Attachment 15939 Details for Bug 14356 – packet which Samba parses incorrectly, eventually giving 'bad pad length'

packet which Samba parses incorrectly, eventually giving 'bad pad length'

bad-redacted.txt (text/plain), 2.83 KB, created by Andrew Bartlett on 2020-04-23 23:34:33 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Andrew Bartlett

Created: 2020-04-23 23:34:33 UTC

Size: 2.83 KB

patch

obsolete

>pull returned Success
>    ncacn_packet: struct ncacn_packet
>        rpc_vers                 : 0x05 (5)
>        rpc_vers_minor           : 0x00 (0)
>        ptype                    : DCERPC_PKT_BIND (11)
>        pfc_flags                : 0x07 (7)
>               1: DCERPC_PFC_FLAG_FIRST    
>               1: DCERPC_PFC_FLAG_LAST     
>               1: DCERPC_PFC_FLAG_PENDING_CANCEL_OR_HDR_SIGNING
>               0: DCERPC_PFC_FLAG_CONC_MPX 
>               0: DCERPC_PFC_FLAG_DID_NOT_EXECUTE
>               0: DCERPC_PFC_FLAG_MAYBE    
>               0: DCERPC_PFC_FLAG_OBJECT_UUID
>        drep: ARRAY(4)
>            [0]                      : 0x10 (16)
>            [1]                      : 0x00 (0)
>            [2]                      : 0x00 (0)
>            [3]                      : 0x00 (0)
>        frag_length              : 0x0852 (2130)
>        auth_length              : 0x07aa (1962)
>        call_id                  : 0x00000002 (2)
>        u                        : union dcerpc_payload(case 11)
>        bind: struct dcerpc_bind
>            max_xmit_frag            : 0x16d0 (5840)
>            max_recv_frag            : 0x16d0 (5840)
>            assoc_group_id           : 0x00001b31 (6961)
>            num_contexts             : 0x02 (2)
>            ctx_list: ARRAY(2)
>                ctx_list: struct dcerpc_ctx_list
>                    context_id               : 0x0000 (0)
>                    num_transfer_syntaxes    : 0x01 (1)
>                    abstract_syntax: struct ndr_syntax_id
>                        uuid                     : e3514235-4b06-11d1-ab04-00c04fc2dcd2
>                        if_version               : 0x00000004 (4)
>                    transfer_syntaxes: ARRAY(1)
>                        transfer_syntaxes: struct ndr_syntax_id
>                            uuid                     : 8a885d04-1ceb-11c9-9fe8-08002b104860
>                            if_version               : 0x00000002 (2)
>                ctx_list: struct dcerpc_ctx_list
>                    context_id               : 0x0001 (1)
>                    num_transfer_syntaxes    : 0x01 (1)
>                    abstract_syntax: struct ndr_syntax_id
>                        uuid                     : e3514235-4b06-11d1-ab04-00c04fc2dcd2
>                        if_version               : 0x00000004 (4)
>                    transfer_syntaxes: ARRAY(1)
>                        transfer_syntaxes: struct ndr_syntax_id
>                            uuid                     : 71710533-beba-4937-8319-b5dbef9ccc36
>                            if_version               : 0x00000001 (1)
>            auth_info                : DATA_BLOB length=2014
>[0000] 02 00 01 00 35 42 51 E3   06 4B D1 11 AB 04 00 C0   ....5BQ. .K......
>[0010] 4F C2 DC D2 04 00 00 00   2C 1C B7 6C 12 98 40 45   O....... ,..l..@E
>[0020] 03 00 00 00 00 00 00 00   01 00 00 00 09 06 00 00   ........ ........
>[0030] 00 00 00 00

Actions: View

Attachments on bug 14356: 15939 | 15940