Commit Graph

33 Commits

Author SHA1 Message Date
Micha Reiser afe07a9b09 - Mark some DCE/RPC functions as public do allow calls from plugins
- DCOM:
 	* Mark some DCOM functions as public do allow calls from plugins
	* Add Support for Additional Variant Types  Money, I8, UI8
	* Fix an uint32 overflow when dissecting nwstringz0 where the length is 0
	* Use WS_DLL_PUBLIC instead of WS_DLL_PUBLIC_DEF

Change-Id: I02861a09203c6b42326f5a7b7e652e0f7c26d369
Reviewed-on: https://code.wireshark.org/review/8222
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
2015-04-29 12:52:10 +00:00
Matthieu Patou 29afac24a5 Add support for NTTIME_hyper and NTTIME_1sec
It's hyper with 8 bytes alignment it can have 1/100000 sec resolution or 1sec resolution

Bug: 10541
Change-Id: Iecc4c6d1bd1695a4c02db72e1617134254810cd9
Reviewed-on: https://code.wireshark.org/review/4606
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
2014-10-12 14:08:44 +00:00
Matthieu Patou e331083812 Add dissection of MIDL_NDRHEADERBLOB used in drsuapi and some other protocols
Bug: 10540
Change-Id: If4a8603a7cb62894cc46094056dd5313039884b2
Reviewed-on: https://code.wireshark.org/review/4604
Petri-Dish: Michael Mann <mmann78@netscape.net>
Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org>
Reviewed-by: Michael Mann <mmann78@netscape.net>
2014-10-11 04:04:36 +00:00
Alexis La Goutte 296591399f Remove all $Id$ from top of file
(Using sed : sed -i '/^ \* \$Id\$/,+1 d')

Fix manually some typo (in export_object_dicom.c and crc16-plain.c)

Change-Id: I4c1ae68d1c4afeace8cb195b53c715cf9e1227a8
Reviewed-on: https://code.wireshark.org/review/497
Reviewed-by: Anders Broman <a.broman58@gmail.com>
2014-03-04 14:27:33 +00:00
Michael Mann c278a0ac0a SID28 is special kind of SID where no matter what it uses 28 bytes it's used in the DRS protocol. Bug 9337 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9337)
From Matthieu Patou

svn path=/trunk/; revision=53106
2013-11-06 16:30:14 +00:00
Michael Mann 22760b2d2a Remove pinfo->private_data from DCERPC dissectors and instead have dcerpc_info* infomation be passed in as a function parameter. Bug 9387 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9387)
All "generated" source was manually modified (with the power of search/replace), but I believe the "source input" files have been adjusted (checked into revs 53098 and 53099) to reflect the necessary changes (with possible whitespace formatting differences).

The Microsoft compiler doesn't flag "unused function parameters", so I apologize in advance if I may have missed a few.  The "dcerpc_info* di" parameter is used in almost every function.

svn path=/trunk/; revision=53100
2013-11-06 14:31:29 +00:00
Bill Meier 2ac134b3c5 whitespace fixes; mostly: remove trailing blanks
svn path=/trunk/; revision=52591
2013-10-13 19:56:52 +00:00
Balint Reczey 1ebdb2e521 Export libwireshark symbols using WS_DLL_PUBLIC define
Also remove old WS_VAR_IMPORT define and related Makefile magic
everywhere in the project.

svn path=/trunk/; revision=47992
2013-03-01 23:53:11 +00:00
Jakub Zawadzki bf81b42e1e Update Free Software Foundation address.
(COPYING will be updated in next commit)

svn path=/trunk/; revision=43536
2012-06-28 22:56:06 +00:00
Ronnie Sahlberg 788dc6230a From Matthieu Patou <mat@matws.net>
Add new helper function for DCE/RPC NDR data blobs


svn path=/trunk/; revision=38472
2011-08-11 07:48:02 +00:00
Ronnie Sahlberg c667e67fb7 From Matthieu Patou <mat@matws.net>
Add two helper functions to dissect null terminated ascii and wchar strings in dcerpc



svn path=/trunk/; revision=38471
2011-08-11 07:42:25 +00:00
Guy Harris d6aaf3369b Squelch some compiler warnings.
Use "#if 0"/#endif rather than commenting out some code; that also means
we don't have to use "/ *" and "* /" in the #if'ed-out code, so don't.

Clean up indentation.

svn path=/trunk/; revision=32239
2010-03-19 01:33:12 +00:00
Ronnie Sahlberg ba234c5206 add a macro to handle types that are 2 bytes in ndr and 4 bytes in
ndr64, i.e. enums.


svn path=/trunk/; revision=31826
2010-02-08 00:48:45 +00:00
Stig Bjørlykke a34a6bee5e Extern declare hf_nt_cs_len and hf_nt_cs_size.
svn path=/trunk/; revision=30633
2009-10-20 10:03:55 +00:00
Ronnie Sahlberg 3bb1c2cbd4 From Matthieu Patou
schannel decryption


svn path=/trunk/; revision=30631
2009-10-20 08:44:26 +00:00
Stig Bjørlykke e0fbe7624b Make ett_nt_unicode_string static.
svn path=/trunk/; revision=30507
2009-10-11 14:32:36 +00:00
Ronnie Sahlberg 75b1534c7f more updates to samr to harmonize it with samba
svn path=/trunk/; revision=30354
2009-10-06 08:07:17 +00:00
Ronnie Sahlberg e7c7ec44db pild uses a magic alignment of 5 to mean align either to 4 or 8 bytes
depending on if ndr or ndr64 is used.


svn path=/trunk/; revision=30258
2009-10-03 02:44:31 +00:00
Ronnie Sahlberg a9aefe77af add a new macro to do alignment to either 4 or 8 bytes depending on if
we use ndr or ndr64.
we need this since some structures change their alignment depending on 
the transfer syntax used.


svn path=/trunk/; revision=30254
2009-10-03 00:10:35 +00:00
Ronnie Sahlberg 8fde3b7561 rename dcerpc_smb_store_pol_name to dcerpc_store_polhnd_name
rename dcerpc_smb_fetch_pol  to dcerpc_fetch_polhnd_data and also make 
it take an additional parameter to return the "type" of the policy 
handle, if such a type was stored.

extend the pol_value structure used to track policy handles to also 
store a type to represent what created the policy handle
types could be USER/ALIAS/CONNECT/... etc handles returned from the 
SAMR interface

add a new helper function  dcerpc_store_polhnd_type()

track policy handles between request/responses for dcerpc

update the samr.cnf file to make the samr dissectors for
SetSecurity/QuerySecurity dissect the specific bits for the security 
descriptor correctly based on whether the policy handle refers to a 
CONNECT/DOMAIN/USER/ALIAS or GROUP



svn path=/trunk/; revision=22703
2007-08-28 11:45:08 +00:00
Ronnie Sahlberg 470e92125e move the defines for PIDL_POLHND_{OPEN|CLOSE} to packet-dcerpc.h
also change their values to use the top order bits of an uint32 instead of the least significant ones



svn path=/trunk/; revision=20919
2007-02-25 01:47:43 +00:00
Ronnie Sahlberg 83c66c05e9 add a PIDL specific helper for managing dissection of policy handles.
let this helper take a parameter to describe how the policy handle should be
managed (is this an open, close ?) to improve policy handle tracking.
(centralizing to a single function of code makes other changes easier)

create defines to indicate OPEN/CLOSE and use them as a start/test in the winreg conformance file.



svn path=/trunk/; revision=20872
2007-02-20 09:01:50 +00:00
Ronnie Sahlberg feab79e328 change a whole bunch of ethereal into wireshark
svn path=/trunk/; revision=18196
2006-05-21 04:49:01 +00:00
Ronnie Sahlberg ebcdb60414 in smb2 the file handles are not normal context handles they are just a guid
make them a guid in smb2 dissector and make tim pottesr excellent conmtext handle tracking also able to do the same thing for GUIDs


( a context handle is just a 32 biut attribute field followed by a uuid anyway)




svn path=/trunk/; revision=16477
2005-11-11 22:12:10 +00:00
Jörg Mayer 7949c7f31c char -> const char warning fixes
svn path=/trunk/; revision=15079
2005-07-26 08:01:16 +00:00
Ronnie Sahlberg d525ccb6f9 preparations for autogenerated ms dcerpc interfaces
make it possible to prettify SIDs and control how and where their string representation should be shown in the summary line and the tree
similar to how counted_strings prettification can be controlled


svn path=/trunk/; revision=13413
2005-02-16 11:31:56 +00:00
Guy Harris 17e0d15df3 Move "dissect_nt_GUID()" into "packet-dcerpc-nt.c", as it's used by the
LSA dissector as well, and declare it in "packet-dcerpc-nt.h".

svn path=/trunk/; revision=13223
2005-02-01 05:21:08 +00:00
Ronnie Sahlberg d3beff7c6a call dissect_ndr_uuit_t directly and avoid a dependency on packet-dcerpc-netlogon
svn path=/trunk/; revision=13214
2005-01-31 09:43:07 +00:00
Ronnie Sahlberg 95b0d123ba add a new dissect_ndr_counted_ascii_string() that mimics dissect_ndr_counted_string() but handles an ASCII string instead of a Unicode one.
svn path=/trunk/; revision=13204
2005-01-30 11:56:37 +00:00
Ronnie Sahlberg 0431c0c49f change dissect_ndr_counted_byte_array to be more consistent with dissect_ndr_counted_string
svn path=/trunk/; revision=13202
2005-01-30 02:52:25 +00:00
Ronnie Sahlberg 289fd317a0 add a macro for aligning NDR datastreams to 8 byte boundaries
svn path=/trunk/; revision=13183
2005-01-28 09:12:40 +00:00
Ronnie Sahlberg 5b33d550a6 needs an ALIGN_TO_2_BYTES to make the idl compiler happy
svn path=/trunk/; revision=13162
2005-01-22 19:56:12 +00:00
Gilbert Ramirez 669db206cb Move dissectors to epan/dissectors directory.
Also move ncp222.py, x11-fields, process-x11-fields.pl,
make-reg-dotc, and make-reg-dotc.py.

Adjust #include lines in files that include packet-*.h
files.

svn path=/trunk/; revision=11410
2004-07-18 18:06:47 +00:00