The Manticore Project
GitHub Discord Get Started
Generated from Manticore v1.1.6 • 388 packages. View on pkg.go.dev

mseven6

import "github.com/TheManticoreProject/Manticore/windows/protocols/ms-even6"

Index

type BooleanArray

BooleanArray ([MS-EVEN6]). Generated by tools/idlgen; verify pointer/array tags.

type BooleanArray struct {
    Count ndr.DWORD
    Ptr   []bool `ndr:"unique,size_is=Count"`
}

type CONTEXT\_HANDLE

CONTEXT_HANDLE is the generic 20-octet RPC context handle ([MS-RPCE] 2.3.2.2) used by EvtRpcClose. The IDL types it as an [in, out] context_handle void**, so it accepts any of the interface’s typed handles (log query, log handle, operation control, subscription, …); callers convert their typed [20]byte handle to this type. It is transmitted inline (no referent id), matching every other context handle in this interface.

type CONTEXT_HANDLE [20]byte

type EvtRpcAssertConfigFlags

EvtRpcAssertConfigFlags is a [v1_enum] NDR enum ([MS-EVEN6] 2.2.5), transmitted as a 32-bit value ([C706] 14.3.6: v1_enum enumerations are sent as unsigned long, not the default 16-bit form).

type EvtRpcAssertConfigFlags uint32

const (
    EvtRpcChannelPath   EvtRpcAssertConfigFlags = 0
    EvtRpcPublisherName EvtRpcAssertConfigFlags = 1
)

type EvtRpcQueryChannelInfo

EvtRpcQueryChannelInfo ([MS-EVEN6]). Generated by tools/idlgen; verify pointer/array tags.

type EvtRpcQueryChannelInfo struct {
    Name   *ndr.WSTR `ndr:"unique"`
    Status ndr.DWORD
}

type EvtRpcVariant

EvtRpcVariant ([MS-EVEN6] 2.2.6) carries a tagged value. Type is the discriminant (a [v1_enum], 32-bit) and Flags a bitmask; Field is the switch_is(type) union. Set both Type and Field.Tag to the same EvtRpcVariantType before marshalling — this codec transmits the union discriminant inline as well (see network/dcerpc/ndr/union.go).

type EvtRpcVariant struct {
    Type  EvtRpcVariantType
    Flags ndr.DWORD
    Field EvtRpcVariant_Field
}

type EvtRpcVariantList

EvtRpcVariantList ([MS-EVEN6]). Generated by tools/idlgen; verify pointer/array tags.

type EvtRpcVariantList struct {
    Count ndr.DWORD
    Props []EvtRpcVariant `ndr:"unique,size_is=Count"`
}

type EvtRpcVariantType

EvtRpcVariantType is a [v1_enum] NDR enum ([MS-EVEN6] 2.2.4), transmitted as a 32-bit value ([C706] 14.3.6: v1_enum enumerations are sent as unsigned long, not the default 16-bit form).

type EvtRpcVariantType uint32

const (
    EvtRpcVarTypeNull         EvtRpcVariantType = 0
    EvtRpcVarTypeBoolean      EvtRpcVariantType = 1
    EvtRpcVarTypeUInt32       EvtRpcVariantType = 2
    EvtRpcVarTypeUInt64       EvtRpcVariantType = 3
    EvtRpcVarTypeString       EvtRpcVariantType = 4
    EvtRpcVarTypeGuid         EvtRpcVariantType = 5
    EvtRpcVarTypeBooleanArray EvtRpcVariantType = 6
    EvtRpcVarTypeUInt32Array  EvtRpcVariantType = 7
    EvtRpcVarTypeUInt64Array  EvtRpcVariantType = 8
    EvtRpcVarTypeStringArray  EvtRpcVariantType = 9
    EvtRpcVarTypeGuidArray    EvtRpcVariantType = 10
)

type EvtRpcVariant\_Field

EvtRpcVariant_Field is the switch_is(type) union of EvtRpcVariant ([MS-EVEN6] 2.2.6). The discriminant Tag precedes the selected arm ([C706] 14.3.8) and is a 32-bit value matching the v1_enum EvtRpcVariantType. The stringVal and guidVal arms are unique pointers under pointer_default(unique); the *Array arms are inline counted-array structures.

type EvtRpcVariant_Field struct {
    Tag          ndr.DWORD    `ndr:"switch"`
    NullVal      int32        `ndr:"case=0"`
    BooleanVal   bool         `ndr:"case=1"`
    Uint32Val    ndr.DWORD    `ndr:"case=2"`
    Uint64Val    uint64       `ndr:"case=3"`
    StringVal    *ndr.WSTR    `ndr:"case=4,unique"`
    GuidVal      *msdtyp.GUID `ndr:"case=5,unique"`
    BooleanArray BooleanArray `ndr:"case=6"`
    Uint32Array  UInt32Array  `ndr:"case=7"`
    Uint64Array  UInt64Array  `ndr:"case=8"`
    StringArray  StringArray  `ndr:"case=9"`
    GuidArray    GuidArray    `ndr:"case=10"`
}

type GuidArray

GuidArray ([MS-EVEN6] 2.2.9) is a counted array of GUIDs. Ptr is a unique pointer to a conformant array whose length is Count. The element is msdtyp.GUID (16 octets: Data1/2/3 + Data4[8]); windows/guid.GUID must not be used on the wire — its uint64 tail marshals to 24 bytes under NDR.

type GuidArray struct {
    Count ndr.DWORD
    Ptr   []msdtyp.GUID `ndr:"unique,size_is=Count"`
}

type PCONTEXT\_HANDLE\_EVENT\_METADATA\_ENUM

PCONTEXT_HANDLE_EVENT_METADATA_ENUM is an RPC context handle: 20 bytes ([MS-RPCE] 2.3.2.2, [MS-EVEN6]).

type PCONTEXT_HANDLE_EVENT_METADATA_ENUM [20]byte

type PCONTEXT\_HANDLE\_LOG\_HANDLE

PCONTEXT_HANDLE_LOG_HANDLE is an RPC context handle: 20 bytes ([MS-RPCE] 2.3.2.2, [MS-EVEN6]).

type PCONTEXT_HANDLE_LOG_HANDLE [20]byte

type PCONTEXT\_HANDLE\_LOG\_QUERY

PCONTEXT_HANDLE_LOG_QUERY is an RPC context handle: 20 bytes ([MS-RPCE] 2.3.2.2, [MS-EVEN6]).

type PCONTEXT_HANDLE_LOG_QUERY [20]byte

type PCONTEXT\_HANDLE\_OPERATION\_CONTROL

PCONTEXT_HANDLE_OPERATION_CONTROL is an RPC context handle: 20 bytes ([MS-RPCE] 2.3.2.2, [MS-EVEN6]).

type PCONTEXT_HANDLE_OPERATION_CONTROL [20]byte

type PCONTEXT\_HANDLE\_PUBLISHER\_METADATA

PCONTEXT_HANDLE_PUBLISHER_METADATA is an RPC context handle: 20 bytes ([MS-RPCE] 2.3.2.2, [MS-EVEN6]).

type PCONTEXT_HANDLE_PUBLISHER_METADATA [20]byte

type PCONTEXT\_HANDLE\_REMOTE\_SUBSCRIPTION

PCONTEXT_HANDLE_REMOTE_SUBSCRIPTION is an RPC context handle: 20 bytes ([MS-RPCE] 2.3.2.2, [MS-EVEN6]).

type PCONTEXT_HANDLE_REMOTE_SUBSCRIPTION [20]byte

type RpcInfo

RpcInfo ([MS-EVEN6]). Generated by tools/idlgen; verify pointer/array tags.

type RpcInfo struct {
    M_error       ndr.DWORD
    M_subErr      ndr.DWORD
    M_subErrParam ndr.DWORD
}

type StringArray

StringArray ([MS-EVEN6]). Generated by tools/idlgen; verify pointer/array tags.

type StringArray struct {
    Count ndr.DWORD
    Ptr   []*ndr.WSTR `ndr:"elem=unique,unique,size_is=Count"`
}

type UInt32Array

UInt32Array ([MS-EVEN6]). Generated by tools/idlgen; verify pointer/array tags.

type UInt32Array struct {
    Count ndr.DWORD
    Ptr   []ndr.DWORD `ndr:"unique,size_is=Count"`
}

type UInt64Array

UInt64Array ([MS-EVEN6]). Generated by tools/idlgen; verify pointer/array tags.

type UInt64Array struct {
    Count ndr.DWORD
    Ptr   []uint64 `ndr:"unique,size_is=Count"`
}