Ethereal-dev: Re: [Ethereal-dev] DCERPC-LSA

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Pia Sahlberg" <piabar@xxxxxxxxxxx>
Date: Tue, 23 Apr 2002 08:27:53 +0000
NT 3.51, from the Session Setup AndX response from the machine sending
the NETSAMDELTAS reply with the problem.

Code that pays attention to the "Offset to owner SID" field's value in
an NT Security Descriptor dissects that SID correctly; code that >doesn't
mis-dissects it.  The same applies to the "Offset to group SID" field's
value.

Ok.
My fault. Sorry for adding this bug and thanks for fixing it.
The reason I changed it was that lsa-muddle.idl had it as an NDR representation and I loosened the constraint of the pointers to check for non-NULL and ignoring the actual offset value in order to be compatible with the NDR implementation. (according to the idl file i had). I did not expect it would break anything. This was wrong apparently.


Just out of curiosity, when the buggy version misdissected the packet, did it do this because of the pointed-to structures coming in different orders than the pointer appeared in the encapsulating structure or was it due to padding-bytes appearing in the bytestream thus offsetting the dissection?

thanks,
  ronnie sahlberg





_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.