tree 40514171ffaa2a2ef0148324496cd2e2748a1677
parent 9723789d08fce61123c56a67208f5bd5fc7ae807
author Sui Chen <suichen@google.com> 1599770886 -0700
committer Sui Chen <suichen@google.com> 1601656003 -0700

dbus-pcap: Parse headers of large messages

When encountering a large message that got truncated, instead of
raising a MalformedPacketError and completely ignoring the message,
parse as much as possible (in this case, its header) so that it can
still be used for certain purposes, such as to match method calls and
method returns.

Tested: compared against WireShark outputs (WireShark is able to handle
truncated messages) and manually inspecting parsed results.

One example message:
  CookedMessage(header=CookedHeader(fixed=FixedHeader(endian=108, type=2,
  flags=1, version=1, length=125272, cookie=3543),
  fields=[Field(type=<MessageFieldType.REPLY_SERIAL: 5>, data=2),
  Field(type=<MessageFieldType.DESTINATION: 6>, data=':1.1145'),
  Field(type=<MessageFieldType.SIGNATURE: 8>, data='a{oa{sa{sv}}}'),
  Field(type=<MessageFieldType.SENDER: 7>, data=':1.628')]), body=[])

Signed-off-by: Sui Chen <suichen@google.com>
Change-Id: Ie415735aef2b1c0bf6f27c509684964ccd87d1d9