Skip to content

fix(internet): a cut IGMPv3 message parsed directly does not rebuild as captured #2660

Closed

Description

@JarryShaw

IGMPv3(raw, len(raw)) on octets cut short does not rebuild as captured, for both Reports and Queries. The short read is recorded only on the nested schema, so keep_short_read never carries it to the layer. Parsing through IPv4 is not affected, because there the declared length reaches the schema. The #2650 worker found this, and it has not been reproduced independently.

To do: reproduce on main with #2650 merged, carry the nested schema's short-read marker up so a direct parse rebuilds exactly, and test both message types.

Blocked on #2650's PR, which owns igmpv3.py and its schema. Unblocks when that PR merges.

Activity

  1. added this to the PyPCAPKit v1.6 milestone on Nov 2, 2026
  2. added
    bugIssues reporting a defect (set by the bug report template; a default, not an assessment)
    blockedDeferred pending another issue or decision; see the last comment for what unblocks it
    on Nov 2, 2026
  3. moved this to Blocked in PyPCAPKiton Nov 2, 2026
  4. JarryShaw commented on Nov 2, 2026

    @JarryShaw
    OwnerAuthor

    #2662 has merged, so the IGMPv3 short-read handling is on main. Unblocked. A worker is lifting the nested schema's short-read marker, so a direct parse of a cut message rebuilds as captured.

  5. added
    wipWork in flight - a covering PR is open or an agent is actively on it
    and removed
    blockedDeferred pending another issue or decision; see the last comment for what unblocks it
    on Nov 2, 2026
  6. moved this from Blocked to WIP in PyPCAPKiton Nov 2, 2026
  7. JarryShaw commented on Nov 2, 2026

    @JarryShaw
    OwnerAuthor

    The PR is #2672.

  8. removed
    wipWork in flight - a covering PR is open or an agent is actively on it
    on Nov 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugIssues reporting a defect (set by the bug report template; a default, not an assessment)

    Projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions