " (AC/Mains Power)");
    1462. 

  1462.         else proto_item_append_text(ti, " (Battery)");
    1463. 

  1463.         proto_tree_add_boolean(subtree, hf_ieee802154_cinfo_idle_rx, tvb, 0, 1, capability & IEEE802154_CMD_CINFO_IDLE_RX);
    1464. 

  1464.         proto_tree_add_boolean(subtree, hf_ieee802154_cinfo_sec_capable, tvb, 0, 1, capability & IEEE802154_CMD_CINFO_SEC_CAPABLE);
    1465. 

  1465.         proto_tree_add_boolean(subtree, hf_ieee802154_cinfo_alloc_addr, tvb, 0, 1, capability & IEEE802154_CMD_CINFO_ALLOC_ADDR);
    1466. 

  1466.     }
    1467. 

  1467. 

  1468.     /* Call the data dissector for any leftover bytes. */
    1469. 

  1469.     if (tvb_length(tvb) > 1) {
    1470. 

  1470.         call_dissector(data_handle, tvb_new_subset_remaining(tvb, 1), pinfo, tree);
    1471. 

  1471.     }
    1472. 

  1472. } /* dissect_ieee802154_assoc_req */
    1473. 

  1473. 

  1474. /*FUNCTION:------------------------------------------------------
    1475. 

  1475.  *  NAME
    1476. 

  1476.  *      dissect_ieee802154_assoc_rsp
    1477. 

  1477.  *  DESCRIPTION
    1478. 

  1478.  *      Command subdissector routine for the Association response
    1479. 

  1479.  *      command.
    1480. 

  1480.  *  PARAMETERS
    1481. 

  1481.  *      tvbuff_t    *tvb            - pointer to buffer containing raw packet.
    1482. 

  1482.  *      packet_info *pinfo          - pointer to packet information fields.
    1483. 

  1483.  *      proto_tree  *tree           - pointer to protocol tree.
    1484. 

  1484.  *      ieee802154_packet *packet   - IEEE 802.15.4 packet information.
    1485. 

  1485.  *  RETURNS
    1486. 

  1486.  *      void
    1487. 

  1487.  *---------------------------------------------------------------
    1488. 

  1488.  */
    1489. 

  1489. static void
    1490. 

  1490. dissect_ieee802154_assoc_rsp(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, ieee802154_packet *packet)
    1491. 

  1491. {
    1492. 

  1492.     proto_tree *subtree = NULL;
    1493. 

  1493.     proto_item *ti;
    1494. 

  1494.     guint16     short_addr;
    1495. 

  1495.     guint8      status;
    1496. 

  1496.     guint       offset  = 0;
    1497. 

  1497. 

  1498.     /* Create a subtree for this command frame. */
    1499. 

  1499.     if (tree) {
    1500. 

  1500.         ti = proto_tree_add_text(tree, tvb, offset, 3, "%s", val_to_str_const(packet->command_id,
    1501. 

  1501.                     ieee802154_cmd_names, "Unknown Command"));
    1502. 

  1502.         subtree = proto_item_add_subtree(ti, ett_ieee802154_cmd);
    1503. 

  1503.     }
    1504. 

  1504. 

  1505.     /* Get and display the short address. */
    1506. 

  1506.     short_addr = tvb_get_letohs(tvb, offset);
    1507. 

  1507.     if (tree) {
    1508. 

  1508.         proto_tree_add_uint(subtree, hf_ieee802154_assoc_addr, tvb, offset, 2, short_addr);
    1509. 

  1509.     }
    1510. 

  1510.     offset += 2;
    1511. 

  1511. 

  1512.     /* Get and display the status. */
    1513. 

  1513.     status = tvb_get_guint8(tvb, offset);
    1514. 

  1514.     if (tree) {
    1515. 

  1515.         ti = proto_tree_add_uint(subtree, hf_ieee802154_assoc_status, tvb, offset, 1, status);
    1516. 

  1516.         if (status == IEEE802154_CMD_ASRSP_AS_SUCCESS) proto_item_append_text(ti, " (Association Successful)");
    1517. 

  1517.         else if (status == IEEE802154_CMD_ASRSP_PAN_FULL) proto_item_append_text(ti, " (PAN Full)");
    1518. 

  1518.         else if (status == IEEE802154_CMD_ASRSP_PAN_DENIED) proto_item_append_text(ti, " (Association Denied)");
    1519. 

  1519.         else proto_item_append_text(ti, " (Reserved)");
    1520. 

  1520.     }
    1521. 

  1521.     offset += 1;
    1522. 

  1522. 

  1523.     /* Update the info column. */
    1524. 

  1524.     if (status == IEEE802154_CMD_ASRSP_AS_SUCCESS) {
    1525. 

  1525.         /* Association was successful. */
    1526. 

  1526.         if (packet->src_addr_mode != IEEE802154_FCF_ADDR_SHORT) {
    1527. 

  1527.             col_append_fstr(pinfo->cinfo, COL_INFO, ", PAN: 0x%04x", packet->dst_pan);
    1528. 

  1528.         }
    1529. 

  1529.         if (short_addr != IEEE802154_NO_ADDR16) {
    1530. 

  1530.             col_append_fstr(pinfo->cinfo, COL_INFO, " Addr: 0x%04x", short_addr);
    1531. 

  1531.         }
    1532. 

  1532.     }
    1533. 

  1533.     else {
    1534. 

  1534.         /* Association was unsuccessful. */
    1535. 

  1535.         col_append_fstr(pinfo->cinfo, COL_INFO, ", Unsuccessful");
    1536. 

  1536.     }
    1537. 

  1537. 

  1538.     /* Update the address table. */
    1539. 

  1539.     if ((status == IEEE802154_CMD_ASRSP_AS_SUCCESS) && (short_addr != IEEE802154_NO_ADDR16)) {
    1540. 

  1540.         ieee802154_addr_update(&ieee802154_map, short_addr, packet->dst_pan, packet->dst64,
    1541. 

  1541.                 pinfo->current_proto, pinfo->fd->num);
    1542. 

  1542.     }
    1543. 

  1543. 

  1544.     /* Call the data dissector for any leftover bytes. */
    1545. 

  1545.     if (tvb_length(tvb) > offset) {
    1546. 

  1546.         call_dissector(data_handle, tvb_new_subset_remaining(tvb, offset), pinfo, tree);
    1547. 

  1547.     }
    1548. 

  1548. } /* dissect_ieee802154_assoc_rsp */
    1549. 

  1549. 

  1550. /*FUNCTION:------------------------------------------------------
    1551. 

  1551.  *  NAME
    1552. 

  1552.  *      dissect_ieee802154_disassoc
    1553. 

  1553.  *  DESCRIPTION
    1554. 

  1554.  *      Command subdissector routine for the Disassociate command.
    1555. 

  1555.  *  PARAMETERS
    1556. 

  1556.  *      tvbuff_t    *tvb            - pointer to buffer containing raw packet.
    1557. 

  1557.  *      packet_info *pinfo          - pointer to packet information fields.
    1558. 

  1558.  *      proto_tree  *tree           - pointer to protocol tree.
    1559. 

  1559.  *      ieee802154_packet *packet   - IEEE 802.15.4 packet information.
    1560. 

  1560.  *  RETURNS
    1561. 

  1561.  *      void
    1562. 

  1562.  *---------------------------------------------------------------
    1563. 

  1563.  */
    1564. 

  1564. static void
    1565. 

  1565. dissect_ieee802154_disassoc(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, ieee802154_packet *packet)
    1566. 

  1566. {
    1567. 

  1567.     proto_tree *subtree = NULL;
    1568. 

  1568.     proto_item *ti;
    1569. 

  1569.     guint8      reason;
    1570. 

  1570. 

  1571.     /* Create a subtree for this command frame. */
    1572. 

  1572.     if (tree) {
    1573. 

  1573.         ti = proto_tree_add_text(tree, tvb, 0, 1, "%s", val_to_str_const(packet->command_id, ieee802154_cmd_names, "Unknown Command"));
    1574. 

  1574.         subtree = proto_item_add_subtree(ti, ett_ieee802154_cmd);
    1575. 

  1575.     }
    1576. 

  1576. 

  1577.     /* Get and display the disassociation reason. */
    1578. 

  1578.     reason = tvb_get_guint8(tvb, 0);
    1579. 

  1579.     if (tree) {
    1580. 

  1580.         ti = proto_tree_add_uint(subtree, hf_ieee802154_disassoc_reason, tvb, 0, 1, reason);
    1581. 

  1581.         switch(reason) {
    1582. 

  1582.             case 0x01:
    1583. 

  1583.                 proto_item_append_text(ti, " (Coordinator requests device to leave)");
    1584. 

  1584.                 break;
    1585. 

  1585. 

  1586.             case 0x02:
    1587. 

  1587.                 proto_item_append_text(ti, " (Device wishes to leave)");
    1588. 

  1588.                 break;
    1589. 

  1589. 

  1590.             default:
    1591. 

  1591.                 proto_item_append_text(ti, " (Reserved)");
    1592. 

  1592.                 break;
    1593. 

  1593.         } /* switch */
    1594. 

  1594.     }
    1595. 

  1595. 

  1596.     if (!pinfo->fd->flags.visited) {
    1597. 

  1597.         /* Update the address tables */
    1598. 

  1598.         if ( packet->dst_addr_mode == IEEE802154_FCF_ADDR_EXT ) {
    1599. 

  1599.             ieee802154_long_addr_invalidate(packet->dst64, pinfo->fd->num);
    1600. 

  1600.         } else if ( packet->dst_addr_mode == IEEE802154_FCF_ADDR_SHORT ) {
    1601. 

  1601.             ieee802154_short_addr_invalidate(packet->dst16, packet->dst_pan, pinfo->fd->num);
    1602. 

  1602.         }
    1603. 

  1603.     }
    1604. 

  1604. 

  1605.     /* Call the data dissector for any leftover bytes. */
    1606. 

  1606.     if (tvb_length(tvb) > 1) {
    1607. 

  1607.         call_dissector(data_handle, tvb_new_subset_remaining(tvb, 1), pinfo, tree);
    1608. 

  1608.     }
    1609. 

  1609. } /* dissect_ieee802154_disassoc */
    1610. 

  1610. 

  1611. /*FUNCTION:------------------------------------------------------
    1612. 

  1612.  *  NAME
    1613. 

  1613.  *      dissect_ieee802154_realign
    1614. 

  1614.  *  DESCRIPTION
    1615. 

  1615.  *      Command subdissector routine for the Coordinator Realignment
    1616. 

  1616.  *      command.
    1617. 

  1617.  *  PARAMETERS
    1618. 

  1618.  *      tvbuff_t    *tvb            - pointer to buffer containing raw packet.
    1619. 

  1619.  *      packet_info *pinfo          - pointer to packet information fields.
    1620. 

  1620.  *      proto_tree  *tree           - pointer to protocol tree.
    1621. 

  1621.  *      ieee802154_packet *packet   - IEEE 802.15.4 packet information.
    1622. 

  1622.  *  RETURNS
    1623. 

  1623.  *      void
    1624. 

  1624.  *---------------------------------------------------------------
    1625. 

  1625.  */
    1626. 

  1626. static void
    1627. 

  1627. dissect_ieee802154_realign(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, ieee802154_packet *packet)
    1628. 

  1628. {
    1629. 

  1629.     proto_tree *subtree = NULL;
    1630. 

  1630.     proto_item *ti;
    1631. 

  1631.     guint16     pan_id;
    1632. 

  1632.     guint16     coord_addr;
    1633. 

  1633.     guint8      channel;
    1634. 

  1634.     guint16     short_addr;
    1635. 

  1635.     guint       offset  = 0;
    1636. 

  1636. 

  1637.     /* Create a subtree for this command frame. */
    1638. 

  1638.     if (tree) {
    1639. 

  1639.         ti = proto_tree_add_text(tree, tvb, offset, 0, "%s", val_to_str_const(packet->command_id, ieee802154_cmd_names, "Unknown Command"));
    1640. 

  1640.         subtree = proto_item_add_subtree(ti, ett_ieee802154_cmd);
    1641. 

  1641.     }
    1642. 

  1642. 

  1643.     /* Get and display the command PAN ID. */
    1644. 

  1644.     pan_id = tvb_get_letohs(tvb, offset);
    1645. 

  1645.     proto_tree_add_uint(subtree, hf_ieee802154_realign_pan, tvb, offset, 2, pan_id);
    1646. 

  1646.     col_append_fstr(pinfo->cinfo, COL_INFO, ", PAN: 0x%04x", pan_id);
    1647. 

  1647.     offset += 2;
    1648. 

  1648. 

  1649.     /* Get and display the coordinator address. */
    1650. 

  1650.     coord_addr = tvb_get_letohs(tvb, offset);
    1651. 

  1651.     proto_tree_add_uint(subtree, hf_ieee802154_realign_caddr, tvb, offset, 2, coord_addr);
    1652. 

  1652.     col_append_fstr(pinfo->cinfo, COL_INFO, ", Coordinator: 0x%04x", coord_addr);
    1653. 

  1653.     offset += 2;
    1654. 

  1654. 

  1655.     /* Get and display the channel. */
    1656. 

  1656.     channel = tvb_get_guint8(tvb, offset);
    1657. 

  1657.     proto_tree_add_uint(subtree, hf_ieee802154_realign_channel, tvb, offset, 1, channel);
    1658. 

  1658.     col_append_fstr(pinfo->cinfo, COL_INFO, ", Channel: %u", channel);
    1659. 

  1659.     offset += 1;
    1660. 

  1660. 

  1661.     /* Get and display the short address. */
    1662. 

  1662.     short_addr = tvb_get_letohs(tvb, offset);
    1663. 

  1663.     if (tree) proto_tree_add_uint(subtree, hf_ieee802154_realign_addr, tvb, offset, 2, short_addr);
    1664. 

  1664.     if ((packet->dst_addr_mode == IEEE802154_FCF_ADDR_EXT)
    1665. 

  1665.         && (short_addr != IEEE802154_NO_ADDR16)) {
    1666. 

  1666.         col_append_fstr(pinfo->cinfo, COL_INFO, ", Addr: 0x%04x", short_addr);
    1667. 

  1667.     }
    1668. 

  1668.     offset += 2;
    1669. 

  1669.     /* Update the address table. */
    1670. 

  1670.     if ((short_addr != IEEE802154_NO_ADDR16) && (packet->dst_addr_mode == IEEE802154_FCF_ADDR_EXT)) {
    1671. 

  1671.         ieee802154_addr_update(&ieee802154_map, short_addr, packet->dst_pan, packet->dst64,
    1672. 

  1672.                 pinfo->current_proto, pinfo->fd->num);
    1673. 

  1673.     }
    1674. 

  1674. 

  1675.     /* Get and display the channel page, if it exists. Added in IEEE802.15.4-2006 */
    1676. 

  1676.     if (tvb_bytes_exist(tvb, offset, 1)) {
    1677. 

  1677.         guint8  channel_page = tvb_get_guint8(tvb, offset);
    1678. 

  1678.         if (tree) proto_tree_add_uint(subtree, hf_ieee802154_realign_channel_page, tvb, offset, 1, channel_page);
    1679. 

  1679.         offset += 1;
    1680. 

  1680.     }
    1681. 

  1681. 

  1682.     /* Fix the length of the command subtree. */
    1683. 

  1683.     if (tree) {
    1684. 

  1684.         proto_item_set_len(subtree, offset);
    1685. 

  1685.     }
    1686. 

  1686. 

  1687.     /* Call the data dissector for any leftover bytes. */
    1688. 

  1688.     if (tvb_length(tvb) > offset) {
    1689. 

  1689.         call_dissector(data_handle, tvb_new_subset_remaining(tvb, offset), pinfo, tree);
    1690. 

  1690.     }
    1691. 

  1691. } /* dissect_ieee802154_realign */
    1692. 

  1692. 

  1693. /*FUNCTION:------------------------------------------------------
    1694. 

  1694.  *  NAME
    1695. 

  1695.  *      dissect_ieee802154_gtsreq
    1696. 

  1696.  *  DESCRIPTION
    1697. 

  1697.  *      Command subdissector routine for the GTS request command.
    1698. 

  1698.  *
    1699. 

  1699.  *      Assumes that COL_INFO will be set to the command name,
    1700. 

  1700.  *      command name will already be appended to the command subtree
    1701. 

  1701.  *      and protocol root. In addition, assumes that the command ID
    1702. 

  1702.  *      has already been parsed.
    1703. 

  1703.  *  PARAMETERS
    1704. 

  1704.  *      tvbuff_t    *tvb            - pointer to buffer containing raw packet.
    1705. 

  1705.  *      packet_info *pinfo          - pointer to packet information fields (unused).
    1706. 

  1706.  *      proto_tree  *tree           - pointer to protocol tree.
    1707. 

  1707.  *      ieee802154_packet *packet   - IEEE 802.15.4 packet information (unused).
    1708. 

  1708.  *  RETURNS
    1709. 

  1709.  *      void
    1710. 

  1710.  *---------------------------------------------------------------
    1711. 

  1711.  */
    1712. 

  1712. static void
    1713. 

  1713. dissect_ieee802154_gtsreq(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, ieee802154_packet *packet)
    1714. 

  1714. {
    1715. 

  1715.     proto_tree *subtree = NULL;
    1716. 

  1716.     proto_item *ti;
    1717. 

  1717.     guint8      characteristics;
    1718. 

  1718.     guint8      length;
    1719. 

  1719.     guint8      direction;
    1720. 

  1720.     guint8      type;
    1721. 

  1721. 

  1722.     /* Create a subtree for this command frame. */
    1723. 

  1723.     if (tree) {
    1724. 

  1724.         ti = proto_tree_add_text(tree, tvb, 0, 1, "%s", val_to_str_const(packet->command_id, ieee802154_cmd_names,
    1725. 

  1725.                                                                          "Unknown Command"));
    1726. 

  1726.         subtree = proto_item_add_subtree(ti, ett_ieee802154_cmd);
    1727. 

  1727.     }
    1728. 

  1728. 

  1729.     /* Get the characteristics field. */
    1730. 

  1730.     characteristics = tvb_get_guint8(tvb, 0);
    1731. 

  1731.     length = characteristics & IEEE802154_CMD_GTS_REQ_LEN;
    1732. 

  1732.     direction = characteristics & IEEE802154_CMD_GTS_REQ_DIR;
    1733. 

  1733.     type = characteristics & IEEE802154_CMD_GTS_REQ_TYPE;
    1734. 

  1734. 

  1735.     /* Display the characteristics field. */
    1736. 

  1736.     if (tree) {
    1737. 

  1737.         proto_tree_add_uint(subtree, hf_ieee802154_gtsreq_len, tvb, 0, 1, length);
    1738. 

  1738.         ti = proto_tree_add_boolean(subtree, hf_ieee802154_gtsreq_dir, tvb, 0, 1, direction);
    1739. 

  1739.         if (direction) proto_item_append_text(ti, " (Receive)");
    1740. 

  1740.         else proto_item_append_text(ti, " (Transmit)");
    1741. 

  1741.         ti = proto_tree_add_boolean(subtree, hf_ieee802154_gtsreq_type, tvb, 0, 1, type);
    1742. 

  1742.         if (type) proto_item_append_text(ti, " (Allocate GTS)");
    1743. 

  1743.         else proto_item_append_text(ti, " (Deallocate GTS)");
    1744. 

  1744.     }
    1745. 

  1745. 

  1746.     /* Call the data dissector for any leftover bytes. */
    1747. 

  1747.     if (tvb_length(tvb) > 1) {
    1748. 

  1748.         call_dissector(data_handle, tvb_new_subset_remaining(tvb, 1), pinfo, tree);
    1749. 

  1749.     }
    1750. 

  1750. } /* dissect_ieee802154_gtsreq */
    1751. 

  1751. 

  1752. /*FUNCTION:------------------------------------------------------
    1753. 

  1753.  *  NAME
    1754. 

  1754.  *      dissect_ieee802154_decrypt
    1755. 

  1755.  *  DESCRIPTION
    1756. 

  1756.  *      IEEE 802.15.4 decryption algorithm. Tries to find the
    1757. 

  1757.  *      appropriate key from the information in the IEEE 802.15.4
    1758. 

  1758.  *      packet structure and dissector config.
    1759. 

  1759.  *
    1760. 

  1760.  *      This function implements the security proceedures for the
    1761. 

  1761.  *      2006 version of the spec only. IEEE 802.15.4-2003 is
    1762. 

  1762.  *      unsupported.
    1763. 

  1763.  *  PARAMETERS
    1764. 

  1764.  *      tvbuff_t *tvb               - IEEE 802.15.4 packet.
    1765. 

  1765.  *      packet_info * pinfo         - Packet info structure.
    1766. 

  1766.  *      guint offset                - Offset where the ciphertext 'c' starts.
    1767. 

  1767.  *      ieee802154_packet *packet   - IEEE 802.15.4 packet information.
    1768. 

  1768.  *      ws_decrypt_status *status   - status of decryption returned through here on failure.
    1769. 

  1769.  *  RETURNS
    1770. 

  1770.  *      tvbuff_t *                  - Decrypted payload.
    1771. 

  1771.  *---------------------------------------------------------------
    1772. 

  1772.  */
    1773. 

  1773. static tvbuff_t *
    1774. 

  1774. dissect_ieee802154_decrypt(tvbuff_t * tvb, guint offset, packet_info * pinfo, ieee802154_packet * packet, ws_decrypt_status * status)
    1775. 

  1775. {
    1776. 

  1776.     tvbuff_t *          ptext_tvb;
    1777. 

  1777.     gboolean            have_mic = FALSE;
    1778. 

  1778.     guint64             srcAddr;
    1779. 

  1779.     unsigned char       key[16];
    1780. 

  1780.     unsigned char       tmp[16];
    1781. 

  1781.     unsigned char       rx_mic[16];
    1782. 

  1782.     guint               M;
    1783. 

  1783.     gint                captured_len;
    1784. 

  1784.     gint                reported_len;
    1785. 

  1785.     ieee802154_hints_t *ieee_hints;
    1786. 

  1786. 

  1787.     /*
    1788. 

  1788.      * Check the version; we only support IEEE 802.15.4-2003 and IEEE 802.15.4-2006.
    1789. 

  1789.      * We must do this first, as, if this isn't IEEE 802.15.4-2003 or IEEE 802.15.4-2006,
    1790. 

  1790.      * we don't have the Auxiliary Security Header, and haven't
    1791. 

  1791.      * filled in the information for it, and none of the stuff
    1792. 

  1792.      * we do afterwards, which uses that information, is doable.
    1793. 

  1793.      */
    1794. 

  1794.     if ((packet->version != IEEE802154_VERSION_2006) && (packet->version != IEEE802154_VERSION_2003)) {
    1795. 

  1795.         *status = DECRYPT_VERSION_UNSUPPORTED;
    1796. 

  1796.         return NULL;
    1797. 

  1797.     }
    1798. 

  1798. 

  1799.     ieee_hints = (ieee802154_hints_t *)p_get_proto_data(pinfo->fd, proto_ieee802154, 0);
    1800. 

  1800. 

  1801.     /* Get the captured and on-the-wire length of the payload. */
    1802. 

  1802.     M = IEEE802154_MIC_LENGTH(packet->security_level);
    1803. 

  1803.     reported_len = tvb_reported_length_remaining(tvb, offset) - IEEE802154_FCS_LEN - M;
    1804. 

  1804.     if (reported_len < 0) {
    1805. 

  1805.         *status = DECRYPT_PACKET_TOO_SMALL;
    1806. 

  1806.         return NULL;
    1807. 

  1807.     }
    1808. 

  1808.     /* Check of the payload is truncated.  */
    1809. 

  1809.     if (tvb_bytes_exist(tvb, offset, reported_len)) {
    1810. 

  1810.         captured_len = reported_len;
    1811. 

  1811.     }
    1812. 

  1812.     else {
    1813. 

  1813.         captured_len = tvb_length_remaining(tvb, offset);
    1814. 

  1814.     }
    1815. 

  1815. 

  1816.     /* Check if the MIC is present in the captured data. */
    1817. 

  1817.     have_mic = tvb_bytes_exist(tvb, offset + reported_len, M);
    1818. 

  1818.     if (have_mic) {
    1819. 

  1819.         tvb_memcpy(tvb, rx_mic, offset + reported_len, M);
    1820. 

  1820.     }
    1821. 

  1821. 

  1822.     /*=====================================================
    1823. 

  1823.      * Key Lookup - Need to find the appropriate key.
    1824. 

  1824.      *=====================================================
    1825. 

  1825.      */
    1826. 

  1826.     /*
    1827. 

  1827.      * Oh God! The specification is so bad. This is the worst
    1828. 

  1828.      * case of design-by-committee I've ever seen in my life.
    1829. 

  1829.      * The IEEE has created an unintelligable mess in order
    1830. 

  1830.      * to decipher which key is used for which message.
    1831. 

  1831.      *
    1832. 

  1832.      * Let's hope it's simpler to implement for dissecting only.
    1833. 

  1833.      *
    1834. 

  1834.      * Also need to find the extended address of the sender.
    1835. 

  1835.      */
    1836. 

  1836.     if (packet->src_addr_mode == IEEE802154_FCF_ADDR_EXT) {
    1837. 

  1837.         /* The source EUI-64 is included in the headers. */
    1838. 

  1838.         srcAddr = packet->src64;
    1839. 

  1839.     }
    1840. 

  1840.     else if (ieee_hints && ieee_hints->map_rec && ieee_hints->map_rec->addr64) {
    1841. 

  1841.         /* Use the hint */
    1842. 

  1842.         srcAddr = ieee_hints->map_rec->addr64;
    1843. 

  1843.     }
    1844. 

  1844.     else {
    1845. 

  1845.         /* Lookup failed.  */
    1846. 

  1846.         *status = DECRYPT_PACKET_NO_EXT_SRC_ADDR;
    1847. 

  1847.         return NULL;
    1848. 

  1848.     }
    1849. 

  1849. 

  1850.     /* Lookup the key. */
    1851. 

  1851.     /*
    1852. 

  1852.      * TODO: What this dissector really needs is a UAT to store multiple keys
    1853. 

  1853.      * and a variety of key configuration data. However, a single shared key
    1854. 

  1854.      * should be sufficient to get packet encryption off to a start.
    1855. 

  1855.      */
    1856. 

  1856.     if (!ieee802154_key_valid) {
    1857. 

  1857.         *status = DECRYPT_PACKET_NO_KEY;
    1858. 

  1858.         return NULL;
    1859. 

  1859.     }
    1860. 

  1860.     memcpy(key, ieee802154_key, IEEE802154_CIPHER_SIZE);
    1861. 

  1861. 

  1862.     /*=====================================================
    1863. 

  1863.      * CCM* - CTR mode payload encryption
    1864. 

  1864.      *=====================================================
    1865. 

  1865.      */
    1866. 

  1866.     /* Create the CCM* initial block for decryption (Adata=0, M=0, counter=0). */
    1867. 

  1867.     ccm_init_block(tmp, FALSE, 0, srcAddr, packet, 0);
    1868. 

  1868. 

  1869.     /* Decrypt the ciphertext, and place the plaintext in a new tvb. */
    1870. 

  1870.     if (IEEE802154_IS_ENCRYPTED(packet->security_level) && captured_len) {
    1871. 

  1871.         guint8 *          text;
    1872. 

  1872.         /*
    1873. 

  1873.          * Make a copy of the ciphertext in heap memory.
    1874. 

  1874.          *
    1875. 

  1875.          * We will decrypt the message in-place and then use the buffer as the
    1876. 

  1876.          * real data for the new tvb.
    1877. 

  1877.          */
    1878. 

  1878.         text = (guint8 *)tvb_memdup(tvb, offset, captured_len);
    1879. 

  1879. 

  1880.         /* Perform CTR-mode transformation. */
    1881. 

  1881.         if (!ccm_ctr_encrypt(key, tmp, rx_mic, text, captured_len)) {
    1882. 

  1882.             g_free(text);
    1883. 

  1883.             *status = DECRYPT_PACKET_DECRYPT_FAILED;
    1884. 

  1884.             return NULL;
    1885. 

  1885.         }
    1886. 

  1886. 

  1887.         /* Create a tvbuff for the plaintext. */
    1888. 

  1888.         ptext_tvb = tvb_new_child_real_data(tvb, text, captured_len, reported_len);
    1889. 

  1889.         tvb_set_free_cb(ptext_tvb, g_free);
    1890. 

  1890.         add_new_data_source(pinfo, ptext_tvb, "Decrypted IEEE 802.15.4 payload");
    1891. 

  1891.         *status = DECRYPT_PACKET_SUCCEEDED;
    1892. 

  1892.     }
    1893. 

  1893.     /* There is no ciphertext. Wrap the plaintext in a new tvb. */
    1894. 

  1894.     else {
    1895. 

  1895.         /* Decrypt the MIC (if present). */
    1896. 

  1896.         if ((have_mic) && (!ccm_ctr_encrypt(key, tmp, rx_mic, NULL, 0))) {
    1897. 

  1897.             *status = DECRYPT_PACKET_DECRYPT_FAILED;
    1898. 

  1898.             return NULL;
    1899. 

  1899.         }
    1900. 

  1900. 

  1901.         /* Create a tvbuff for the plaintext. This might result in a zero-length tvbuff. */
    1902. 

  1902.         ptext_tvb = tvb_new_subset(tvb, offset, captured_len, reported_len);
    1903. 

  1903.         *status = DECRYPT_PACKET_SUCCEEDED;
    1904. 

  1904.     }
    1905. 

  1905. 

  1906.     /*=====================================================
    1907. 

  1907.      * CCM* - CBC-mode message authentication
    1908. 

  1908.      *=====================================================
    1909. 

  1909.      */
    1910. 

  1910.     /* We can only verify the message if the MIC wasn't truncated. */
    1911. 

  1911.     if (have_mic) {
    1912. 

  1912.         unsigned char           dec_mic[16];
    1913. 

  1913.         guint                   l_m = captured_len;
    1914. 

  1914.         guint                   l_a = offset;
    1915. 

  1915. 

  1916.         /* Adjust the lengths of the plantext and additional data if unencrypted. */
    1917. 

  1917.         if (!IEEE802154_IS_ENCRYPTED(packet->security_level)) {
    1918. 

  1918.             l_a += l_m;
    1919. 

  1919.             l_m = 0;
    1920. 

  1920.         }
    1921. 

  1921.         else if ((packet->version == IEEE802154_VERSION_2003) && !ieee802154_extend_auth)
    1922. 

  1922.             l_a -= 5;   /* Exclude Frame Counter (4 bytes) and Key Sequence Counter (1 byte) from authentication data */
    1923. 

  1923. 

  1924. 

  1925.         /* Create the CCM* initial block for authentication (Adata!=0, M!=0, counter=l(m)). */
    1926. 

  1926.         ccm_init_block(tmp, TRUE, M, srcAddr, packet, l_m);
    1927. 

  1927. 

  1928.         /* Compute CBC-MAC authentication tag. */
    1929. 

  1929.         /*
    1930. 

  1930.          * And yes, despite the warning in tvbuff.h, I think tvb_get_ptr is the
    1931. 

  1931.          * right function here since either A) the payload wasn't encrypted, in
    1932. 

  1932.          * which case l_m is zero, or B) the payload was encrypted, and the tvb
    1933. 

  1933.          * already points to contiguous memory, since we just allocated it in
    1934. 

  1934.          * decryption phase.
    1935. 

  1935.          */
    1936. 

  1936.         if (!ccm_cbc_mac(key, tmp, (const gchar *)ep_tvb_memdup(tvb, 0, l_a), l_a, tvb_get_ptr(ptext_tvb, 0, l_m), l_m, dec_mic)) {
    1937. 

  1937.             *status = DECRYPT_PACKET_MIC_CHECK_FAILED;
    1938. 

  1938.         }
    1939. 

  1939.         /* Compare the received MIC with the one we generated. */
    1940. 

  1940.         else if (memcmp(rx_mic, dec_mic, M) != 0) {
    1941. 

  1941.             *status = DECRYPT_PACKET_MIC_CHECK_FAILED;
    1942. 

  1942.         }
    1943. 

  1943.     }
    1944. 

  1944. 

  1945.     /* Done! */
    1946. 

  1946.     return ptext_tvb;
    1947. 

  1947. } /* dissect_ieee802154_decrypt */
    1948. 

  1948. 

  1949. /*FUNCTION:------------------------------------------------------
    1950. 

  1950.  *  NAME
    1951. 

  1951.  *      ccm_init_block
    1952. 

  1952.  *  DESCRIPTION
    1953. 

  1953.  *      Creates the CCM* initial block value for IEEE 802.15.4.
    1954. 

  1954.  *  PARAMETERS
    1955. 

  1955.  *      gchar *block        - Output pointer for the initial block.
    1956. 

  1956.  *      gboolean adata      - TRUE if additional auth data is present
    1957. 

  1957.  *      gint M              - CCM* parameter M.
    1958. 

  1958.  *      guint64 addr        - Source extended address.
    1959. 

  1959.  *      ieee802154_packet *packet - IEEE 802.15.4 packet information.
    1960. 

  1960.  *      guint16 ctr_val     - Value in the last L bytes of the block.
    1961. 

  1961.  *  RETURNS
    1962. 

  1962.  *      void
    1963. 

  1963.  *---------------------------------------------------------------
    1964. 

  1964.  */
    1965. 

  1965. static void
    1966. 

  1966. ccm_init_block(gchar *block, gboolean adata, gint M, guint64 addr, ieee802154_packet * packet, gint ctr_val)
    1967. 

  1967. {
    1968. 

  1968.     gint                i = 0;
    1969. 

  1969. 

  1970.     /* Flags: Reserved(0) || Adata || (M-2)/2 || (L-1) */
    1971. 

  1971.     block[i] = (0x2 - 1); /* (L-1) */
    1972. 

  1972.     if (M > 0) block[i] |= (((M-2)/2) << 3); /* (M-2)/2 */
    1973. 

  1973.     if (adata) block[i] |= (1 << 6); /* Adata */
    1974. 

  1974.     i++;
    1975. 

  1975.     /* 2003 CCM Nonce:  Source Address || Frame Counter || Key Sequence Counter */
    1976. 

  1976.     /* 2006 CCM* Nonce: Source Address || Frame Counter || Security Level */
    1977. 

  1977.     block[i++] = (guint8)((addr >> 56) & 0xff);
    1978. 

  1978.     block[i++] = (guint8)((addr >> 48) & 0xff);
    1979. 

  1979.     block[i++] = (guint8)((addr >> 40) & 0xff);
    1980. 

  1980.     block[i++] = (guint8)((addr >> 32) & 0xff);
    1981. 

  1981.     block[i++] = (guint8)((addr >> 24) & 0xff);
    1982. 

  1982.     block[i++] = (guint8)((addr >> 16) & 0xff);
    1983. 

  1983.     block[i++] = (guint8)((addr >> 8) & 0xff);
    1984. 

  1984.     block[i++] = (guint8)((addr >> 0) & 0xff);
    1985. 

  1985.     block[i++] = (guint8)((packet->frame_counter >> 24) & 0xff);
    1986. 

  1986.     block[i++] = (guint8)((packet->frame_counter >> 16) & 0xff);
    1987. 

  1987.     block[i++] = (guint8)((packet->frame_counter >> 8) & 0xff);
    1988. 

  1988.     block[i++] = (guint8)((packet->frame_counter >> 0) & 0xff);
    1989. 

  1989.     if (packet->version == IEEE802154_VERSION_2003)
    1990. 

  1990.         block[i++] = packet->key_sequence_counter;
    1991. 

  1991.     else
    1992. 

  1992.         block[i++] = packet->security_level;
    1993. 

  1993.     /* Plaintext length. */
    1994. 

  1994.     block[i++] = (guint8)((ctr_val >> 8) & 0xff);
    1995. 

  1995.     block[i] = (guint8)((ctr_val >> 0) & 0xff);
    1996. 

  1996. } /* ccm_init_block */
    1997. 

  1997. 

  1998. /*FUNCTION:------------------------------------------------------
    1999. 

  1999.  *  NAME
    2000. 

  2000.  *      ccm_ctr_encrypt
    2001. 

  2001.  *  DESCRIPTION
    2002. 

  2002.  *      Performs an in-place CTR-mode encryption/decryption.
    2003. 

  2003.  *  PARAMETERS
    2004. 

  2004.  *      const gchar *key    - Encryption Key.
    2005. 

  2005.  *      const gchar *iv     - Counter initial value.
    2006. 

  2006.  *      gchar *mic          - MIC to encrypt/decrypt.
    2007. 

  2007.  *      gchar *data         - Buffer to encrypt/decrypt.
    2008. 

  2008.  *      gint length         - Length of the buffer.
    2009. 

  2009.  *  RETURNS
    2010. 

  2010.  *      gboolean            - TRUE on SUCCESS, FALSE on error.
    2011. 

  2011.  *---------------------------------------------------------------
    2012. 

  2012.  */
    2013. 

  2013. static gboolean
    2014. 

  2014. ccm_ctr_encrypt(const gchar *key _U_, const gchar *iv _U_, gchar *mic _U_, gchar *data _U_, gint length _U_)
    2015. 

  2015. {
    2016. 

  2016. #ifdef HAVE_LIBGCRYPT
    2017. 

  2017.     gcry_cipher_hd_t    cipher_hd;
    2018. 

  2018. 

  2019.     /* Open the cipher. */
    2020. 

  2020.     if (gcry_cipher_open(&cipher_hd, GCRY_CIPHER_AES128, GCRY_CIPHER_MODE_CTR, 0)) {
    2021. 

  2021.         return FALSE;
    2022. 

  2022.     }
    2023. 

  2023. 

  2024.     /* Set the key and initial value. */
    2025. 

  2025.     if (gcry_cipher_setkey(cipher_hd, key, 16)) {
    2026. 

  2026.         gcry_cipher_close(cipher_hd);
    2027. 

  2027.         return FALSE;
    2028. 

  2028.     }
    2029. 

  2029.     if (gcry_cipher_setctr(cipher_hd, iv, 16)) {
    2030. 

  2030.         gcry_cipher_close(cipher_hd);
    2031. 

  2031.         return FALSE;
    2032. 

  2032.     }
    2033. 

  2033. 

  2034.     /* Decrypt the MIC. */
    2035. 

  2035.     if (gcry_cipher_encrypt(cipher_hd, mic, 16, NULL, 0)) {
    2036. 

  2036.         gcry_cipher_close(cipher_hd);
    2037. 

  2037.         return FALSE;
    2038. 

  2038.     }
    2039. 

  2039.     /* Decrypt the payload. */
    2040. 

  2040.     if (gcry_cipher_encrypt(cipher_hd, data, length, NULL, 0)) {
    2041. 

  2041.         gcry_cipher_close(cipher_hd);
    2042. 

  2042.         return FALSE;
    2043. 

  2043.     }
    2044. 

  2044. 

  2045.     /* Done with the cipher. */
    2046. 

  2046.     gcry_cipher_close(cipher_hd);
    2047. 

  2047.     return TRUE;
    2048. 

  2048. #else
    2049. 

  2049.     return FALSE;
    2050. 

  2050. #endif
    2051. 

  2051. } /* ccm_ctr_encrypt */
    2052. 

  2052. 

  2053. /*FUNCTION:------------------------------------------------------
    2054. 

  2054.  *  NAME
    2055. 

  2055.  *      ccm_cbc_mac
    2056. 

  2056.  *  DESCRIPTION
    2057. 

  2057.  *      Generates a CBC-MAC of the decrypted payload and additional
    2058. 

  2058.  *      authentication headers.
    2059. 

  2059.  *  PARAMETERS
    2060. 

  2060.  *      const gchar key     - Encryption Key.
    2061. 

  2061.  *      const gchar iv      - Counter initial value.
    2062. 

  2062.  *      const gchar a       - Additional auth headers.
    2063. 

  2063.  *      gint a_len                  - Length of the additional headers.
    2064. 

  2064.  *      const gchar m       - Plaintext message.
    2065. 

  2065.  *      gint m_len                  - Length of plaintext message.
    2066. 

  2066.  *      gchar *mic          - Output for CBC-MAC.
    2067. 

  2067.  *  RETURNS
    2068. 

  2068.  *      gboolean            - TRUE on SUCCESS, FALSE on error.
    2069. 

  2069.  *---------------------------------------------------------------
    2070. 

  2070.  */
    2071. 

  2071. static gboolean
    2072. 

  2072. ccm_cbc_mac(const gchar *key _U_, const gchar *iv _U_, const gchar *a _U_, gint a_len _U_, const gchar *m _U_, gint m_len _U_, gchar *mic _U_)
    2073. 

  2073. {
    2074. 

  2074. #ifdef HAVE_LIBGCRYPT
    2075. 

  2075.     gcry_cipher_hd_t cipher_hd;
    2076. 

  2076.     guint            i = 0;
    2077. 

  2077.     unsigned char    block[16];
    2078. 

  2078. 

  2079.     /* Open the cipher. */
    2080. 

  2080.     if (gcry_cipher_open(&cipher_hd, GCRY_CIPHER_AES128, GCRY_CIPHER_MODE_CBC, GCRY_CIPHER_CBC_MAC)) return FALSE;
    2081. 

  2081. 

  2082.     /* Set the key. */
    2083. 

  2083.     if (gcry_cipher_setkey(cipher_hd, key, 16)) {
    2084. 

  2084.         gcry_cipher_close(cipher_hd);
    2085. 

  2085.         return FALSE;
    2086. 

  2086.     }
    2087. 

  2087. 

  2088.     /* Process the initial value. */
    2089. 

  2089.     if (gcry_cipher_encrypt(cipher_hd, mic, 16, iv, 16)) {
    2090. 

  2090.         gcry_cipher_close(cipher_hd);
    2091. 

  2091.         return FALSE;
    2092. 

  2092.     }
    2093. 

  2093. 

  2094.     /* Encode L(a) */
    2095. 

  2095.     i = 0;
    2096. 

  2096. #if (GINT_MAX >= (1LL << 32))
    2097. 

  2097.     if (a_len >= (1LL << 32)) {
    2098. 

  2098.         block[i++] = 0xff;
    2099. 

  2099.         block[i++] = 0xff;
    2100. 

  2100.         block[i++] = (a_len >> 56) & 0xff;
    2101. 

  2101.         block[i++] = (a_len >> 48) & 0xff;
    2102. 

  2102.         block[i++] = (a_len >> 40) & 0xff;
    2103. 

  2103.         block[i++] = (a_len >> 32) & 0xff;
    2104. 

  2104.         block[i++] = (a_len >> 24) & 0xff;
    2105. 

  2105.         block[i++] = (a_len >> 16) & 0xff;
    2106. 

  2106.         block[i++] = (a_len >> 8) & 0xff;
    2107. 

  2107.         block[i++] = (a_len >> 0) & 0xff;
    2108. 

  2108.     }
    2109. 

  2109.     else
    2110. 

  2110. #endif
    2111. 

  2111.     if (a_len >= ((1 << 16) - (1 << 8))) {
    2112. 

  2112.         block[i++] = 0xff;
    2113. 

  2113.         block[i++] = 0xfe;
    2114. 

  2114.         block[i++] = (a_len >> 24) & 0xff;
    2115. 

  2115.         block[i++] = (a_len >> 16) & 0xff;
    2116. 

  2116.         block[i++] = (a_len >> 8) & 0xff;
    2117. 

  2117.         block[i++] = (a_len >> 0) & 0xff;
    2118. 

  2118.     }
    2119. 

  2119.     else {
    2120. 

  2120.         block[i++] = (a_len >> 8) & 0xff;
    2121. 

  2121.         block[i++] = (a_len >> 0) & 0xff;
    2122. 

  2122.     }
    2123. 

  2123.     /* Append a to get the first block of input (pad if we encounter the end of a). */
    2124. 

  2124.     while ((i < sizeof(block)) && (a_len-- > 0)) block[i++] = *a++;
    2125. 

  2125.     while (i < sizeof(block)) block[i++] = 0;
    2126. 

  2126. 

  2127.     /* Process the first block of AuthData. */
    2128. 

  2128.     if (gcry_cipher_encrypt(cipher_hd, mic, 16, block, 16)) {
    2129. 

  2129.         gcry_cipher_close(cipher_hd);
    2130. 

  2130.         return FALSE;
    2131. 

  2131.     }
    2132. 

  2132. 

  2133.     /* Transform and process the remainder of a. */
    2134. 

  2134.     while (a_len > 0) {
    2135. 

  2135.         /* Copy and pad. */
    2136. 

  2136.         if ((guint)a_len >= sizeof(block)) memcpy(block, a, sizeof(block));
    2137. 

  2137.         else {memcpy(block, a, a_len); memset(block+a_len, 0, sizeof(block)-a_len);}
    2138. 

  2138.         /* Adjust pointers. */
    2139. 

  2139.         a += sizeof(block);
    2140. 

  2140.         a_len -= (int)sizeof(block);
    2141. 

  2141.         /* Execute the CBC-MAC algorithm. */
    2142. 

  2142.         if (gcry_cipher_encrypt(cipher_hd, mic, 16, block, sizeof(block))) {
    2143. 

  2143.             gcry_cipher_close(cipher_hd);
    2144. 

  2144.             return FALSE;
    2145. 

  2145.         }
    2146. 

  2146.     } /* while */
    2147. 

  2147. 

  2148.     /* Process the message, m. */
    2149. 

  2149.     while (m_len > 0) {
    2150. 

  2150.         /* Copy and pad. */
    2151. 

  2151.         if ((guint)m_len >= sizeof(block)) memcpy(block, m, sizeof(block));
    2152. 

  2152.         else {memcpy(block, m, m_len); memset(block+m_len, 0, sizeof(block)-m_len);}
    2153. 

  2153.         /* Adjust pointers. */
    2154. 

  2154.         m += sizeof(block);
    2155. 

  2155.         m_len -= (int)sizeof(block);
    2156. 

  2156.         /* Execute the CBC-MAC algorithm. */
    2157. 

  2157.         if (gcry_cipher_encrypt(cipher_hd, mic, 16, block, sizeof(block))) {
    2158. 

  2158.             gcry_cipher_close(cipher_hd);
    2159. 

  2159.             return FALSE;
    2160. 

  2160.         }
    2161. 

  2161.     }
    2162. 

  2162. 

  2163.     /* Done with the cipher. */
    2164. 

  2164.     gcry_cipher_close(cipher_hd);
    2165. 

  2165.     return TRUE;
    2166. 

  2166. #else
    2167. 

  2167.     return FALSE;
    2168. 

  2168. #endif
    2169. 

  2169. } /* ccm_cbc_mac */
    2170. 

  2170. 

  2171. /* Key hash function. */
    2172. 

  2172. guint ieee802154_short_addr_hash(gconstpointer key)
    2173. 

  2173. {
    2174. 

  2174.     return (((ieee802154_short_addr *)key)->addr) | (((ieee802154_short_addr *)key)->pan << 16);
    2175. 

  2175. }
    2176. 

  2176. 

  2177. /* Key equal function. */
    2178. 

  2178. gboolean ieee802154_short_addr_equal(gconstpointer a, gconstpointer b)
    2179. 

  2179. {
    2180. 

  2180.     return (((ieee802154_short_addr *)a)->pan == ((ieee802154_short_addr *)b)->pan) &&
    2181. 

  2181.            (((ieee802154_short_addr *)a)->addr == ((ieee802154_short_addr *)b)->addr);
    2182. 

  2182. }
    2183. 

  2183. 

  2184. /* Key hash function. */
    2185. 

  2185. guint ieee802154_long_addr_hash(gconstpointer key)
    2186. 

  2186. {
    2187. 

  2187.     return (guint)(((ieee802154_long_addr *)key)->addr) & 0xFFFFFFFF;
    2188. 

  2188. }
    2189. 

  2189. 

  2190. /* Key equal function. */
    2191. 

  2191. gboolean ieee802154_long_addr_equal(gconstpointer a, gconstpointer b)
    2192. 

  2192. {
    2193. 

  2193.     return (((ieee802154_long_addr *)a)->addr == ((ieee802154_long_addr *)b)->addr);
    2194. 

  2194. }
    2195. 

  2195. 

  2196. /*FUNCTION:------------------------------------------------------
    2197. 

  2197.  *  NAME
    2198. 

  2198.  *      ieee802154_addr_update
    2199. 

  2199.  *  DESCRIPTION
    2200. 

  2200.  *      Creates a record that maps the given short address and pan
    2201. 

  2201.  *      to a long (extended) address.
    2202. 

  2202.  *  PARAMETERS
    2203. 

  2203.  *      guint16 short_addr  - 16-bit short address
    2204. 

  2204.  *      guint16 pan         - 16-bit PAN id
    2205. 

  2205.  *      guint64 long_addr   - 64-bit long (extended) address
    2206. 

  2206.  *      const char *        - Pointer to name of current protocol
    2207. 

  2207.  *      guint               - Frame number this mapping became valid
    2208. 

  2208.  *  RETURNS
    2209. 

  2209.  *      TRUE                - Record was updated
    2210. 

  2210.  *      FALSE               - Couldn't find it
    2211. 

  2211.  *---------------------------------------------------------------
    2212. 

  2212.  */
    2213. 

  2213. ieee802154_map_rec *ieee802154_addr_update(ieee802154_map_tab_t *au_ieee802154_map,
    2214. 

  2214.         guint16 short_addr, guint16 pan, guint64 long_addr, const char *proto, guint fnum)
    2215. 

  2215. {
    2216. 

  2216.     ieee802154_short_addr  addr16;
    2217. 

  2217.     ieee802154_map_rec    *p_map_rec;
    2218. 

  2218.     gpointer               old_key;
    2219. 

  2219. 

  2220.     /* Look up short address hash */
    2221. 

  2221.     addr16.pan = pan;
    2222. 

  2222.     addr16.addr = short_addr;
    2223. 

  2223.     p_map_rec = (ieee802154_map_rec *)g_hash_table_lookup(au_ieee802154_map->short_table, &addr16);
    2224. 

  2224. 

  2225.     /* Update mapping record */
    2226. 

  2226.     if (p_map_rec) {
    2227. 

  2227.         /* record already exists */
    2228. 

  2228.         if ( p_map_rec->addr64 == long_addr ) {
    2229. 

  2229.             /* no change */
    2230. 

  2230.             return p_map_rec;
    2231. 

  2231.         }
    2232. 

  2232.         else {
    2233. 

  2233.             /* mark current mapping record invalid */
    2234. 

  2234.             p_map_rec->end_fnum = fnum;
    2235. 

  2235.         }
    2236. 

  2236.     }
    2237. 

  2237. 

  2238.     /* create a new mapping record */
    2239. 

  2239.     p_map_rec = se_new(ieee802154_map_rec);
    2240. 

  2240.     p_map_rec->proto = proto;
    2241. 

  2241.     p_map_rec->start_fnum = fnum;
    2242. 

  2242.     p_map_rec->end_fnum = 0;
    2243. 

  2243.     p_map_rec->addr64 = long_addr;
    2244. 

  2244. 

  2245.     /* link new mapping record to addr hash tables */
    2246. 

  2246.     if ( g_hash_table_lookup_extended(au_ieee802154_map->short_table, &addr16, &old_key, NULL) ) {
    2247. 

  2247.         /* update short addr hash table, reusing pointer to old key */
    2248. 

  2248.         g_hash_table_insert(au_ieee802154_map->short_table, &old_key, p_map_rec);
    2249. 

  2249.     } else {
    2250. 

  2250.         /* create new hash entry */
    2251. 

  2251.         g_hash_table_insert(au_ieee802154_map->short_table, se_memdup(&addr16, sizeof(addr16)), p_map_rec);
    2252. 

  2252.     }
    2253. 

  2253. 

  2254.     if ( g_hash_table_lookup_extended(au_ieee802154_map->long_table, &long_addr, &old_key, NULL) ) {
    2255. 

  2255.         /* update long addr hash table, reusing pointer to old key */
    2256. 

  2256.         g_hash_table_insert(au_ieee802154_map->long_table, &old_key, p_map_rec);
    2257. 

  2257.     } else {
    2258. 

  2258.         /* create new hash entry */
    2259. 

  2259.         g_hash_table_insert(au_ieee802154_map->long_table, se_memdup(&long_addr, sizeof(long_addr)), p_map_rec);
    2260. 

  2260.     }
    2261. 

  2261. 

  2262.     return p_map_rec;
    2263. 

  2263. } /* ieee802154_addr_update */
    2264. 

  2264. 

  2265. /*FUNCTION:------------------------------------------------------
    2266. 

  2266.  *  NAME
    2267. 

  2267.  *      ieee802154_short_addr_invalidate
    2268. 

  2268.  *  DESCRIPTION
    2269. 

  2269.  *      Marks a mapping record associated with device with short_addr
    2270. 

  2270.  *      as invalid at a certain frame number, typically when a
    2271. 

  2271.  *      dissassociation occurs.
    2272. 

  2272.  *  PARAMETERS
    2273. 

  2273.  *      guint16 short_addr  - 16-bit short address
    2274. 

  2274.  *      guint16 pan         - 16-bit PAN id
    2275. 

  2275.  *      guint               - Frame number when mapping became invalid
    2276. 

  2276.  *  RETURNS
    2277. 

  2277.  *      TRUE                - Record was updated
    2278. 

  2278.  *      FALSE               - Couldn't find it
    2279. 

  2279.  *---------------------------------------------------------------
    2280. 

  2280.  */
    2281. 

  2281. gboolean ieee802154_short_addr_invalidate(guint16 short_addr, guint16 pan, guint fnum)
    2282. 

  2282. {
    2283. 

  2283.     ieee802154_short_addr  addr16;
    2284. 

  2284.     ieee802154_map_rec    *map_rec;
    2285. 

  2285. 

  2286.     addr16.pan = pan;
    2287. 

  2287.     addr16.addr = short_addr;
    2288. 

  2288. 

  2289.     map_rec = (ieee802154_map_rec *)g_hash_table_lookup(ieee802154_map.short_table, &addr16);
    2290. 

  2290.     if ( map_rec ) {
    2291. 

  2291.         /* indicates this mapping is invalid at frame fnum */
    2292. 

  2292.         map_rec->end_fnum = fnum;
    2293. 

  2293.         return TRUE;
    2294. 

  2294.     }
    2295. 

  2295. 

  2296.     return FALSE;
    2297. 

  2297. } /* ieee802154_short_addr_invalidate */
    2298. 

  2298. 

  2299. /*FUNCTION:------------------------------------------------------
    2300. 

  2300.  *  NAME
    2301. 

  2301.  *      ieee802154_long_addr_invalidate
    2302. 

  2302.  *  DESCRIPTION
    2303. 

  2303.  *      Marks a mapping record associated with device with long_addr
    2304. 

  2304.  *      as invalid at a certain frame number, typically when a
    2305. 

  2305.  *      dissassociation occurs.
    2306. 

  2306.  *  PARAMETERS
    2307. 

  2307.  *      guint64 long_addr   - 16-bit short address
    2308. 

  2308.  *      guint               - Frame number when mapping became invalid
    2309. 

  2309.  *  RETURNS
    2310. 

  2310.  *      TRUE                - If record was updated
    2311. 

  2311.  *      FALSE               - If record wasn't updated
    2312. 

  2312.  *---------------------------------------------------------------
    2313. 

  2313.  */
    2314. 

  2314. gboolean ieee802154_long_addr_invalidate(guint64 long_addr, guint fnum)
    2315. 

  2315. {
    2316. 

  2316.     ieee802154_map_rec   *map_rec;
    2317. 

  2317. 

  2318.     map_rec = (ieee802154_map_rec *)g_hash_table_lookup(ieee802154_map.long_table, &long_addr);
    2319. 

  2319.     if ( map_rec ) {
    2320. 

  2320.         /* indicates this mapping is invalid at frame fnum */
    2321. 

  2321.         map_rec->end_fnum = fnum;
    2322. 

  2322.         return TRUE;
    2323. 

  2323.     }
    2324. 

  2324. 

  2325.     return FALSE;
    2326. 

  2326. } /* ieee802154_long_addr_invalidate */
    2327. 

  2327. 

  2328. 

  2329. /*FUNCTION:------------------------------------------------------
    2330. 

  2330.  *  NAME
    2331. 

  2331.  *      proto_init_ieee802154
    2332. 

  2332.  *  DESCRIPTION
    2333. 

  2333.  *      Init routine for the IEEE 802.15.4 dissector. Creates hash
    2334. 

  2334.  *      tables for mapping between 16-bit to 64-bit addresses and
    2335. 

  2335.  *      populates them with static address pairs from a UAT
    2336. 

  2336.  *      preference table.
    2337. 

  2337.  *  PARAMETERS
    2338. 

  2338.  *      none
    2339. 

  2339.  *  RETURNS
    2340. 

  2340.  *      void
    2341. 

  2341.  *---------------------------------------------------------------
    2342. 

  2342.  */
    2343. 

  2343. static void
    2344. 

  2344. proto_init_ieee802154(void)
    2345. 

  2345. {
    2346. 

  2346.     guint       i;
    2347. 

  2347. 

  2348.     /* Destroy hash tables, if they exist. */
    2349. 

  2349.     if (ieee802154_map.short_table)
    2350. 

  2350.         g_hash_table_destroy(ieee802154_map.short_table);
    2351. 

  2351.     if (ieee802154_map.long_table)
    2352. 

  2352.         g_hash_table_destroy(ieee802154_map.long_table);
    2353. 

  2353. 

  2354.     /* Create the hash tables. */
    2355. 

  2355.     ieee802154_map.short_table = g_hash_table_new(ieee802154_short_addr_hash, ieee802154_short_addr_equal);
    2356. 

  2356.     ieee802154_map.long_table = g_hash_table_new(ieee802154_long_addr_hash, ieee802154_long_addr_equal);
    2357. 

  2357.     /* Re-load the hash table from the static address UAT. */
    2358. 

  2358.     for (i=0; (i<num_static_addrs) && (static_addrs); i++) {
    2359. 

  2359.         ieee802154_addr_update(&ieee802154_map,(guint16)static_addrs[i].addr16, (guint16)static_addrs[i].pan,
    2360. 

  2360.                pntoh64(static_addrs[i].eui64), ieee802154_user, IEEE802154_USER_MAPPING);
    2361. 

  2361.     } /* for */
    2362. 

  2362. } /* proto_init_ieee802154 */
    2363. 

  2363. 

  2364. 

  2365. /*FUNCTION:------------------------------------------------------
    2366. 

  2366.  *  NAME
    2367. 

  2367.  *      proto_register_ieee802154
    2368. 

  2368.  *  DESCRIPTION
    2369. 

  2369.  *      IEEE 802.15.4 protocol registration routine.
    2370. 

  2370.  *  PARAMETERS
    2371. 

  2371.  *      none
    2372. 

  2372.  *  RETURNS
    2373. 

  2373.  *      void
    2374. 

  2374.  *---------------------------------------------------------------
    2375. 

  2375.  */
    2376. 

  2376. void proto_register_ieee802154(void)
    2377. 

  2377. {
    2378. 

  2378.     /* Protocol fields  */
    2379. 

  2379.     static hf_register_info hf_phy[] = {
    2380. 

  2380.         /* PHY level */
    2381. 

  2381. 

  2382.         { &hf_ieee802154_nonask_phy_preamble,
    2383. 

  2383.         { "Preamble",                       "wpan-nonask-phy.preamble", FT_UINT32, BASE_HEX, NULL, 0x0,
    2384. 

  2384.             NULL, HFILL }},
    2385. 

  2385. 

  2386.         { &hf_ieee802154_nonask_phy_sfd,
    2387. 

  2387.         { "Start of Frame Delimiter",       "wpan-nonask-phy.sfd", FT_UINT8, BASE_HEX, NULL, 0x0,
    2388. 

  2388.             NULL, HFILL }},
    2389. 

  2389. 

  2390.         { &hf_ieee802154_nonask_phy_length,
    2391. 

  2391.         { "Frame Length",                   "wpan-nonask-phy.frame_length", FT_UINT8, BASE_HEX, NULL,
    2392. 

  2392.             IEEE802154_PHY_LENGTH_MASK, NULL, HFILL }},
    2393. 

  2393.     };
    2394. 

  2394. 

  2395.     static hf_register_info hf[] = {
    2396. 

  2396. 

  2397.         { &hf_ieee802154_frame_length,
    2398. 

  2398.         { "Frame Length",                   "wpan.frame_length", FT_UINT8, BASE_DEC, NULL, 0x0,
    2399. 

  2399.             "Frame Length as reported from lower layer", HFILL }},
    2400. 

  2400. 

  2401.         { &hf_ieee802154_frame_type,
    2402. 

  2402.         { "Frame Type",                     "wpan.frame_type", FT_UINT16, BASE_HEX, VALS(ieee802154_frame_types),
    2403. 

  2403.             IEEE802154_FCF_TYPE_MASK, NULL, HFILL }},
    2404. 

  2404. 

  2405.         { &hf_ieee802154_security,
    2406. 

  2406.         { "Security Enabled",               "wpan.security", FT_BOOLEAN, 16, NULL, IEEE802154_FCF_SEC_EN,
    2407. 

  2407.             "Whether security operations are performed at the MAC layer or not.", HFILL }},
    2408. 

  2408. 

  2409.         { &hf_ieee802154_pending,
    2410. 

  2410.         { "Frame Pending",                  "wpan.pending", FT_BOOLEAN, 16, NULL, IEEE802154_FCF_FRAME_PND,
    2411. 

  2411.             "Indication of additional packets waiting to be transferred from the source device.", HFILL }},
    2412. 

  2412. 

  2413.         { &hf_ieee802154_ack_request,
    2414. 

  2414.         { "Acknowledge Request",            "wpan.ack_request", FT_BOOLEAN, 16, NULL, IEEE802154_FCF_ACK_REQ,
    2415. 

  2415.             "Whether the sender of this packet requests acknowledgement or not.", HFILL }},
    2416. 

  2416. 

  2417.         { &hf_ieee802154_intra_pan,
    2418. 

  2418.         { "Intra-PAN",                      "wpan.intra_pan", FT_BOOLEAN, 16, NULL, IEEE802154_FCF_INTRA_PAN,
    2419. 

  2419.             "Whether this packet originated and terminated within the same PAN or not.", HFILL }},
    2420. 

  2420. 

  2421.         { &hf_ieee802154_seqno,
    2422. 

  2422.         { "Sequence Number",                "wpan.seq_no", FT_UINT8, BASE_DEC, NULL, 0x0,
    2423. 

  2423.             NULL, HFILL }},
    2424. 

  2424. 

  2425.         { &hf_ieee802154_dst_addr_mode,
    2426. 

  2426.         { "Destination Addressing Mode",    "wpan.dst_addr_mode", FT_UINT16, BASE_HEX, VALS(ieee802154_addr_modes),
    2427. 

  2427.             IEEE802154_FCF_DADDR_MASK, NULL, HFILL }},
    2428. 

  2428. 

  2429.         { &hf_ieee802154_src_addr_mode,
    2430. 

  2430.         { "Source Addressing Mode",         "wpan.src_addr_mode", FT_UINT16, BASE_HEX, VALS(ieee802154_addr_modes),
    2431. 

  2431.             IEEE802154_FCF_SADDR_MASK, NULL, HFILL }},
    2432. 

  2432. 

  2433.         { &hf_ieee802154_version,
    2434. 

  2434.         { "Frame Version",                  "wpan.version", FT_UINT16, BASE_DEC, NULL, IEEE802154_FCF_VERSION,
    2435. 

  2435.             NULL, HFILL }},
    2436. 

  2436. 

  2437.         { &hf_ieee802154_dst_panID,
    2438. 

  2438.         { "Destination PAN",                "wpan.dst_pan", FT_UINT16, BASE_HEX, NULL, 0x0,
    2439. 

  2439.             NULL, HFILL }},
    2440. 

  2440. 

  2441.         { &hf_ieee802154_dst16,
    2442. 

  2442.         { "Destination",                    "wpan.dst16", FT_UINT16, BASE_HEX, NULL, 0x0,
    2443. 

  2443.             NULL, HFILL }},
    2444. 

  2444. 

  2445.         { &hf_ieee802154_dst64,
    2446. 

  2446.         { "Destination",                    "wpan.dst64", FT_EUI64, BASE_NONE, NULL, 0x0,
    2447. 

  2447.             NULL, HFILL }},
    2448. 

  2448. 

  2449.         { &hf_ieee802154_src_panID,
    2450. 

  2450.         { "Source PAN",                     "wpan.src_pan", FT_UINT16, BASE_HEX, NULL, 0x0,
    2451. 

  2451.             NULL, HFILL }},
    2452. 

  2452. 

  2453.         { &hf_ieee802154_src16,
    2454. 

  2454.         { "Source",                         "wpan.src16", FT_UINT16, BASE_HEX, NULL, 0x0,
    2455. 

  2455.             NULL, HFILL }},
    2456. 

  2456. 

  2457.         { &hf_ieee802154_src64,
    2458. 

  2458.         { "Extended Source",                "wpan.src64", FT_EUI64, BASE_NONE, NULL, 0x0,
    2459. 

  2459.             NULL, HFILL }},
    2460. 

  2460. 

  2461.         { &hf_ieee802154_src64_origin,
    2462. 

  2462.         { "Origin",                           "wpan.src64.origin", FT_FRAMENUM, BASE_NONE, NULL, 0x0,
    2463. 

  2463.             NULL, HFILL }},
    2464. 

  2464. 

  2465.         { &hf_ieee802154_fcs,
    2466. 

  2466.         { "FCS",                            "wpan.fcs", FT_UINT16, BASE_HEX, NULL, 0x0,
    2467. 

  2467.             NULL, HFILL }},
    2468. 

  2468. 

  2469.         { &hf_ieee802154_rssi,
    2470. 

  2470.         { "RSSI",                           "wpan.rssi", FT_INT8, BASE_DEC, NULL, 0x0,
    2471. 

  2471.             "Received Signal Strength", HFILL }},
    2472. 

  2472. 

  2473.         { &hf_ieee802154_fcs_ok,
    2474. 

  2474.         { "FCS Valid",                      "wpan.fcs_ok", FT_BOOLEAN, BASE_NONE, NULL, 0x0,
    2475. 

  2475.             NULL, HFILL }},
    2476. 

  2476. 

  2477.         { &hf_ieee802154_correlation,
    2478. 

  2478.         { "LQI Correlation Value",          "wpan.correlation", FT_UINT8, BASE_DEC, NULL, 0x0,
    2479. 

  2479.             NULL, HFILL }},
    2480. 

  2480. 

  2481.             /*  Command Frame Specific Fields */
    2482. 

  2482.             /*--------------------------------*/
    2483. 

  2483. 

  2484.         { &hf_ieee802154_cmd_id,
    2485. 

  2485.         { "Command Identifier",         "wpan.cmd", FT_UINT8, BASE_HEX, VALS(ieee802154_cmd_names), 0x0,
    2486. 

  2486.             NULL, HFILL }},
    2487. 

  2487. 

  2488.             /*  Capability Information Fields */
    2489. 

  2489.         { &hf_ieee802154_cinfo_alt_coord,
    2490. 

  2490.         { "Alternate PAN Coordinator",  "wpan.cinfo.alt_coord", FT_BOOLEAN, 8, NULL, IEEE802154_CMD_CINFO_ALT_PAN_COORD,
    2491. 

  2491.             "Whether this device can act as a PAN coordinator or not.", HFILL }},
    2492. 

  2492. 

  2493.         { &hf_ieee802154_cinfo_device_type,
    2494. 

  2494.         { "Device Type",                "wpan.cinfo.device_type", FT_BOOLEAN, 8, NULL, IEEE802154_CMD_CINFO_DEVICE_TYPE,
    2495. 

  2495.             "Whether this device is RFD (reduced-function device) or FFD (full-function device).", HFILL }},
    2496. 

  2496. 

  2497.         { &hf_ieee802154_cinfo_power_src,
    2498. 

  2498.         { "Power Source",               "wpan.cinfo.power_src", FT_BOOLEAN, 8, NULL, IEEE802154_CMD_CINFO_POWER_SRC,
    2499. 

  2499.             "Whether this device is operating on AC/mains or battery power.", HFILL }},
    2500. 

  2500. 

  2501.         { &hf_ieee802154_cinfo_idle_rx,
    2502. 

  2502.         { "Receive On When Idle",       "wpan.cinfo.idle_rx", FT_BOOLEAN, 8, NULL, IEEE802154_CMD_CINFO_IDLE_RX,
    2503. 

  2503.             "Whether this device can receive packets while idle or not.", HFILL }},
    2504. 

  2504. 

  2505.         { &hf_ieee802154_cinfo_sec_capable,
    2506. 

  2506.         { "Security Capability",        "wpan.cinfo.sec_capable", FT_BOOLEAN, 8, NULL, IEEE802154_CMD_CINFO_SEC_CAPABLE,
    2507. 

  2507.             "Whether this device is capable of receiving encrypted packets.", HFILL }},
    2508. 

  2508. 

  2509.         { &hf_ieee802154_cinfo_alloc_addr,
    2510. 

  2510.         { "Allocate Address",           "wpan.cinfo.alloc_addr", FT_BOOLEAN, 8, NULL, IEEE802154_CMD_CINFO_ALLOC_ADDR,
    2511. 

  2511.             "Whether this device wishes to use a 16-bit short address instead of its IEEE 802.15.4 64-bit long address.", HFILL }},
    2512. 

  2512. 

  2513.             /*  Association response fields */
    2514. 

  2514.         { &hf_ieee802154_assoc_addr,
    2515. 

  2515.         { "Short Address",              "wpan.asoc.addr", FT_UINT16, BASE_HEX, NULL, 0x0,
    2516. 

  2516.             "The short address that the device should assume. An address of 0xfffe indicates that the device should use its IEEE 64-bit long address.", HFILL }},
    2517. 

  2517. 

  2518.         { &hf_ieee802154_assoc_status,
    2519. 

  2519.         { "Association Status",         "wpan.assoc.status", FT_UINT8, BASE_HEX, NULL, 0x0,
    2520. 

  2520.             NULL, HFILL }},
    2521. 

  2521. 

  2522.         { &hf_ieee802154_disassoc_reason,
    2523. 

  2523.         { "Disassociation Reason",      "wpan.disassoc.reason", FT_UINT8, BASE_HEX, NULL, 0x0,
    2524. 

  2524.             NULL, HFILL }},
    2525. 

  2525. 

  2526.             /*  Coordinator Realignment fields */
    2527. 

  2527.         { &hf_ieee802154_realign_pan,
    2528. 

  2528.         { "PAN ID",                     "wpan.realign.pan", FT_UINT16, BASE_HEX, NULL, 0x0,
    2529. 

  2529.             "The PAN identifier the coordinator wishes to use for future communication.", HFILL }},
    2530. 

  2530. 

  2531.         { &hf_ieee802154_realign_caddr,
    2532. 

  2532.         { "Coordinator Short Address",  "wpan.realign.addr", FT_UINT16, BASE_HEX, NULL, 0x0,
    2533. 

  2533.             "The 16-bit address the coordinator wishes to use for future communication.", HFILL }},
    2534. 

  2534. 

  2535.         { &hf_ieee802154_realign_channel,
    2536. 

  2536.         { "Logical Channel",            "wpan.realign.channel", FT_UINT8, BASE_DEC, NULL, 0x0,
    2537. 

  2537.             "The logical channel the coordinator wishes to use for future communication.", HFILL }},
    2538. 

  2538. 

  2539.         { &hf_ieee802154_realign_addr,
    2540. 

  2540.         { "Short Address",              "wpan.realign.addr", FT_UINT16, BASE_HEX, NULL, 0x0,
    2541. 

  2541.             "A short-address that the orphaned device shall assume if applicable.", HFILL }},
    2542. 

  2542. 

  2543.         { &hf_ieee802154_realign_channel_page,
    2544. 

  2544.         { "Channel Page",               "wpan.realign.channel_page", FT_UINT8, BASE_DEC, NULL, 0x0,
    2545. 

  2545.             "The logical channel page the coordinator wishes to use for future communication.", HFILL }},
    2546. 

  2546. 

  2547.         { &hf_ieee802154_gtsreq_len,
    2548. 

  2548.         { "GTS Length",                 "wpan.gtsreq.length", FT_UINT8, BASE_DEC, NULL, IEEE802154_CMD_GTS_REQ_LEN,
    2549. 

  2549.             "Number of superframe slots the device is requesting.", HFILL }},
    2550. 

  2550. 

  2551.         { &hf_ieee802154_gtsreq_dir,
    2552. 

  2552.         { "GTS Direction",              "wpan.gtsreq.direction", FT_BOOLEAN, 8, NULL, IEEE802154_CMD_GTS_REQ_DIR,
    2553. 

  2553.             "The direction of traffic in the guaranteed timeslot.", HFILL }},
    2554. 

  2554. 

  2555.         { &hf_ieee802154_gtsreq_type,
    2556. 

  2556.         { "Characteristic Type",        "wpan.gtsreq.type", FT_BOOLEAN, 8, NULL, IEEE802154_CMD_GTS_REQ_TYPE,
    2557. 

  2557.             "Whether this request is to allocate or deallocate a timeslot.", HFILL }},
    2558. 

  2558. 

  2559.             /*  Beacon Frame Specific Fields */
    2560. 

  2560.             /*-------------------------------*/
    2561. 

  2561.         { &hf_ieee802154_beacon_order,
    2562. 

  2562.         { "Beacon Interval",            "wpan.beacon_order", FT_UINT16, BASE_DEC, NULL, IEEE802154_BEACON_ORDER_MASK,
    2563. 

  2563.             "Specifies the transmission interval of the beacons.", HFILL }},
    2564. 

  2564. 

  2565.         { &hf_ieee802154_superframe_order,
    2566. 

  2566.         { "Superframe Interval",        "wpan.superframe_order", FT_UINT16, BASE_DEC, NULL,
    2567. 

  2567.             IEEE802154_SUPERFRAME_ORDER_MASK,
    2568. 

  2568.             "Specifies the length of time the coordinator will interact with the PAN.", HFILL }},
    2569. 

  2569. 

  2570.         { &hf_ieee802154_cap,
    2571. 

  2571.         { "Final CAP Slot",             "wpan.cap", FT_UINT16, BASE_DEC, NULL, IEEE802154_SUPERFRAME_CAP_MASK,
    2572. 

  2572.             "Specifies the final superframe slot used by the CAP.", HFILL }},
    2573. 

  2573. 

  2574.         { &hf_ieee802154_superframe_battery_ext,
    2575. 

  2575.         { "Battery Extension",          "wpan.battery_ext", FT_BOOLEAN, 16, NULL, IEEE802154_BATT_EXTENSION_MASK,
    2576. 

  2576.             "Whether transmissions may not extend past the length of the beacon frame.", HFILL }},
    2577. 

  2577. 

  2578.         { &hf_ieee802154_superframe_coord,
    2579. 

  2579.         { "PAN Coordinator",            "wpan.bcn_coord", FT_BOOLEAN, 16, NULL, IEEE802154_SUPERFRAME_COORD_MASK,
    2580. 

  2580.             "Whether this beacon frame is being transmitted by the PAN coordinator or not.", HFILL }},
    2581. 

  2581. 

  2582.         { &hf_ieee802154_assoc_permit,
    2583. 

  2583.         { "Association Permit",         "wpan.assoc_permit", FT_BOOLEAN, 16, NULL, IEEE802154_ASSOC_PERMIT_MASK,
    2584. 

  2584.             "Whether this PAN is accepting association requests or not.", HFILL }},
    2585. 

  2585. 

  2586.         { &hf_ieee802154_gts_count,
    2587. 

  2587.         { "GTS Descriptor Count",       "wpan.gts.count", FT_UINT8, BASE_DEC, NULL, 0x0,
    2588. 

  2588.             "The number of GTS descriptors present in this beacon frame.", HFILL }},
    2589. 

  2589. 

  2590.         { &hf_ieee802154_gts_permit,
    2591. 

  2591.         { "GTS Permit",                 "wpan.gts.permit", FT_BOOLEAN, BASE_NONE, NULL, 0x0,
    2592. 

  2592.             "Whether the PAN coordinator is accepting GTS requests or not.", HFILL }},
    2593. 

  2593. 

  2594.         { &hf_ieee802154_gts_direction,
    2595. 

  2595.         { "Direction",                  "wpan.gts.direction", FT_BOOLEAN, BASE_NONE, TFS(&ieee802154_gts_direction_tfs), 0x0,
    2596. 

  2596.             "A flag defining the direction of the GTS Slot.", HFILL }},
    2597. 

  2597. 

  2598.         { &hf_ieee802154_pending16,
    2599. 

  2599.         { "Address",                    "wpan.pending16", FT_UINT16, BASE_HEX, NULL, 0x0,
    2600. 

  2600.             "Device with pending data to receive.", HFILL }},
    2601. 

  2601. 

  2602.         { &hf_ieee802154_pending64,
    2603. 

  2603.         { "Address",                    "wpan.pending64", FT_EUI64, BASE_NONE, NULL, 0x0,
    2604. 

  2604.             "Device with pending data to receive.", HFILL }},
    2605. 

  2605. 

  2606.             /* Auxiliary Security Header Fields */
    2607. 

  2607.             /*----------------------------------*/
    2608. 

  2608.         { &hf_ieee802154_security_level,
    2609. 

  2609.         { "Security Level", "wpan.aux_sec.sec_level", FT_UINT8, BASE_HEX, VALS(ieee802154_sec_level_names),
    2610. 

  2610.             IEEE802154_AUX_SEC_LEVEL_MASK, "The Security Level of the frame", HFILL }},
    2611. 

  2611. 

  2612.         { &hf_ieee802154_key_id_mode,
    2613. 

  2613.         { "Key Identifier Mode", "wpan.aux_sec.key_id_mode", FT_UINT8, BASE_HEX, VALS(ieee802154_key_id_mode_names),
    2614. 

  2614.             IEEE802154_AUX_KEY_ID_MODE_MASK,
    2615. 

  2615.             "The scheme to use by the recipient to lookup the key in its key table", HFILL }},
    2616. 

  2616. 

  2617.         { &hf_ieee802154_aux_sec_reserved,
    2618. 

  2618.         { "Reserved", "wpan.aux_sec.reserved", FT_UINT8, BASE_HEX, NULL, IEEE802154_AUX_KEY_RESERVED_MASK,
    2619. 

  2619.             NULL, HFILL }},
    2620. 

  2620. 

  2621.         { &hf_ieee802154_aux_sec_frame_counter,
    2622. 

  2622.         { "Frame Counter", "wpan.aux_sec.frame_counter", FT_UINT32, BASE_DEC, NULL, 0x0,
    2623. 

  2623.             "Frame counter of the originator of the protected frame", HFILL }},
    2624. 

  2624. 

  2625.         { &hf_ieee802154_aux_sec_key_source,
    2626. 

  2626.         { "Key Source", "wpan.aux_sec.key_source", FT_UINT64, BASE_HEX, NULL, 0x0,
    2627. 

  2627.             "Key Source for processing of the protected frame", HFILL }},
    2628. 

  2628. 

  2629.         { &hf_ieee802154_aux_sec_key_index,
    2630. 

  2630.         { "Key Index", "wpan.aux_sec.key_index", FT_UINT8, BASE_HEX, NULL, 0x0,
    2631. 

  2631.             "Key Index for processing of the protected frame", HFILL }},
    2632. 

  2632. 

  2633.             /* IEEE 802.15.4-2003 Security Header Fields */
    2634. 

  2634.         { &hf_ieee802154_sec_frame_counter,
    2635. 

  2635.         { "Frame Counter", "wpan.sec_frame_counter", FT_UINT32, BASE_HEX, NULL, 0x0,
    2636. 

  2636.             "Frame counter of the originator of the protected frame (802.15.4-2003)", HFILL }},
    2637. 

  2637. 

  2638.         { &hf_ieee802154_sec_key_sequence_counter,
    2639. 

  2639.         { "Key Sequence Counter", "wpan.sec_key_sequence_counter", FT_UINT8, BASE_HEX, NULL, 0x0,
    2640. 

  2640.             "Key Sequence counter of the originator of the protected frame (802.15.4-2003)", HFILL }}
    2641. 

  2641.     };
    2642. 

  2642. 

  2643.     /* Subtrees */
    2644. 

  2644.     static gint *ett[] = {
    2645. 

  2645.         &ett_ieee802154_nonask_phy,
    2646. 

  2646.         &ett_ieee802154_nonask_phy_phr,
    2647. 

  2647.         &ett_ieee802154,
    2648. 

  2648.         &ett_ieee802154_fcf,
    2649. 

  2649.         &ett_ieee802154_auxiliary_security,
    2650. 

  2650.         &ett_ieee802154_aux_sec_control,
    2651. 

  2651.         &ett_ieee802154_aux_sec_key_id,
    2652. 

  2652.         &ett_ieee802154_fcs,
    2653. 

  2653.         &ett_ieee802154_cmd,
    2654. 

  2654.         &ett_ieee802154_superframe,
    2655. 

  2655.         &ett_ieee802154_gts,
    2656. 

  2656.         &ett_ieee802154_gts_direction,
    2657. 

  2657.         &ett_ieee802154_gts_descriptors,
    2658. 

  2658.         &ett_ieee802154_pendaddr
    2659. 

  2659.     };
    2660. 

  2660. 

  2661.     /* Preferences. */
    2662. 

  2662.     module_t *ieee802154_module;
    2663. 

  2663. 

  2664.     static uat_field_t addr_uat_flds[] = {
    2665. 

  2665.         UAT_FLD_HEX(addr_uat,addr16,"Short Address",
    2666. 

  2666.                 "16-bit short address in hexadecimal."),
    2667. 

  2667.         UAT_FLD_HEX(addr_uat,pan,"PAN Identifier",
    2668. 

  2668.                 "16-bit PAN identifier in hexadecimal."),
    2669. 

  2669.         UAT_FLD_BUFFER(addr_uat,eui64,"EUI-64",
    2670. 

  2670.                 "64-bit extended unique identifier."),
    2671. 

  2671.         UAT_END_FIELDS
    2672. 

  2672.     };
    2673. 

  2673. 

  2674.     /* Register the init routine. */
    2675. 

  2675.     register_init_routine(proto_init_ieee802154);
    2676. 

  2676. 

  2677.     /*  Register Protocol name and description. */
    2678. 

  2678.     proto_ieee802154 = proto_register_protocol("IEEE 802.15.4 Low-Rate Wireless PAN", "IEEE 802.15.4",
    2679. 

  2679.            IEEE802154_PROTOABBREV_WPAN);
    2680. 

  2680.     proto_ieee802154_nonask_phy = proto_register_protocol("IEEE 802.15.4 Low-Rate Wireless PAN non-ASK PHY",
    2681. 

  2681.             "IEEE 802.15.4 non-ASK PHY", "wpan-nonask-phy");
    2682. 

  2682. 

  2683.     /*  Register header fields and subtrees. */
    2684. 

  2684.     proto_register_field_array(proto_ieee802154, hf, array_length(hf));
    2685. 

  2685.     proto_register_field_array(proto_ieee802154, hf_phy, array_length(hf_phy));
    2686. 

  2686. 

  2687.     proto_register_subtree_array(ett, array_length(ett));
    2688. 

  2688. 

  2689.     /* add a user preference to set the 802.15.4 ethertype */
    2690. 

  2690.     ieee802154_module = prefs_register_protocol(proto_ieee802154,
    2691. 

  2691.                                    proto_reg_handoff_ieee802154);
    2692. 

  2692.     prefs_register_uint_preference(ieee802154_module, "802154_ethertype",
    2693. 

  2693.                                    "802.15.4 Ethertype (in hex)",
    2694. 

  2694.                                    "(Hexadecimal) Ethertype used to indicate IEEE 802.15.4 frame.",
    2695. 

  2695.                                    16, &ieee802154_ethertype);
    2696. 

  2696.     prefs_register_bool_preference(ieee802154_module, "802154_cc24xx",
    2697. 

  2697.                                    "TI CC24xx FCS format",
    2698. 

  2698.                                    "Set if the FCS field is in TI CC24xx format.",
    2699. 

  2699.                                    &ieee802154_cc24xx);
    2700. 

  2700.     prefs_register_bool_preference(ieee802154_module, "802154_fcs_ok",
    2701. 

  2701.                                    "Dissect only good FCS",
    2702. 

  2702.                                    "Dissect payload only if FCS is valid.",
    2703. 

  2703.                                    &ieee802154_fcs_ok);
    2704. 

  2704. 

  2705.     /* Create a UAT for static address mappings. */
    2706. 

  2706.     static_addr_uat = uat_new("Static Addresses",
    2707. 

  2707.             sizeof(static_addr_t),      /* record size */
    2708. 

  2708.             "802154_addresses",         /* filename */
    2709. 

  2709.             TRUE,                       /* from_profile */
    2710. 

  2710.             (void**)&static_addrs,      /* data_ptr */
    2711. 

  2711.             &num_static_addrs,          /* numitems_ptr */
    2712. 

  2712.             UAT_AFFECTS_DISSECTION,     /* affects dissection of packets, but not set of named fields */
    2713. 

  2713.             NULL,                       /* help */
    2714. 

  2714.             NULL,                       /* copy callback */
    2715. 

  2715.             addr_uat_update_cb,         /* update callback */
    2716. 

  2716.             NULL,                       /* free callback */
    2717. 

  2717.             NULL,                       /* post update callback */
    2718. 

  2718.             addr_uat_flds);             /* UAT field definitions */
    2719. 

  2719.     prefs_register_uat_preference(ieee802154_module, "static_addr",
    2720. 

  2720.                 "Static Addresses",
    2721. 

  2721.                 "A table of static address mappings between 16-bit short addressing and EUI-64 addresses",
    2722. 

  2722.                 static_addr_uat);
    2723. 

  2723. 

  2724.     /* Register preferences for a decryption key */
    2725. 

  2725.     /* TODO: Implement a UAT for multiple keys, and with more advanced key management. */
    2726. 

  2726.     prefs_register_string_preference(ieee802154_module, "802154_key", "Decryption key",
    2727. 

  2727.             "128-bit decryption key in hexadecimal format", (const char **)&ieee802154_key_str);
    2728. 

  2728. 

  2729.     prefs_register_enum_preference(ieee802154_module, "802154_sec_suite",
    2730. 

  2730.                                    "Security Suite (802.15.4-2003)",
    2731. 

  2731.                                    "Specifies the security suite to use for 802.15.4-2003 secured frames"
    2732. 

  2732.                                    " (only supported suites are listed). Option ignored for 802.15.4-2006"
    2733. 

  2733.                                    " and unsecured frames.",
    2734. 

  2734.                                    &ieee802154_sec_suite, ieee802154_2003_sec_suite_enums, FALSE);
    2735. 

  2735. 

  2736.     prefs_register_bool_preference(ieee802154_module, "802154_extend_auth",
    2737. 

  2737.                                    "Extend authentication data (802.15.4-2003)",
    2738. 

  2738.                                    "Set if the manufacturer extends the authentication data with the"
    2739. 

  2739.                                    " security header. Option ignored for 802.15.4-2006 and unsecured frames.",
    2740. 

  2740.                                    &ieee802154_extend_auth);
    2741. 

  2741. 

  2742.     /* Register the subdissector list */
    2743. 

  2743.     register_heur_dissector_list(IEEE802154_PROTOABBREV_WPAN, &ieee802154_heur_subdissector_list);
    2744. 

  2744. 

  2745.     /*  Register dissectors with Wireshark. */
    2746. 

  2746.     register_dissector(IEEE802154_PROTOABBREV_WPAN, dissect_ieee802154, proto_ieee802154);
    2747. 

  2747.     register_dissector("wpan_nofcs", dissect_ieee802154_nofcs, proto_ieee802154);
    2748. 

  2748.     register_dissector("wpan_cc24xx", dissect_ieee802154_cc24xx, proto_ieee802154);
    2749. 

  2749.     register_dissector("wpan-nonask-phy", dissect_ieee802154_nonask_phy, proto_ieee802154_nonask_phy);
    2750. 

  2750. } /* proto_register_ieee802154 */
    2751. 

  2751. 

  2752. 

  2753. /*FUNCTION:------------------------------------------------------
    2754. 

  2754.  *  NAME
    2755. 

  2755.  *      proto_reg_handoff_ieee802154
    2756. 

  2756.  *  DESCRIPTION
    2757. 

  2757.  *      Registers the IEEE 802.15.4 dissector with Wireshark.
    2758. 

  2758.  *      Will be called every time 'apply' is pressed in the preferences menu.
    2759. 

  2759.  *       as well as during Wireshark initialization
    2760. 

  2760.  *  PARAMETERS
    2761. 

  2761.  *      none
    2762. 

  2762.  *  RETURNS
    2763. 

  2763.  *      void
    2764. 

  2764.  *---------------------------------------------------------------
    2765. 

  2765.  */
    2766. 

  2766. void proto_reg_handoff_ieee802154(void)
    2767. 

  2767. {
    2768. 

  2768.     static gboolean            prefs_initialized = FALSE;
    2769. 

  2769.     static dissector_handle_t  ieee802154_handle;
    2770. 

  2770.     static dissector_handle_t  ieee802154_nonask_phy_handle;
    2771. 

  2771.     static dissector_handle_t  ieee802154_nofcs_handle;
    2772. 

  2772.     static unsigned int        old_ieee802154_ethertype;
    2773. 

  2773.     GByteArray                *bytes;
    2774. 

  2774.     gboolean                   res;
    2775. 

  2775. 

  2776.     if (!prefs_initialized){
    2777. 

  2777.         /* Get the dissector handles. */
    2778. 

  2778.         ieee802154_handle   = find_dissector(IEEE802154_PROTOABBREV_WPAN);
    2779. 

  2779.         ieee802154_nonask_phy_handle = find_dissector("wpan-nonask-phy");
    2780. 

  2780.         ieee802154_nofcs_handle = find_dissector("wpan_nofcs");
    2781. 

  2781.         data_handle         = find_dissector("data");
    2782. 

  2782. 

  2783.         dissector_add_uint("wtap_encap", WTAP_ENCAP_IEEE802_15_4, ieee802154_handle);
    2784. 

  2784.         dissector_add_uint("wtap_encap", WTAP_ENCAP_IEEE802_15_4_NONASK_PHY, ieee802154_nonask_phy_handle);
    2785. 

  2785.         dissector_add_uint("wtap_encap", WTAP_ENCAP_IEEE802_15_4_NOFCS, ieee802154_nofcs_handle);
    2786. 

  2786.         dissector_add_uint("sll.ltype", LINUX_SLL_P_IEEE802154, ieee802154_handle);
    2787. 

  2787. 

  2788.         prefs_initialized = TRUE;
    2789. 

  2789.     } else {
    2790. 

  2790.         dissector_delete_uint("ethertype", old_ieee802154_ethertype, ieee802154_handle);
    2791. 

  2791.     }
    2792. 

  2792. 

  2793.     old_ieee802154_ethertype = ieee802154_ethertype;
    2794. 

  2794. 

  2795.     /* Get the IEEE 802.15.4 decryption key. */
    2796. 

  2796.     bytes = g_byte_array_new();
    2797. 

  2797.     res = hex_str_to_bytes(ieee802154_key_str, bytes, FALSE);
    2798. 

  2798.     ieee802154_key_valid =  (res && bytes->len >= IEEE802154_CIPHER_SIZE);
    2799. 

  2799.     if (ieee802154_key_valid) {
    2800. 

  2800.         memcpy(ieee802154_key, bytes->data, IEEE802154_CIPHER_SIZE);
    2801. 

  2801.     }
    2802. 

  2802.     g_byte_array_free(bytes, TRUE);
    2803. 

  2803. 

  2804.     /* Register dissector handles. */
    2805. 

  2805.     dissector_add_uint("ethertype", ieee802154_ethertype, ieee802154_handle);
    2806. 

  2806. } /* proto_reg_handoff_ieee802154 */
    2807. 

  2807.