Field information of struct `qitem_lte_rrc`
See original GitHub issueI am reading the fuzz task for LTE RRC, and I have some questions about the queue item structure used in this fuzzer.
- What are the possible valid values for the field
pdu_type
? - Does the field
asn_pl
follows the following ASN1 format fromRRCConnectionReconfiguration
payload? source
RRCConnectionReconfiguration ::= SEQUENCE {
rrc-TransactionIdentifier RRC-TransactionIdentifier,
criticalExtensions CHOICE {
c1 CHOICE{
rrcConnectionReconfiguration-r8 RRCConnectionReconfiguration-r8-IEs,
spare7 NULL,
spare6 NULL, spare5 NULL, spare4 NULL,
spare3 NULL, spare2 NULL, spare1 NULL
},
criticalExtensionsFuture SEQUENCE {}
}
}
Can you provide an example queue item?
Issue Analytics
- State:
- Created 2 years ago
- Comments:5 (2 by maintainers)
Top Results From Across the Web
How to access a field of a struct by indexing? - MATLAB Central
I have a 1-by-1 struct that possesses 3 fields named B, C, and D. Is there any way to call D by its...
Read more >How do you find out the fields and properties of a struct?
An inspector provides access to structure fields and structure type information without the normal field accessors and mutators.
Read more >Structures in Go (structs). Unlike traditional Object Oriented…
Struct gives one more ability to add meta-data to its fields. Usually, it is used to provide transformation information on how a struct...
Read more >C - Structures - Tutorialspoint
C - Structures, Arrays allow to define type of variables that can hold several data items of the same kind. Similarly structure is...
Read more >5.1 Defining Structure Types: struct - Racket Documentation
A struct form with n fields defines up to 4+2n names: ... a transformer binding that encapsulates information about the structure type declaration....
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Unfortunately, it’s a bit more complex in this scenario. There are two important things to consider here
SYM_LTERRC_INT_MOB_CMD_HO_FROM_IRAT_MSG_ID
in PatternDB.LTERRC_INT_MOB_CMD_HO_FROM_IRAT_MSG_ID
- unfortunately, the payload for messages of this type behave differently from whatsend_rrc
expect.We never really injected
LTERRC_INT_MOB_CMD_HO_FROM_IRAT_MSG_ID
from guestlink, but I did some experiment and the things below should work. This is following the message description as described in the source code for the fuzz task.Running above code from the console results, on my end, to the following output:
Note that it attempts ASN decoding, but fails, as the wrong PDU for your payload was set. (Looking at the look, pdu 0 seems to encode
RRCConnectionReestablishmentReject
messages.) Hope this helps!//edit: Also, we would happily accept a PR which extends guest-link with a
send_rrc_radio(pdu, pl)
function 😃How do you access the firmware DBG messages while running in Console mode? The documentation does not make this clear.