mseven

import "github.com/TheManticoreProject/Manticore/windows/protocols/ms-even"

Index

• type IELF_HANDLE
• type RPC_CLIENT_ID
• type RPC_STRING
• type RULONG

type IELF\_HANDLE

IELF_HANDLE is an RPC context handle: 20 bytes ([MS-RPCE] 2.3.2.2, [MS-EVEN]).

type IELF_HANDLE [20]byte

type RPC\_CLIENT\_ID

RPC_CLIENT_ID identifies a client process/thread pair ([MS-EVEN] 2.2.6). Both members are scalar unsigned longs; there are no pointers or arrays.

type RPC_CLIENT_ID struct {
    UniqueProcess ndr.DWORD
    UniqueThread  ndr.DWORD
}

type RPC\_STRING

RPC_STRING is a counted ASCII string ([MS-EVEN] 2.2.7). Length and MaximumLength are byte counts; Buffer is a unique pointer to a conformant-varying char array ([size_is(MaximumLength), length_is(Length)] char*), so it is tagged unique,varying — the NDR max_count/offset/actual_count words travel with the array itself.

type RPC_STRING struct {
    Length        uint16
    MaximumLength uint16
    Buffer        []byte `ndr:"unique,varying"`
}

type RULONG

RULONG is a range-restricted unsigned long ([MS-EVEN] 2.2.4: [range(0, MAX_BATCH_BUFF)] unsigned long). It is the type of the NumberOfBytesToRead argument to ElfrReadELW/ElfrReadELA. On the wire it is a plain 4-octet NDR unsigned long; the range is a server-side validation bound.

type RULONG ndr.DWORD