0ccd69e530
Use macros from inttypes.h.
8060 lines
232 KiB
C
8060 lines
232 KiB
C
/* packet-mswsp.c
|
|
* Routines for Windows Search Protocol dissection
|
|
* Copyright 2012, Gregor Beck <gregor.beck@sernet.de>
|
|
* Copyright 2015, Noel Power <noel.power@suse.com>
|
|
*
|
|
* Wireshark - Network traffic analyzer
|
|
* By Gerald Combs <gerald@wireshark.org>
|
|
* Copyright 1998 Gerald Combs
|
|
*
|
|
* SPDX-License-Identifier: GPL-2.0-or-later
|
|
*/
|
|
|
|
# include "config.h"
|
|
|
|
#include <epan/packet.h>
|
|
#include <epan/expert.h>
|
|
#include <epan/proto_data.h>
|
|
#include <epan/exceptions.h>
|
|
|
|
#include "packet-smb.h"
|
|
#include "packet-smb2.h"
|
|
#include "packet-dcom.h" /* HRESULT */
|
|
#include "to_str.h"
|
|
#include "packet-dcerpc-nt.h"
|
|
|
|
void proto_register_mswsp(void);
|
|
|
|
#define ZERO_STRUCT(x) memset((char *)&(x), 0, sizeof(x))
|
|
|
|
enum vType {
|
|
VT_EMPTY = 0x00,
|
|
VT_NULL = 0x01,
|
|
VT_I2 = 0x02,
|
|
VT_I4 = 0x03,
|
|
VT_R4 = 0x04,
|
|
VT_R8 = 0x05,
|
|
VT_CY = 0x06,
|
|
VT_DATE = 0x07,
|
|
VT_BSTR = 0x08,
|
|
VT_ERROR = 0x0a,
|
|
VT_BOOL = 0x0b,
|
|
VT_VARIANT = 0x0c,
|
|
VT_DECIMAL = 0x0e,
|
|
VT_I1 = 0x10,
|
|
VT_UI1 = 0x11,
|
|
VT_UI2 = 0x12,
|
|
VT_UI4 = 0x13,
|
|
VT_I8 = 0x14,
|
|
VT_UI8 = 0x15,
|
|
VT_INT = 0x16,
|
|
VT_UINT = 0x17,
|
|
VT_LPSTR = 0x1e,
|
|
VT_LPWSTR = 0x1f,
|
|
VT_COMPRESSED_LPWSTR = 0x23,
|
|
VT_FILETIME = 0x40,
|
|
VT_BLOB = 0x41,
|
|
VT_BLOB_OBJECT = 0x46,
|
|
VT_CLSID = 0x48,
|
|
VT_VECTOR = 0x1000,
|
|
VT_ARRAY = 0x2000
|
|
};
|
|
|
|
struct data_blob {
|
|
guint8 *data;
|
|
guint32 size;
|
|
};
|
|
|
|
struct data_str {
|
|
const char *str;
|
|
guint32 len;
|
|
};
|
|
|
|
struct vt_decimal {
|
|
guint32 hi, lo, mid;
|
|
};
|
|
|
|
|
|
struct vt_vector {
|
|
guint32 len;
|
|
union {
|
|
gint8 *vt_i1;
|
|
guint8 *vt_ui1;
|
|
gint16 *vt_i2;
|
|
guint16 *vt_ui2, *vt_bool;
|
|
gint32 *vt_i4;
|
|
guint32 *vt_ui4, *vt_error;
|
|
gint64 *vt_i8, *vt_cy, *vt_filetime;
|
|
guint64 *vt_ui8;
|
|
float *vt_r4;
|
|
double *vt_r8, *vt_date;
|
|
e_guid_t *vt_clsid;
|
|
struct data_blob *vt_blob, *vt_blob_object;
|
|
struct data_str *vt_lpstr, *vt_lpwstr, *vt_compressed_lpwstr, *vt_bstr;
|
|
} u;
|
|
};
|
|
|
|
struct SAFEARRAYBOUNDS {
|
|
guint32 cElements, lLbound;
|
|
};
|
|
|
|
struct vt_array {
|
|
struct vt_vector vData;
|
|
guint16 cDims, fFeature;
|
|
guint32 cbElements;
|
|
|
|
struct SAFEARRAYBOUNDS *Rgsabound;
|
|
};
|
|
|
|
union vt_single
|
|
{
|
|
gint8 vt_i1;
|
|
guint8 vt_ui1;
|
|
gint16 vt_i2;
|
|
guint16 vt_ui2, vt_bool;
|
|
gint32 vt_i4, vt_int;
|
|
guint32 vt_ui4, vt_uint, vt_error;
|
|
gint64 vt_i8, vt_cy, vt_filetime;
|
|
guint64 vt_ui8;
|
|
double vt_r8, vt_date;
|
|
e_guid_t vt_clsid;
|
|
float vt_r4;
|
|
struct vt_decimal vt_decimal;
|
|
struct data_blob vt_blob, vt_blob_object;
|
|
struct data_str vt_lpstr, vt_lpwstr, vt_compressed_lpwstr, vt_bstr;
|
|
};
|
|
|
|
union vValue {
|
|
union vt_single vt_single;
|
|
struct vt_vector vt_vector;
|
|
struct vt_array vt_array;
|
|
};
|
|
|
|
struct vtype_data {
|
|
enum vType tag; /* base type, high bits cleared */
|
|
const char *str; /* string rep of base type */
|
|
int size; /* -1 for variable length */
|
|
int (*tvb_get)(tvbuff_t*, int, void*);/* read StorageVariant */
|
|
int (*tvb_get_value_only)(tvbuff_t*, int, int, void*);/*read StorageVariant value*/
|
|
void (*strbuf_append)(wmem_strbuf_t*, void*);
|
|
};
|
|
|
|
/* 2.2.1.1 */
|
|
struct CBaseStorageVariant {
|
|
guint16 vType; /* value enum vType */
|
|
guint16 vData1;
|
|
guint16 vData2;
|
|
union vValue vValue;
|
|
|
|
struct vtype_data *type;
|
|
};
|
|
|
|
/*****************************************************/
|
|
|
|
|
|
enum rType {
|
|
RTNone = 0,
|
|
RTAnd,
|
|
RTOr,
|
|
RTNot,
|
|
RTContent,
|
|
RTProperty,
|
|
RTProximity,
|
|
RTVector,
|
|
RTNatLanguage,
|
|
RTScope,
|
|
RTCoerce_Add,
|
|
RTCoerce_Multiply,
|
|
RTCoerce_Absolute,
|
|
RTProb,
|
|
RTFeedback,
|
|
RTReldoc,
|
|
RTReuseWhere = 0x11,
|
|
RTInternalProp = 0x00fffffa,
|
|
RTPhrase = 0x00fffffd
|
|
};
|
|
|
|
|
|
struct CRestriction;
|
|
|
|
enum relop {
|
|
PRLT = 0,
|
|
PRLE,
|
|
PRGT,
|
|
PRGE,
|
|
PREQ,
|
|
PRNE,
|
|
PRRE,
|
|
PRAllBits,
|
|
PRSomeBits,
|
|
PRAll = 0x100,
|
|
PRAny = 0x200
|
|
};
|
|
|
|
enum PRSPEC_Kind {
|
|
PRSPEC_LPWSTR = 0,
|
|
PRSPEC_PROPID
|
|
};
|
|
|
|
/* 2.2.1.2 */
|
|
struct CFullPropSpec {
|
|
e_guid_t guid;
|
|
enum PRSPEC_Kind kind;
|
|
union {
|
|
guint32 propid;
|
|
const guint8 *name;
|
|
} u;
|
|
};
|
|
|
|
/* 2.2.1.7 */
|
|
struct CPropertyRestriction {
|
|
guint32 relop; /*with value enum relop*/
|
|
struct CFullPropSpec property;
|
|
struct CBaseStorageVariant prval;
|
|
guint32 lcid;
|
|
};
|
|
|
|
/* 2.2.1.6 */
|
|
struct CNodeRestriction {
|
|
guint32 cNode;
|
|
struct CRestriction *paNode;
|
|
};
|
|
|
|
/* 2.2.1.17 */
|
|
struct CRestriction {
|
|
enum rType ulType;
|
|
guint32 Weight;
|
|
union {
|
|
struct CNodeRestriction *RTAnd, *RTOr, *RTProximity, *RTPhrase;
|
|
struct CRestriction *RTNot;
|
|
struct CContentRestriction *RTContent;
|
|
struct CPropertyRestriction *RTProperty;
|
|
struct CVectorRestriction *RTVector;
|
|
struct CNatLanguageRestriction *RTNatLanguage;
|
|
struct CScopeRestriction *RTScope;
|
|
struct CReuseWhere *RTReuseWhere;
|
|
struct CInternalPropertyRestriction *RTInternalProp;
|
|
struct CCoercionRestriction *RTCoerce_Add, *RTCoerce_Multiply, *RTCoerce_Absolute;
|
|
} u;
|
|
};
|
|
|
|
|
|
/* 2.2.1.12 */
|
|
struct CCoercionRestriction {
|
|
float value;
|
|
struct CRestriction child;
|
|
};
|
|
|
|
/* 2.2.1.3 */
|
|
struct CContentRestriction {
|
|
struct CFullPropSpec property;
|
|
const guint8 *phrase;
|
|
guint32 lcid;
|
|
guint32 method;
|
|
};
|
|
|
|
/* 2.2.1.8 */
|
|
struct CReuseWhere /*Restriction*/ {
|
|
guint32 whereId;
|
|
};
|
|
|
|
/* 2.2.1.5 */
|
|
struct CNatLanguageRestriction {
|
|
struct CFullPropSpec property;
|
|
const guint8 *phrase;
|
|
guint32 lcid;
|
|
};
|
|
|
|
#define PROP_LENGTH 255
|
|
|
|
enum aggtype {
|
|
DBAGGTTYPE_BYNONE = 0x0,
|
|
DBAGGTTYPE_SUM,
|
|
DBAGGTTYPE_MAX,
|
|
DBAGGTTYPE_MIN,
|
|
DBAGGTTYPE_AVG,
|
|
DBAGGTTYPE_COUNT,
|
|
DBAGGTTYPE_CHILDCOUNT,
|
|
DBAGGTTYPE_BYFREQ,
|
|
DBAGGTTYPE_FIRST,
|
|
DBAGGTTYPE_DATERANGE,
|
|
DBAGGTTYPE_REPRESENTATIVEOF,
|
|
DBAGGTTYPE_EDITDISTANCE,
|
|
};
|
|
|
|
static const value_string DBAGGTTYPE[] = {
|
|
{DBAGGTTYPE_BYNONE, "DBAGGTTYPE_BYNONE"},
|
|
{DBAGGTTYPE_SUM, "DBAGGTTYPE_SUM"},
|
|
{DBAGGTTYPE_MAX, "DBAGGTTYPE_MAX"},
|
|
{DBAGGTTYPE_MIN, "DBAGGTTYPE_MIN"},
|
|
{DBAGGTTYPE_AVG, "DBAGGTTYPE_AVG"},
|
|
{DBAGGTTYPE_COUNT, "DBAGGTTYPE_COUNT"},
|
|
{DBAGGTTYPE_CHILDCOUNT, "DBAGGTTYPE_CHILDCOUNT"},
|
|
{DBAGGTTYPE_BYFREQ, "DBAGGTTYPE_BYFREQ"},
|
|
{DBAGGTTYPE_FIRST, "DBAGGTTYPE_FIRST"},
|
|
{DBAGGTTYPE_DATERANGE, "DBAGGTTYPE_DATERANGE"},
|
|
{DBAGGTTYPE_REPRESENTATIVEOF, "DBAGGTTYPE_REPRESENTATIVEOF"},
|
|
{DBAGGTTYPE_EDITDISTANCE, "DBAGGTTYPE_EDITDISTANCE"},
|
|
{0, NULL}
|
|
};
|
|
|
|
/* 2.2.1.44 */
|
|
struct CTableColumn {
|
|
/*struct CFullPropSpec propspec;*/
|
|
guint32 vtype;
|
|
guint8 aggregateused;
|
|
guint8 aggregatetype;
|
|
guint8 valueused;
|
|
guint16 valueoffset;
|
|
guint16 valuesize;
|
|
guint8 statusused;
|
|
guint16 statusoffset;
|
|
guint8 lengthused;
|
|
guint16 lengthoffset;
|
|
char name[PROP_LENGTH];
|
|
};
|
|
/* Minimum size in bytes on the wire CTableColumn can be */
|
|
#define MIN_CTABLECOL_SIZE 32
|
|
/* Maximum sane size in bytes on the wire CTableColumn can be. Arbitrary. */
|
|
#define MAX_CTABLECOL_SIZE 5000
|
|
|
|
/* 2.2.3.10 */
|
|
|
|
struct CPMSetBindingsIn {
|
|
guint32 hcursor;
|
|
guint32 brow;
|
|
guint32 bbindingdesc;
|
|
guint32 dummy;
|
|
guint32 ccolumns;
|
|
struct CTableColumn *acolumns;
|
|
};
|
|
|
|
struct vector_or_array_64 {
|
|
guint64 count;
|
|
guint64 array_address;
|
|
};
|
|
|
|
struct vector_or_array_32 {
|
|
guint32 count;
|
|
guint32 array_address;
|
|
};
|
|
|
|
/* 2.2.1.42 */
|
|
struct CRowVariant {
|
|
guint16 vtype;
|
|
guint16 reserved1;
|
|
guint32 reserved2;
|
|
union {
|
|
guint8 byte;
|
|
guint16 shortw;
|
|
guint32 longw;
|
|
guint64 hyperw;
|
|
union {
|
|
struct vector_or_array_64 i64;
|
|
struct vector_or_array_32 i32;
|
|
} array_vector;
|
|
} content;
|
|
};
|
|
|
|
static int SMB1 = 1;
|
|
static int SMB2 = 2;
|
|
|
|
void proto_reg_handoff_mswsp(void);
|
|
|
|
static expert_field ei_mswsp_invalid_variant_type = EI_INIT;
|
|
static expert_field ei_missing_msg_context = EI_INIT;
|
|
static expert_field ei_mswsp_msg_cpmsetbinding_ccolumns = EI_INIT;
|
|
|
|
static int proto_mswsp = -1;
|
|
static int hf_mswsp_msg = -1;
|
|
static int hf_mswsp_hdr = -1;
|
|
static int hf_mswsp_hdr_msg = -1;
|
|
static int hf_mswsp_hdr_status = -1;
|
|
static int hf_mswsp_hdr_checksum = -1;
|
|
static int hf_mswsp_hdr_reserved = -1;
|
|
static int hf_mswsp_msg_Connect_Version = -1;
|
|
static int hf_mswsp_msg_ConnectIn_ClientIsRemote = -1;
|
|
static int hf_mswsp_msg_ConnectIn_Blob1 = -1;
|
|
static int hf_mswsp_msg_ConnectIn_MachineName = -1;
|
|
static int hf_mswsp_msg_ConnectIn_UserName = -1;
|
|
static int hf_mswsp_msg_ConnectIn_PropSets_num = -1;
|
|
static int hf_mswsp_bool_options = -1;
|
|
static int hf_mswsp_bool_options_cursor = -1;
|
|
static int hf_mswsp_bool_options_async = -1;
|
|
static int hf_mswsp_bool_options_firstrows = -1;
|
|
static int hf_mswsp_bool_options_holdrows = -1;
|
|
static int hf_mswsp_bool_options_chaptered = -1;
|
|
static int hf_mswsp_bool_options_useci = -1;
|
|
static int hf_mswsp_bool_options_defertrim = -1;
|
|
static int hf_mswsp_bool_options_rowsetevents = -1;
|
|
static int hf_mswsp_bool_options_dontcomputeexpensive = -1;
|
|
static int hf_mswsp_guid_time_low = -1;
|
|
static int hf_mswsp_guid_time_mid = -1;
|
|
static int hf_mswsp_guid_time_high = -1;
|
|
static int hf_mswsp_guid_time_clock_hi = -1;
|
|
static int hf_mswsp_guid_time_clock_low = -1;
|
|
static int hf_mswsp_guid_node = -1;
|
|
static int hf_mswsp_lcid = -1;
|
|
static int hf_mswsp_lcid_sortid = -1;
|
|
static int hf_mswsp_lcid_langid = -1;
|
|
static int hf_mswsp_cscort_column = -1;
|
|
static int hf_mswsp_cscort_order = -1;
|
|
static int hf_mswsp_cscort_individual = -1;
|
|
static int hf_mswsp_cscortset_count = -1;
|
|
static int hf_mswsp_ctablecolumn_vtype = -1;
|
|
static int hf_mswsp_ctablecolumn_aggused = -1;
|
|
static int hf_mswsp_ctablecolumn_aggtype = -1;
|
|
static int hf_mswsp_ctablecolumn_valused = -1;
|
|
static int hf_mswsp_ctablecolumn_valoffset = -1;
|
|
static int hf_mswsp_ctablecolumn_valsize = -1;
|
|
static int hf_mswsp_ctablecolumn_statused = -1;
|
|
static int hf_mswsp_ctablecolumn_statoffset = -1;
|
|
static int hf_mswsp_ctablecolumn_lenused = -1;
|
|
static int hf_mswsp_ctablecolumn_lenoffset = -1;
|
|
static int hf_mswsp_cfullpropspec_kind = -1;
|
|
static int hf_mswsp_cfullpropspec_propid = -1;
|
|
static int hf_mswsp_cfullpropspec_propname = -1;
|
|
static int hf_mswsp_cproprestrict_relop = -1;
|
|
static int hf_mswsp_ccoercerestrict_value = -1;
|
|
static int hf_mswsp_ccontentrestrict_cc = -1;
|
|
static int hf_mswsp_ccontentrestrict_phrase = -1;
|
|
static int hf_mswsp_ccontentrestrict_method = -1;
|
|
static int hf_mswsp_natlangrestrict_cc = -1;
|
|
static int hf_mswsp_natlangrestrict_phrase = -1;
|
|
static int hf_mswsp_crestrict_ultype = -1;
|
|
static int hf_mswsp_crestrict_weight = -1;
|
|
static int hf_mswsp_crestrictarray_count = -1;
|
|
static int hf_mswsp_crestrictarray_present = -1;
|
|
static int hf_mswsp_cnoderestrict_cnode = -1;
|
|
static int hf_mswsp_cbasestorvariant_vtype = -1;
|
|
static int hf_mswsp_cbasestorvariant_vvalue = -1;
|
|
static int hf_mswsp_cbasestorvariant_vdata1 = -1;
|
|
static int hf_mswsp_cbasestorvariant_vdata2 = -1;
|
|
static int hf_mswsp_cbasestorvariant_num = -1;
|
|
static int hf_mswsp_cbasestorvariant_cdims = -1;
|
|
static int hf_mswsp_cbasestorvariant_ffeatures = -1;
|
|
static int hf_mswsp_cbasestorvariant_cbelements = -1;
|
|
static int hf_mswsp_cbasestorvariant_rgsabound = -1;
|
|
static int hf_mswsp_cdbcolid_ekind = -1;
|
|
static int hf_mswsp_cdbcolid_ulid = -1;
|
|
static int hf_mswsp_cdbcolid_vstring = -1;
|
|
static int hf_mswsp_cdbprop_id = -1;
|
|
static int hf_mswsp_cdbprop_options = -1;
|
|
static int hf_mswsp_cdbprop_status = -1;
|
|
static int hf_mswsp_cdbpropset_cprops = -1;
|
|
static int hf_mswsp_rangeboundry_ultype = -1;
|
|
static int hf_mswsp_rangeboundry_labelpresent = -1;
|
|
static int hf_mswsp_rangeboundry_cclabel = -1;
|
|
static int hf_mswsp_rangeboundry_label = -1;
|
|
static int hf_mswsp_crangecategspec_crange = -1;
|
|
static int hf_mswsp_ccategspec_type = -1;
|
|
static int hf_mswsp_caggregspec_type = -1;
|
|
static int hf_mswsp_caggregspec_ccalias = -1;
|
|
static int hf_mswsp_caggregspec_alias = -1;
|
|
static int hf_mswsp_caggregspec_idcolumn = -1;
|
|
static int hf_mswsp_caggregspec_ulmaxnumtoreturn = -1;
|
|
static int hf_mswsp_caggregspec_idrepresentative = -1;
|
|
static int hf_mswsp_caggregset_count = -1;
|
|
static int hf_mswsp_caggregsortkey_order = -1;
|
|
static int hf_mswsp_csortaggregset_count = -1;
|
|
static int hf_mswsp_cingroupsortaggregset_type = -1;
|
|
static int hf_mswsp_cingroupsortaggregsets_count = -1;
|
|
static int hf_mswsp_categorizationspec_cmaxres= -1;
|
|
static int hf_mswsp_crowsetprops_ulmaxopenrows = -1;
|
|
static int hf_mswsp_crowsetprops_ulmemusage = -1;
|
|
static int hf_mswsp_crowsetprops_cmaxresults = -1;
|
|
static int hf_mswsp_crowsetprops_ccmdtimeout = -1;
|
|
static int hf_mswsp_cpidmapper_count = -1;
|
|
static int hf_mswsp_ccolumngroup_count = -1;
|
|
static int hf_mswsp_ccolumngroup_grouppid = -1;
|
|
static int hf_mswsp_ccolumngroup_pid = -1;
|
|
static int hf_mswsp_ccolumngrouparray_count = -1;
|
|
static int hf_mswsp_int32array_value = -1;
|
|
static int hf_mswsp_crowseeknext_cskip = -1;
|
|
static int hf_mswsp_crowseekat_bmkoffset = -1;
|
|
static int hf_mswsp_crowseekat_skip = -1;
|
|
static int hf_mswsp_crowseekat_hregion = -1;
|
|
static int hf_mswsp_crowseekatratio_ulnumerator = -1;
|
|
static int hf_mswsp_crowseekatratio_uldenominator = -1;
|
|
static int hf_mswsp_crowseekatratio_hregion = -1;
|
|
static int hf_mswsp_crowseekbybookmark_cbookmarks = -1;
|
|
static int hf_mswsp_crowseekbybookmark_maxret = -1;
|
|
static int hf_mswsp_crowvariantinfo_count64 = -1;
|
|
static int hf_mswsp_arrayvector_address64 = -1;
|
|
static int hf_mswsp_crowvariantinfo_count32 = -1;
|
|
static int hf_mswsp_arrayvector_address32 = -1;
|
|
static int hf_mswsp_rowvariant_item_address64 = -1;
|
|
static int hf_mswsp_rowvariant_item_address32 = -1;
|
|
static int hf_mswsp_rowvariant_item_value = -1;
|
|
static int hf_mswsp_rowvariant_vtype = -1;
|
|
static int hf_mswsp_rowvariant_reserved1 = -1;
|
|
static int hf_mswsp_rowvariant_reserved2 = -1;
|
|
static int hf_mswsp_ctablecolumn_status = -1;
|
|
static int hf_mswsp_ctablecolumn_length = -1;
|
|
static int hf_mswsp_msg_cpmcreatequery_size = -1;
|
|
static int hf_mswsp_msg_cpmcreatequery_ccolumnsetpresent = -1;
|
|
static int hf_mswsp_msg_cpmcreatequery_crestrictionpresent = -1;
|
|
static int hf_mswsp_msg_cpmcreatequery_csortpresent = -1;
|
|
static int hf_mswsp_msg_cpmcreatequery_ccategpresent = -1;
|
|
static int hf_mswsp_msg_cpmcreatequery_ccateg_count = -1;
|
|
static int hf_mswsp_msg_cpmcreatequery_trueseq = -1;
|
|
static int hf_mswsp_msg_cpmcreatequery_workid = -1;
|
|
static int hf_mswsp_msg_cpmcreatequery_cursors = -1;
|
|
static int hf_mswsp_msg_cpmgetrows_hcursor = -1;
|
|
static int hf_mswsp_msg_cpmgetrows_rowstotransfer = -1;
|
|
static int hf_mswsp_msg_cpmgetrows_rowwidth = -1;
|
|
static int hf_mswsp_msg_cpmgetrows_cbseek = -1;
|
|
static int hf_mswsp_msg_cpmgetrows_cbreserved = -1;
|
|
static int hf_mswsp_msg_cpmgetrows_cbreadbuffer = -1;
|
|
static int hf_mswsp_msg_cpmgetrows_ulclientbase = -1;
|
|
static int hf_mswsp_msg_cpmgetrows_fbwdfetch = -1;
|
|
static int hf_mswsp_msg_cpmgetrows_etype = -1;
|
|
static int hf_mswsp_msg_cpmgetrows_chapt = -1;
|
|
static int hf_mswsp_msg_cpmgetrows_crowsreturned = -1;
|
|
static int hf_mswsp_msg_cpmratiofinished_hcursor = -1;
|
|
static int hf_mswsp_msg_cpmratiofinished_fquick = -1;
|
|
static int hf_mswsp_msg_cpmratiofinished_ulnumerator = -1;
|
|
static int hf_mswsp_msg_cpmratiofinished_uldenominator = -1;
|
|
static int hf_mswsp_msg_cpmratiofinished_crows = -1;
|
|
static int hf_mswsp_msg_cpmratiofinished_fnewrows = -1;
|
|
static int hf_mswsp_msg_cpmcomparebmk_hcursor = -1;
|
|
static int hf_mswsp_msg_cpmcomparebmk_chapt = -1;
|
|
static int hf_mswsp_msg_cpmcomparebmk_bmkfirst = -1;
|
|
static int hf_mswsp_msg_cpmcomparebmk_bmksecond = -1;
|
|
static int hf_mswsp_msg_cpmcomparebmk_dwcomparison = -1;
|
|
static int hf_mswsp_msg_cpmgetapproxpos_hcursor = -1;
|
|
static int hf_mswsp_msg_cpmgetapproxpos_chapt = -1;
|
|
static int hf_mswsp_msg_cpmgetapproxpos_bmk = -1;
|
|
static int hf_mswsp_msg_cpmgetapproxpos_numerator = -1;
|
|
static int hf_mswsp_msg_cpmgetapproxpos_denominator = -1;
|
|
static int hf_mswsp_msg_cpmsetbinding_hcursor = -1;
|
|
static int hf_mswsp_msg_cpmsetbinding_cbrow = -1;
|
|
static int hf_mswsp_msg_cpmsetbinding_desc = -1;
|
|
static int hf_mswsp_msg_cpmsetbinding_dummy = -1;
|
|
static int hf_mswsp_msg_cpmsetbinding_ccolumns = -1;
|
|
static int hf_mswsp_msg_cpmsetbinding_acolumns = -1;
|
|
static int hf_mswsp_msg_cpmsendnotify_watchnotify = -1;
|
|
static int hf_mswsp_msg_cpmgetquerystatus_hcursor = -1;
|
|
static int hf_mswsp_msg_cpmgetquerystatus_qstatus = -1;
|
|
static int hf_mswsp_msg_cpmcistate_cbstruct = -1;
|
|
static int hf_mswsp_msg_cpmcistate_cwordlist = -1;
|
|
static int hf_mswsp_msg_cpmcistate_cpersistindex = -1;
|
|
static int hf_mswsp_msg_cpmcistate_cqueries = -1;
|
|
static int hf_mswsp_msg_cpmcistate_cfreshtest = -1;
|
|
static int hf_mswsp_msg_cpmcistate_dwmergeprogress = -1;
|
|
static int hf_mswsp_msg_cpmcistate_estate = -1;
|
|
static int hf_mswsp_msg_cpmcistate_cfiltereddocs = -1;
|
|
static int hf_mswsp_msg_cpmcistate_ctotaldocs = -1;
|
|
static int hf_mswsp_msg_cpmcistate_cpendingscans = -1;
|
|
static int hf_mswsp_msg_cpmcistate_dwindexsize = -1;
|
|
static int hf_mswsp_msg_cpmcistate_cuniquekeys = -1;
|
|
static int hf_mswsp_msg_cpmcistate_csecqdocuments = -1;
|
|
static int hf_mswsp_msg_cpmcistate_dwpropcachesize = -1;
|
|
static int hf_mswsp_msg_cpmfetchvalue_wid = -1;
|
|
static int hf_mswsp_msg_cpmfetchvalue_cbsofar = -1;
|
|
static int hf_mswsp_msg_cpmfetchvalue_cbpropspec = -1;
|
|
static int hf_mswsp_msg_cpmfetchvalue_cbchunk = -1;
|
|
static int hf_mswsp_msg_cpmfetchvalue_cbvalue = -1;
|
|
static int hf_mswsp_msg_cpmfetchvalue_fmoreexists = -1;
|
|
static int hf_mswsp_msg_cpmfetchvalue_fvalueexists = -1;
|
|
static int hf_mswsp_msg_cpmfetchvalue_vvalue = -1;
|
|
static int hf_mswsp_msg_cpmquerystatusex_hcursor = -1;
|
|
static int hf_mswsp_msg_cpmquerystatusex_bmk = -1;
|
|
static int hf_mswsp_msg_cpmquerystatusex_qstatus = -1;
|
|
static int hf_mswsp_msg_cpmquerystatusex_cfiltereddocs = -1;
|
|
static int hf_mswsp_msg_cpmquerystatusex_cdocstofilter = -1;
|
|
static int hf_mswsp_msg_cpmquerystatusex_dwratiodenom = -1;
|
|
static int hf_mswsp_msg_cpmquerystatusex_dwrationumer = -1;
|
|
static int hf_mswsp_msg_cpmquerystatusex_irowbmk = -1;
|
|
static int hf_mswsp_msg_cpmquerystatusex_crowstotal = -1;
|
|
static int hf_mswsp_msg_cpmquerystatusex_maxrank = -1;
|
|
static int hf_mswsp_msg_cpmquerystatusex_cresultsfound = -1;
|
|
static int hf_mswsp_msg_cpmquerystatusex_whereid = -1;
|
|
static int hf_mswsp_msg_cpmrestartposition_hcursor = -1;
|
|
static int hf_mswsp_msg_cpmrestartposition_chapt = -1;
|
|
static int hf_mswsp_msg_cpmgetrowsetnotify_wid = -1;
|
|
static int hf_mswsp_msg_cpmgetrowsetnotify_moreevents = -1;
|
|
static int hf_mswsp_msg_cpmgetrowsetnotify_eventtype = -1;
|
|
static int hf_mswsp_msg_cpmgetrowsetnotify_rowsetitemstate = -1;
|
|
static int hf_mswsp_msg_cpmgetrowsetnotify_changeditemstate = -1;
|
|
static int hf_mswsp_msg_cpmgetrowsetnotify_rowsetevent = -1;
|
|
static int hf_mswsp_msg_cpmgetrowsetnotify_rowseteventdata1 = -1;
|
|
static int hf_mswsp_msg_cpmgetrowsetnotify_rowseteventdata2 = -1;
|
|
static int hf_mswsp_msg_cpmfindindices_cwids = -1;
|
|
static int hf_mswsp_msg_cpmfindindices_cdepthprev = -1;
|
|
static int hf_mswsp_msg_cpmfindindices_cdepthnext = -1;
|
|
static int hf_mswsp_msg_cpmsetscopeprioritization_priority = -1;
|
|
static int hf_mswsp_msg_cpmsetscopeprioritization_eventfreq = -1;
|
|
static int hf_mswsp_msg_cpmsetscopestatisics_dwindexitems = -1;
|
|
static int hf_mswsp_msg_cpmsetscopestatisics_dwoutstandingadds = -1;
|
|
static int hf_mswsp_msg_cpmsetscopestatisics_dwoutstandingmodifies = -1;
|
|
|
|
static gint ett_mswsp = -1;
|
|
static gint ett_mswsp_hdr = -1;
|
|
static gint ett_mswsp_msg = -1;
|
|
static gint ett_mswsp_pad = -1;
|
|
|
|
static gint ett_mswsp_property_restriction = -1;
|
|
static gint ett_CRestrictionArray = -1;
|
|
static gint ett_CBaseStorageVariant = -1;
|
|
static gint ett_CBaseStorageVariant_Vector = -1;
|
|
static gint ett_CBaseStorageVariant_Array = -1;
|
|
static gint ett_CDbColId = -1;
|
|
static gint ett_GUID = -1;
|
|
static gint ett_CDbProp = -1;
|
|
static gint ett_CDbPropSet = -1;
|
|
static gint ett_CDbPropSet_Array = -1;
|
|
static gint ett_CRestriction = -1;
|
|
static gint ett_CNodeRestriction = -1;
|
|
static gint ett_CPropertyRestriction = -1;
|
|
static gint ett_CCoercionRestriction = -1;
|
|
static gint ett_CContentRestriction = -1;
|
|
static gint ett_RANGEBOUNDARY = -1;
|
|
static gint ett_CRangeCategSpec = -1;
|
|
static gint ett_CCategSpec = -1;
|
|
static gint ett_CAggregSpec = -1;
|
|
static gint ett_CAggregSet = -1;
|
|
static gint ett_CCategorizationSpec = -1;
|
|
static gint ett_CAggregSortKey = -1;
|
|
static gint ett_CSortAggregSet = -1;
|
|
static gint ett_CInGroupSortAggregSet = -1;
|
|
static gint ett_CInGroupSortAggregSets = -1;
|
|
static gint ett_CRowsetProperties = -1;
|
|
static gint ett_CFullPropSpec = -1;
|
|
static gint ett_CPidMapper = -1;
|
|
static gint ett_CSort = -1;
|
|
static gint ett_CSortSet = -1;
|
|
static gint ett_CNatLanguageRestriction = -1;
|
|
static gint ett_CColumnGroup = -1;
|
|
static gint ett_CColumnGroupArray = -1;
|
|
static gint ett_LCID = -1;
|
|
static gint ett_CTableColumn = -1;
|
|
static gint ett_Array = -1;
|
|
static gint ett_SeekDescription = -1;
|
|
static gint ett_CRowsSeekNext = -1;
|
|
static gint ett_CRowsSeekAt = -1;
|
|
static gint ett_CRowsSeekAtRatio = -1;
|
|
static gint ett_CRowsSeekByBookmark = -1;
|
|
static gint ett_GetRowsRow = -1;
|
|
static gint ett_GetRowsColumn = -1;
|
|
static gint ett_CRowVariant = -1;
|
|
static gint ett_CRowVariant_Vector = -1;
|
|
static gint ett_mswsp_bool_options = -1;
|
|
static gint ett_mswsp_uin32_array = -1;
|
|
static gint ett_mswsp_msg_padding = -1;
|
|
static gint ett_mswsp_msg_creusewhere = -1;
|
|
|
|
static struct vtype_data *vType_get_type(guint16 t);
|
|
|
|
/* converstation related data */
|
|
struct rows_data {
|
|
guint32 ulclientbase;
|
|
guint32 cbreserved;
|
|
};
|
|
|
|
|
|
struct message_data {
|
|
guint32 fid;
|
|
guint frame;
|
|
guint16 msg_id;
|
|
gboolean is_request;
|
|
int smb_level;
|
|
union {
|
|
struct CPMSetBindingsIn bindingsin;/* CPMBindingIn request */
|
|
struct rows_data rowsin; /*CPMGetRowsIn request*/
|
|
guint32 version; /*CPMConnectIn requst/respose */
|
|
} content;
|
|
};
|
|
|
|
struct mswsp_ct {
|
|
GSList *GSL_message_data;
|
|
};
|
|
|
|
static gint msg_data_find(struct message_data *a, struct message_data *b)
|
|
{
|
|
if (a->fid == b->fid
|
|
&& a->frame == b->frame
|
|
&& a->msg_id == b->msg_id
|
|
&& a->smb_level == b->smb_level
|
|
&& a->is_request == b->is_request) {
|
|
return 0;
|
|
}
|
|
return 1;
|
|
}
|
|
static smb_fid_info_t *find_fid_info(smb_info_t *si)
|
|
{
|
|
smb_fid_info_t *fid_info = NULL;
|
|
smb_transact_info_t *tri = (smb_transact_info_t *)((si->sip && (si->sip->extra_info_type == SMB_EI_TRI)) ? si->sip->extra_info : NULL);
|
|
GSList *iter;
|
|
guint32 fid = 0;
|
|
|
|
if (tri == NULL) {
|
|
/* fallback to try search visited RWINFO (for AndX request/response) */
|
|
if (si->sip && (si->sip->extra_info_type == SMB_EI_RWINFO)) {
|
|
fid = si->sip->fid;
|
|
}
|
|
} else {
|
|
fid = tri->fid;
|
|
}
|
|
|
|
|
|
if (!fid) {
|
|
return NULL;
|
|
}
|
|
for (iter = si->ct->GSL_fid_info; iter; iter = iter->next) {
|
|
smb_fid_info_t *info = (smb_fid_info_t *)iter->data;
|
|
if ((info->tid == si->tid) && (info->fid == fid)) {
|
|
fid_info = info;
|
|
break;
|
|
}
|
|
}
|
|
return fid_info;
|
|
}
|
|
|
|
static gboolean get_fid_and_frame(packet_info *pinfo, guint32 *fid, guint *frame,
|
|
void *data)
|
|
{
|
|
gboolean result = TRUE;
|
|
int *p_smb_level = (int*)p_get_proto_data(wmem_file_scope(), pinfo, proto_mswsp, 0);
|
|
if (!p_smb_level) {
|
|
return FALSE;
|
|
}
|
|
*frame = pinfo->num;
|
|
if (*p_smb_level == SMB1) {
|
|
smb_info_t *si = (smb_info_t*)data;
|
|
smb_fid_info_t *info;
|
|
info = find_fid_info(si);
|
|
if (!info) {
|
|
return FALSE;
|
|
}
|
|
*fid = info->fid;
|
|
} else {
|
|
smb2_info_t *si2 = (smb2_info_t*)data;
|
|
guint32 open_frame = 0, close_frame = 0;
|
|
char *fid_name = NULL;
|
|
if (si2->saved) {
|
|
dcerpc_fetch_polhnd_data(&si2->saved->policy_hnd, &fid_name, NULL, &open_frame, &close_frame, pinfo->num);
|
|
*fid = open_frame;
|
|
} else {
|
|
result = FALSE;
|
|
}
|
|
}
|
|
return result;
|
|
}
|
|
|
|
static struct message_data *find_or_create_message_data(struct mswsp_ct *conv_data, packet_info *pinfo, guint16 msg_id, gboolean is_request, void *data)
|
|
{
|
|
struct message_data to_find;
|
|
struct message_data* msg_data = NULL;
|
|
GSList *result = NULL;
|
|
int *p_smb_level = (int*)p_get_proto_data(wmem_file_scope(), pinfo, proto_mswsp, 0);
|
|
to_find.is_request = is_request;
|
|
to_find.msg_id = msg_id;
|
|
to_find.smb_level = *p_smb_level;
|
|
if (!get_fid_and_frame(pinfo, &to_find.fid, &to_find.frame, data) || !conv_data) {
|
|
return msg_data;
|
|
}
|
|
result = g_slist_find_custom(conv_data->GSL_message_data,
|
|
&to_find, (GCompareFunc)msg_data_find);
|
|
if (!result) {
|
|
msg_data = wmem_new(wmem_file_scope(), struct message_data);
|
|
*msg_data = to_find;
|
|
conv_data->GSL_message_data = g_slist_prepend(conv_data->GSL_message_data, msg_data);
|
|
} else {
|
|
msg_data = (struct message_data*)result->data;
|
|
}
|
|
return msg_data;
|
|
}
|
|
|
|
static struct mswsp_ct *get_create_converstation_data(packet_info *pinfo)
|
|
{
|
|
struct mswsp_ct *ct = NULL;
|
|
conversation_t *conversation;
|
|
|
|
conversation = find_or_create_conversation(pinfo);
|
|
if (!conversation) {
|
|
return NULL;
|
|
}
|
|
ct = (struct mswsp_ct*)conversation_get_proto_data(conversation, proto_mswsp);
|
|
if (!ct) {
|
|
ct = wmem_new(wmem_file_scope(), struct mswsp_ct);
|
|
ct->GSL_message_data = NULL;
|
|
conversation_add_proto_data(conversation, proto_mswsp, ct);
|
|
}
|
|
|
|
return ct;
|
|
}
|
|
|
|
static struct message_data *
|
|
find_matching_request_by_fid(struct mswsp_ct *ct, packet_info *pinfo, guint32 msg, gboolean in, void *private_data)
|
|
{
|
|
guint32 fid = 0;
|
|
guint frame = 0;
|
|
GSList *iter;
|
|
int *p_smb_level = (int*)p_get_proto_data(wmem_file_scope(), pinfo, proto_mswsp, 0);
|
|
|
|
struct message_data *result = NULL;
|
|
get_fid_and_frame(pinfo, &fid, &frame, private_data);
|
|
for (iter = ct->GSL_message_data; iter; iter = iter->next) {
|
|
struct message_data* data = (struct message_data*)iter->data;
|
|
if (data->frame < frame && data->fid == fid && data->is_request == in
|
|
&& data->msg_id == msg && data->smb_level == *p_smb_level) {
|
|
result = data;
|
|
break;
|
|
}
|
|
}
|
|
return result;
|
|
}
|
|
|
|
static struct CPMSetBindingsIn *
|
|
find_binding_msg_data(struct mswsp_ct *ct, packet_info *pinfo, void *private_data)
|
|
{
|
|
struct CPMSetBindingsIn *result = NULL;
|
|
struct message_data *data = find_matching_request_by_fid(ct, pinfo, 0xD0, TRUE, private_data);
|
|
if (data) {
|
|
result = &data->content.bindingsin;
|
|
}
|
|
return result;
|
|
}
|
|
|
|
static struct rows_data *
|
|
find_rowsin_msg_data(struct mswsp_ct *ct, packet_info *pinfo, void *private_data)
|
|
{
|
|
struct rows_data *result = NULL;
|
|
struct message_data *data = find_matching_request_by_fid(ct, pinfo, 0xCC, TRUE, private_data);
|
|
if (data) {
|
|
result = &data->content.rowsin;
|
|
}
|
|
return result;
|
|
}
|
|
|
|
static gboolean is_64bit_mode(struct mswsp_ct *ct, packet_info *pinfo, gboolean *result, void *private_data)
|
|
{
|
|
guint32 client_ver = 0;
|
|
guint32 server_ver = 0;
|
|
struct message_data *data = find_matching_request_by_fid(ct, pinfo, 0xC8,
|
|
TRUE, private_data);
|
|
if (data) {
|
|
client_ver = data->content.version;
|
|
data = find_matching_request_by_fid(ct, pinfo, 0xC8, FALSE, private_data);
|
|
if (data) {
|
|
server_ver = data->content.version;
|
|
*result = (server_ver & 0xffff0000) && (client_ver & 0xffff0000);
|
|
return TRUE;
|
|
}
|
|
}
|
|
return FALSE;
|
|
}
|
|
|
|
#define eSequential 0x00000001
|
|
#define eLocateable 0x00000003
|
|
#define eScrollable 0x00000007
|
|
#define eAsynchronous 0x00000008
|
|
#define eFirstRows 0x00000080
|
|
#define eHoldRows 0x00000200
|
|
#define eChaptered 0x00000800
|
|
#define eUseCI 0x00001000
|
|
#define eDeferTrimming 0x00002000
|
|
#define eEnableRowsetEvents 0x00800000
|
|
#define eDoNotComputeExpensiveProps 0x00400000
|
|
|
|
static const value_string cursor_vals[] = {
|
|
{ eSequential, "eSequential" },
|
|
{ eLocateable, "eLocateable" },
|
|
{ eScrollable, "eScrollable" },
|
|
{ 0, NULL }
|
|
};
|
|
|
|
|
|
|
|
/******************************************************************************/
|
|
struct GuidPropertySet {
|
|
e_guid_t guid;
|
|
const char *def;
|
|
const char *desc;
|
|
const value_string *id_map;
|
|
};
|
|
|
|
/* 2.2.1.31.1 */
|
|
static const value_string DBPROPSET_FSCIFRMWRK_EXT_IDS[] = {
|
|
{0x02, "DBPROP_CI_CATALOG_NAME"},
|
|
{0x03, "DBPROP_CI_INCLUDE_SCOPES"},
|
|
{0x04, "DBPROP_CI_SCOPE_FLAGS"},
|
|
{0x07, "DBPROP_CI_QUERY_TYPE"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string DBPROPSET_QUERYEXT_IDS[] = {
|
|
{0x02, "DBPROP_USECONTENTINDEX"},
|
|
{0x03, "DBPROP_DEFERNONINDEXEDTRIMMING"},
|
|
{0x04, "DBPROP_USEEXTENDEDDBTYPES"},
|
|
{0x05, "DBPROP_IGNORENOISEONLYCLAUSES"},
|
|
{0x06, "DBPROP_GENERICOPTIONS_STRING"},
|
|
{0x07, "DBPROP_FIRSTROWS"},
|
|
{0x08, "DBPROP_DEFERCATALOGVERIFICATION"},
|
|
{0x0a, "DBPROP_GENERATEPARSETREE"},
|
|
{0x0c, "DBPROP_FREETEXTANYTERM"},
|
|
{0x0d, "DBPROP_FREETEXTUSESTEMMING"},
|
|
{0x0e, "DBPROP_IGNORESBRI"},
|
|
{0x10, "DBPROP_ENABLEROWSETEVENTS"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string DBPROPSET_CIFRMWRKCORE_EXT_IDS[] = {
|
|
{0x02, "DBPROP_MACHINE"},
|
|
{0x03, "DBPROP_CLIENT_CLSID"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string DBPROPSET_MSIDXS_ROWSETEXT_IDS[] = {
|
|
{0x02, "MSIDXSPROP_ROWSETQUERYSTATUS"},
|
|
{0x03, "MSIDXSPROP_COMMAND_LOCALE_STRING"},
|
|
{0x04, "MSIDXSPROP_QUERY_RESTRICTION"},
|
|
{0x05, "MSIDXSPROP_PARSE_TREE"},
|
|
{0x06, "MSIDXSPROP_MAX_RANK"},
|
|
{0x07, "MSIDXSPROP_RESULTS_FOUND"},
|
|
{0, NULL}
|
|
};
|
|
|
|
/* 2.2.5.1 */
|
|
static const value_string QueryGuid_IDS[] = {
|
|
{0x02, "RankVector"},
|
|
{0x03, "System.Search.Rank"},
|
|
{0x04, "System.Search.HitCount"},
|
|
{0x05, "System.Search.EntryID"},
|
|
{0x06, "All"},
|
|
{0x8, "System.Search.ReverseFileName"},
|
|
{0x09, "System.ItemURL"},
|
|
{0xa, "System.ContentUrl"},
|
|
{0, NULL}
|
|
};
|
|
|
|
/* 2.2.5.2 */
|
|
static const value_string StorageGuid_IDS[] = {
|
|
{0x02, "System.ItemFolderNameDisplay"},
|
|
{0x03, "ClassId"},
|
|
{0x04, "System.ItemTypeText"},
|
|
{0x08, "FileIndex"},
|
|
{0x09, "USN"},
|
|
{0x0a, "System.ItemNameDisplay"},
|
|
{0x0b, "Path"},
|
|
{0x0c, "System.Size"},
|
|
{0x0d, "System.FileAttributes"},
|
|
{0x0e, "System.DateModified"},
|
|
{0x0f, "System.DateCreated"},
|
|
{0x10, "System.DateAccessed"},
|
|
{0x12, "AllocSize"},
|
|
{0x13, "System.Search.Contents"},
|
|
{0x14, "ShortFilename"},
|
|
{0x15, "System.FileFRN"},
|
|
{0x16, "Scope"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string DocPropSetGuid_IDS[] = {
|
|
{0x02, "System.Title"},
|
|
{0x03, "System.Subject"},
|
|
{0x04, "System.Author"},
|
|
{0x05, "System.Keywords"},
|
|
{0x06, "System.Comment"},
|
|
{0x07, "DocTemplate"},
|
|
{0x08, "System.Document.LastAuthor"},
|
|
{0x09, "System.Document.RevisionNumber"},
|
|
{0x0a, "System.Document.TotalEditTime"},
|
|
{0x0b, "System.Document.DatePrinted"},
|
|
{0x0c, "System.Document.DateCreated"},
|
|
{0x0d, "System.Document.DateSaved"},
|
|
{0x0e, "System.Document.PageCount"},
|
|
{0x0f, "System.Document.WordCount"},
|
|
{0x10, "System.Document.CharacterCount"},
|
|
{0x11, "DocThumbnail"},
|
|
{0x12, "System.ApplicationName"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string ShellDetails_IDS[] = {
|
|
{ 5, "System.ComputerName"},
|
|
{ 8, "System.ItemPathDisplayNarrow"},
|
|
{ 9, "PerceivedType"},
|
|
{11, "System.ItemType"},
|
|
{12, "FileCount"},
|
|
{14, "TotalFileSize"},
|
|
{24, "System.ParsingName"},
|
|
{25, "System.SFGAOFlags"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string PropSet1_IDS[] = {
|
|
{100, "System.ThumbnailCacheId"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string PropSet2_IDS[] = {
|
|
{3, "System.Kind"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string MusicGuid_IDS[] = {
|
|
{0x2, "System.Music.Artist"},
|
|
{0x4, "System.Music.AlbumTitle"},
|
|
{0x5, "System.Media.Year"},
|
|
{0x7, "System.Music.TrackNumber"},
|
|
{0xb, "System.Music.Genre"},
|
|
{0xc, "System.Music.Lyrics"},
|
|
{0xd, "System.Music.AlbumArtist"},
|
|
{0x21, "System.Music.ContentGroupDescription"},
|
|
{0x22, "System.Music.InitialKey"},
|
|
{0x23, "System.Music.BeatsPerMinute"},
|
|
{0x24, "System.Music.Conductor"},
|
|
{0x25, "System.Music.PartOfSet"},
|
|
{0x26, "System.Media.SubTitle"},
|
|
{0x27, "System.Music.Mood"},
|
|
{0x64, "System.Music.AlbumID"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string PropSet3_IDS[] = {
|
|
{ 2, "System.Message.BccAddress"},
|
|
{ 3, "System.Message.BccName"},
|
|
{ 4, "System.Message.CcAddress"},
|
|
{ 5, "System.Message.CcName"},
|
|
{ 6, "System.ItemFolderPathDisplay"},
|
|
{ 7, "System.ItemPathDisplay"},
|
|
{ 9, "System.Communication.AccountName"},
|
|
{10, "System.IsRead"},
|
|
{11, "System.Importance"},
|
|
{12, "System.FlagStatus"},
|
|
{13, "System.Message.FromAddress"},
|
|
{14, "System.Message.FromName"},
|
|
{15, "System.Message.Store"},
|
|
{16, "System.Message.ToAddress"},
|
|
{17, "System.Message.ToName"},
|
|
{18, "System.Contact.WebPage"},
|
|
{19, "System.Message.DateSent"},
|
|
{20, "System.Message.DateReceived"},
|
|
{21, "System.Message.AttachmentNames"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string PropSet4_IDS[] = {
|
|
{100, "System.ItemFolderPathDisplayNarrow"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string PropSet5_IDS[] = {
|
|
{100, "System.Contact.FullName"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string PropSet6_IDS[] = {
|
|
{100, "System.ItemAuthors"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string PropSet7_IDS[] = {
|
|
{2, "System.Shell.OmitFromView"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string PropSet8_IDS[] = {
|
|
{2, "System.Shell.SFGAOFlagsStrings"},
|
|
{3, "System.Link.TargetSFGAOFlagsStrings"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string PropSet9_IDS[] = {
|
|
{100, "System.ItemDate"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string PropSet10_IDS[] = {
|
|
{ 5, "System.MIMEType"},
|
|
{ 8, "System.Search.GatherTime"},
|
|
{ 9, "System.Search.AccessCount"},
|
|
{11, "System.Search.LastIndexedTotalTime"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string PropSet11_IDS[] = {
|
|
{5, "System.Priority"},
|
|
{8, "System.Message.HasAttachments"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string DocCharacter_IDS[] = {
|
|
{2, "System.Search.Autosummary"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string PropSet12_IDS[] = {
|
|
{100, "System.IsDeleted"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string PropSet13_IDS[] = {
|
|
{100, "System.IsAttachment"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string PropSet14_IDS[] = {
|
|
{100, "System.Message.ConversationID"},
|
|
{101, "System.Message.ConversationIndex"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string DocPropSetGuid2_IDS[] = {
|
|
{0x02, "System.Category"},
|
|
{0x03, "System.Document.PresentationFormat"},
|
|
{0x04, "System.Document.ByteCount"},
|
|
{0x05, "System.Document.LineCount"},
|
|
{0x06, "System.Document.ParagraphCount"},
|
|
{0x07, "System.Document.SlideCount"},
|
|
{0x08, "DocNoteCount"},
|
|
{0x09, "System.Document.HiddenSlideCount"},
|
|
{0x0D, "DocPartTitles"},
|
|
{0x0E, "System.Document.Manager"},
|
|
{0x0F, "System.Company"},
|
|
{0x1A, "System.ContentType"},
|
|
{0x1B, "System.ContentStatus"},
|
|
{0x1C, "System.Language"},
|
|
{0x1D, "System.Document.Version"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string SystemContact_IDS[] = {
|
|
{ 6, "System.Contact.JobTitle"},
|
|
{ 7, "System.Contact.OfficeLocation"},
|
|
{20, "System.Contact.HomeTelephone"},
|
|
{25, "System.Contact.PrimaryTelephone"},
|
|
{35, "System.Contact.MobileTelephone"},
|
|
{47, "System.Contact.Birthday"},
|
|
{48, "System.Contact.PrimaryEmailAddress"},
|
|
{65, "System.Contact.HomeAddressCity"},
|
|
{69, "System.Contact.PersonalTitle"},
|
|
{71, "System.Contact.MiddleName"},
|
|
{73, "System.Contact.Suffix"},
|
|
{74, "System.Contact.NickName"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static const value_string PropSet15_IDS[] = {
|
|
{0x64, "System.Calendar.IsOnline"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet16_IDS[] = {
|
|
{0x64, "System.Contact.OtherAddressStreet"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet17_IDS[] = {
|
|
{0x2, "System.DRM.IsProtected"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet18_IDS[] = {
|
|
{0x64, "System.Calendar.OptionalAttendeeNames"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet19_IDS[] = {
|
|
{0x64, "System.Calendar.ShowTimeAs"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet20_IDS[] = {
|
|
{0x64, "System.ParentalRatingReason"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet21_IDS[] = {
|
|
{0x64, "System.Project"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet22_IDS[] = {
|
|
{0x64, "System.Contact.OtherAddressCountry"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet23_IDS[] = {
|
|
{0x9, "System.Status"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet24_IDS[] = {
|
|
{0x64, "System.DateArchived"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet25_IDS[] = {
|
|
{0x64, "System.Contact.CarTelephone"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet26_IDS[] = {
|
|
{0x64, "System.Calendar.ResponseStatus"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet27_IDS[] = {
|
|
{0x64, "System.Task.BillingInformation"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet28_IDS[] = {
|
|
{0x64, "System.Media.AverageLevel"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet29_IDS[] = {
|
|
{0x64, "System.Contact.SpouseName"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet30_IDS[] = {
|
|
{0x64, "System.Document.DocumentID"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet31_IDS[] = {
|
|
{0x64, "System.RecordedTV.NetworkAffiliation"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet32_IDS[] = {
|
|
{0x64, "System.PriorityText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet33_IDS[] = {
|
|
{0x64, "System.Contact.Children"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet34_IDS[] = {
|
|
{0x64, "System.RecordedTV.RecordingTime"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet35_IDS[] = {
|
|
{0x64, "System.FlagColorText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet36_IDS[] = {
|
|
{0x64, "System.Contact.OtherAddressPostalCode"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet37_IDS[] = {
|
|
{0x64, "System.Photo.SharpnessText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet38_IDS[] = {
|
|
{0x64, "System.Contact.OtherAddress"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet40_IDS[] = {
|
|
{0x64, "System.Contact.BusinessAddress"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet41_IDS[] = {
|
|
{0x64, "System.IsIncomplete"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet42_IDS[] = {
|
|
{0x64, "System.Contact.EmailAddress2"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet43_IDS[] = {
|
|
{0x64, "System.Contact.BusinessTelephone"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet45_IDS[] = {
|
|
{0x64, "System.Image.CompressionText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet46_IDS[] = {
|
|
{0x64, "System.Contact.HomeAddressState"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet47_IDS[] = {
|
|
{0x64, "System.Contact.EmailAddress3"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet48_IDS[] = {
|
|
{0x64, "System.Communication.FollowupIconIndex"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet49_IDS[] = {
|
|
{0x64, "System.Photo.TagViewAggregate"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet50_IDS[] = {
|
|
{0x64, "System.Search.Store"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet51_IDS[] = {
|
|
{0x64, "System.FileName"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet52_IDS[] = {
|
|
{0x64, "System.Contact.HomeAddressStreet"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet53_IDS[] = {
|
|
{0x64, "System.Contact.HomeAddressPostalCode"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet54_IDS[] = {
|
|
{0x64, "System.Contact.BusinessHomePage"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet55_IDS[] = {
|
|
{0x64, "System.Calendar.RequiredAttendeeNames"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet56_IDS[] = {
|
|
{0x64, "System.FlagColor"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet57_IDS[] = {
|
|
{0x64, "System.Message.ProofInProgress"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet58_IDS[] = {
|
|
{0x64, "System.Contact.PrimaryAddressPostOfficeBox"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet59_IDS[] = {
|
|
{0x64, "System.Calendar.IsRecurring"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet60_IDS[] = {
|
|
{0x64, "System.Contact.HomeAddress"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet61_IDS[] = {
|
|
{0x64, "System.Photo.MaxAperture"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet62_IDS[] = {
|
|
{0x64, "System.ItemParticipants"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet63_IDS[] = {
|
|
{0x64, "System.Media.DateReleased"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet64_IDS[] = {
|
|
{0x64, "System.Journal.Contacts"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet65_IDS[] = {
|
|
{0x64, "System.Calendar.Resources"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet66_IDS[] = {
|
|
{0x67, "System.Message.MessageClass"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet67_IDS[] = {
|
|
{0x9, "System.Rating"},
|
|
{0xb, "System.Copyright"},
|
|
{0xd, "System.Media.ClassPrimaryID"},
|
|
{0xe, "System.Media.ClassSecondaryID"},
|
|
{0xf, "System.Media.DVDID"},
|
|
{0x10, "System.Media.MCDI"},
|
|
{0x11, "System.Media.MetadataContentProvider"},
|
|
{0x12, "System.Media.ContentDistributor"},
|
|
{0x13, "System.Music.Composer"},
|
|
{0x14, "System.Video.Director"},
|
|
{0x15, "System.ParentalRating"},
|
|
{0x16, "System.Media.Producer"},
|
|
{0x17, "System.Media.Writer"},
|
|
{0x18, "System.Media.CollectionGroupID"},
|
|
{0x19, "System.Media.CollectionID"},
|
|
{0x1a, "System.Media.ContentID"},
|
|
{0x1b, "System.Media.CreatorApplication"},
|
|
{0x1c, "System.Media.CreatorApplicationVersion"},
|
|
{0x1e, "System.Media.Publisher"},
|
|
{0x1f, "System.Music.Period"},
|
|
{0x22, "System.Media.UserWebUrl"},
|
|
{0x23, "System.Media.UniqueFileIdentifier"},
|
|
{0x24, "System.Media.EncodedBy"},
|
|
{0x26, "System.Media.ProtectionType"},
|
|
{0x27, "System.Media.ProviderRating"},
|
|
{0x28, "System.Media.ProviderStyle"},
|
|
{0x29, "System.Media.UserNoAutoInfo"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet68_IDS[] = {
|
|
{0x64, "System.Calendar.OrganizerName"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet69_IDS[] = {
|
|
{0x64, "System.Photo.PeopleNames"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet70_IDS[] = {
|
|
{0x3, "System.Media.Duration"},
|
|
{0x4, "System.Audio.EncodingBitrate"},
|
|
{0x5, "System.Audio.SampleRate"},
|
|
{0x6, "System.Audio.SampleSize"},
|
|
{0x7, "System.Audio.ChannelCount"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet71_IDS[] = {
|
|
{0x64, "System.FileExtension"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet72_IDS[] = {
|
|
{0x103, "System.Image.Compression"},
|
|
{0x10f, "System.Photo.CameraManufacturer"},
|
|
{0x110, "System.Photo.CameraModel"},
|
|
{0x112, "System.Photo.Orientation"},
|
|
{0x131, "System.SoftwareUsed"},
|
|
{0x4748, "System.Photo.Event"},
|
|
{0x4752, "System.DateImported"},
|
|
{0x829a, "System.Photo.ExposureTime"},
|
|
{0x829d, "System.Photo.FNumber"},
|
|
{0x8822, "System.Photo.ExposureProgram"},
|
|
{0x8827, "System.Photo.ISOSpeed"},
|
|
{0x9003, "System.Photo.DateTaken"},
|
|
{0x9201, "System.Photo.ShutterSpeed"},
|
|
{0x9202, "System.Photo.Aperture"},
|
|
{0x9204, "System.Photo.ExposureBias"},
|
|
{0x9206, "System.Photo.SubjectDistance"},
|
|
{0x9207, "System.Photo.MeteringMode"},
|
|
{0x9208, "System.Photo.LightSource"},
|
|
{0x9209, "System.Photo.Flash"},
|
|
{0x920a, "System.Photo.FocalLength"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet73_IDS[] = {
|
|
{0x64, "System.Contact.TTYTDDTelephone"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet74_IDS[] = {
|
|
{0x64, "System.Photo.PhotometricInterpretationText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet75_IDS[] = {
|
|
{0x64, "System.Calendar.OptionalAttendeeAddresses"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet76_IDS[] = {
|
|
{0x64, "System.Calendar.ReminderTime"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet77_IDS[] = {
|
|
{0x64, "System.Calendar.RequiredAttendeeAddresses"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet78_IDS[] = {
|
|
{0x64, "System.Calendar.OrganizerAddress"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet79_IDS[] = {
|
|
{0x2, "System.Link.TargetParsingPath"},
|
|
{0x8, "System.Link.TargetSFGAOFlags"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet80_IDS[] = {
|
|
{0x64, "System.Contact.Hobbies"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet81_IDS[] = {
|
|
{0x64, "System.Contact.HomeAddressPostOfficeBox"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet82_IDS[] = {
|
|
{0x64, "System.Contact.CompanyMainTelephone"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet83_IDS[] = {
|
|
{0x64, "System.IsFlagged"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet84_IDS[] = {
|
|
{0x64, "System.Contact.FirstName"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet85_IDS[] = {
|
|
{0xa, "System.IsEncrypted"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet86_IDS[] = {
|
|
{0x64, "System.Calendar.Duration"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet87_IDS[] = {
|
|
{0x64, "System.Contact.PrimaryAddressCity"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet88_IDS[] = {
|
|
{0x64, "System.Contact.OtherAddressPostOfficeBox"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet89_IDS[] = {
|
|
{0x64, "System.ProviderItemID"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet90_IDS[] = {
|
|
{0x64, "System.Contact.BusinessAddressCountry"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet91_IDS[] = {
|
|
{0x64, "System.Contact.EmailName"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet92_IDS[] = {
|
|
{0x64, "System.Photo.FocalLengthInFilm"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet93_IDS[] = {
|
|
{0x64, "System.Contact.IMAddress"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet94_IDS[] = {
|
|
{0x64, "System.DateAcquired"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet95_IDS[] = {
|
|
{0x64, "System.DateCompleted"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet96_IDS[] = {
|
|
{0x64, "System.ItemName"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet97_IDS[] = {
|
|
{0x64, "System.Contact.PrimaryAddressPostalCode"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet99_IDS[] = {
|
|
{0x64, "System.Document.ClientID"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet100_IDS[] = {
|
|
{0x64, "System.Photo.ExposureProgramText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet101_IDS[] = {
|
|
{0x64, "System.Note.ColorText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet102_IDS[] = {
|
|
{0x64, "System.Photo.MeteringModeText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet103_IDS[] = {
|
|
{0x2, "System.Link.TargetExtension"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet104_IDS[] = {
|
|
{0x64, "System.Contact.BusinessAddressState"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet105_IDS[] = {
|
|
{0x64, "System.Photo.OrientationText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet106_IDS[] = {
|
|
{0x64, "System.Contact.Label"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet107_IDS[] = {
|
|
{0x64, "System.Calendar.Location"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet108_IDS[] = {
|
|
{0x64, "System.Photo.SaturationText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet109_IDS[] = {
|
|
{0x64, "System.Message.ToDoTitle"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet110_IDS[] = {
|
|
{0x64, "System.Contact.Anniversary"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet111_IDS[] = {
|
|
{0x64, "System.Contact.FileAsName"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet112_IDS[] = {
|
|
{0x64, "System.GPS.Date"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet113_IDS[] = {
|
|
{0x64, "System.IsFlaggedComplete"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet114_IDS[] = {
|
|
{0x2, "System.Contact.JA.CompanyNamePhonetic"},
|
|
{0x3, "System.Contact.JA.FirstNamePhonetic"},
|
|
{0x4, "System.Contact.JA.LastNamePhonetic"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet115_IDS[] = {
|
|
{0x64, "System.Communication.SecurityFlags"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet116_IDS[] = {
|
|
{0x64, "System.Identity"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet117_IDS[] = {
|
|
{0x64, "System.Contact.BusinessAddressPostOfficeBox"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet118_IDS[] = {
|
|
{0x64, "System.AcquisitionID"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet119_IDS[] = {
|
|
{0x64, "System.Contact.EmailAddresses"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet120_IDS[] = {
|
|
{0x64, "System.Communication.TaskStatus"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet121_IDS[] = {
|
|
{0x64, "System.Contact.LastName"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet122_IDS[] = {
|
|
{0x64, "System.Communication.DateItemExpires"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet123_IDS[] = {
|
|
{0x64, "System.ImportanceText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet124_IDS[] = {
|
|
{0x64, "System.Search.ContainerHash"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet125_IDS[] = {
|
|
{0x64, "System.Contact.BusinessFaxNumber"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet126_IDS[] = {
|
|
{0x2, "System.Link.TargetUrl"},
|
|
{0x1a, "System.IconIndex"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet127_IDS[] = {
|
|
{0x64, "System.RecordedTV.StationName"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet128_IDS[] = {
|
|
{0x64, "System.Task.Owner"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet129_IDS[] = {
|
|
{0x64, "System.Photo.ProgramModeText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet130_IDS[] = {
|
|
{0x64, "System.Contact.PrimaryAddressCountry"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet131_IDS[] = {
|
|
{0x64, "System.Note.Color"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet132_IDS[] = {
|
|
{0x64, "System.Contact.OtherAddressState"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet133_IDS[] = {
|
|
{0x64, "System.Message.AttachmentContents"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet134_IDS[] = {
|
|
{0x64, "System.Communication.TaskStatusText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet135_IDS[] = {
|
|
{0x64, "System.Communication.HeaderItem"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet136_IDS[] = {
|
|
{0x64, "System.Contact.EmailAddress"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet137_IDS[] = {
|
|
{0x64, "System.Contact.Profession"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet138_IDS[] = {
|
|
{0x64, "System.Contact.BusinessAddressPostalCode"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet139_IDS[] = {
|
|
{0x64, "System.ItemNamePrefix"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet140_IDS[] = {
|
|
{0x64, "System.Photo.DigitalZoom"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet141_IDS[] = {
|
|
{0x64, "System.SourceItem"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet142_IDS[] = {
|
|
{0x64, "System.Photo.WhiteBalance"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet143_IDS[] = {
|
|
{0x64, "System.SensitivityText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet144_IDS[] = {
|
|
{0x64, "System.Contact.Gender"},
|
|
{0x65, "System.Contact.GenderValue"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet145_IDS[] = {
|
|
{0x64, "System.Contact.OtherAddressCity"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet146_IDS[] = {
|
|
{0x64, "System.Music.DisplayArtist"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet147_IDS[] = {
|
|
{0x64, "System.Message.SenderAddress"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet148_IDS[] = {
|
|
{0x64, "System.Contact.PrimaryAddressState"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet149_IDS[] = {
|
|
{0x64, "System.Journal.EntryType"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet150_IDS[] = {
|
|
{0x64, "System.Contact.BusinessAddressStreet"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet151_IDS[] = {
|
|
{0x4, "System.FileOwner"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet152_IDS[] = {
|
|
{0x64, "System.Contact.HomeAddressCountry"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet153_IDS[] = {
|
|
{0x64, "System.Task.CompletionStatus"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet154_IDS[] = {
|
|
{0x10, "System.Software.DateLastUsed"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet155_IDS[] = {
|
|
{0x64, "System.Contact.Department"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet156_IDS[] = {
|
|
{0x64, "System.Calendar.ShowTimeAsText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet157_IDS[] = {
|
|
{0x64, "System.Sensitivity"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet158_IDS[] = {
|
|
{0x64, "System.RecordedTV.OriginalBroadcastDate"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet159_IDS[] = {
|
|
{0x64, "System.Music.IsCompilation"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet160_IDS[] = {
|
|
{0x64, "System.DueDate"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet161_IDS[] = {
|
|
{0x3, "System.FileDescription"},
|
|
{0x6, "System.OriginalFileName"},
|
|
{0x7, "System.Software.ProductName"},
|
|
{0x8, "System.Software.ProductVersion"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet162_IDS[] = {
|
|
{0x64, "System.MileageInformation"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet163_IDS[] = {
|
|
{0x2, "System.RecordedTV.EpisodeName"},
|
|
{0x3, "System.RecordedTV.ProgramDescription"},
|
|
{0x5, "System.RecordedTV.StationCallSign"},
|
|
{0x7, "System.RecordedTV.ChannelNumber"},
|
|
{0xc, "System.RecordedTV.IsClosedCaptioningAvailable"},
|
|
{0xd, "System.RecordedTV.IsRepeatBroadcast"},
|
|
{0xe, "System.RecordedTV.IsSAP"},
|
|
{0xf, "System.RecordedTV.DateContentExpires"},
|
|
{0x10, "System.RecordedTV.IsATSCContent"},
|
|
{0x11, "System.RecordedTV.IsDTVContent"},
|
|
{0x12, "System.RecordedTV.IsHDContent"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet164_IDS[] = {
|
|
{0x64, "System.Audio.PeakValue"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet165_IDS[] = {
|
|
{0x64, "System.Contact.TelexNumber"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet166_IDS[] = {
|
|
{0x64, "System.Message.SenderName"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet167_IDS[] = {
|
|
{0x64, "System.Message.Flags"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet168_IDS[] = {
|
|
{0x64, "System.IsFolder"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet169_IDS[] = {
|
|
{0x64, "System.Contact.AssistantTelephone"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet170_IDS[] = {
|
|
{0x64, "System.KindText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet171_IDS[] = {
|
|
{0x64, "System.Photo.ContrastText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet172_IDS[] = {
|
|
{0x3, "System.Image.HorizontalSize"},
|
|
{0x4, "System.Image.VerticalSize"},
|
|
{0x5, "System.Image.HorizontalResolution"},
|
|
{0x6, "System.Image.VerticalResolution"},
|
|
{0x7, "System.Image.BitDepth"},
|
|
{0xc, "System.Media.FrameCount"},
|
|
{0xd, "System.Image.Dimensions"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet173_IDS[] = {
|
|
{0x64, "System.Message.IsFwdOrReply"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet174_IDS[] = {
|
|
{0x64, "System.Photo.WhiteBalanceText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet175_IDS[] = {
|
|
{0x64, "System.Photo.GainControlText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet176_IDS[] = {
|
|
{0x64, "System.Communication.PolicyTag"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet177_IDS[] = {
|
|
{0x64, "System.Contact.HomeFaxNumber"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet178_IDS[] = {
|
|
{0x64, "System.FlagStatusText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet179_IDS[] = {
|
|
{0x64, "System.Contact.AssistantName"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet180_IDS[] = {
|
|
{0x64, "System.Message.ToDoFlags"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet181_IDS[] = {
|
|
{0x64, "System.RatingText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet182_IDS[] = {
|
|
{0x64, "System.Document.Contributor"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet183_IDS[] = {
|
|
{0x64, "System.Contact.CallbackTelephone"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet184_IDS[] = {
|
|
{0x64, "System.EndDate"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet185_IDS[] = {
|
|
{0x64, "System.Media.DateEncoded"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet186_IDS[] = {
|
|
{0x64, "System.Photo.FlashText"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet187_IDS[] = {
|
|
{0x64, "System.Photo.FlashFired"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet188_IDS[] = {
|
|
{0x64, "System.Document.Division"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet189_IDS[] = {
|
|
{0x64, "System.Contact.PagerTelephone"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet190_IDS[] = {
|
|
{0x64, "System.Contact.BusinessAddressCity"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet191_IDS[] = {
|
|
{0x64, "System.Media.SubscriptionContentId"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet192_IDS[] = {
|
|
{0x64, "System.Contact.PrimaryAddressStreet"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet193_IDS[] = {
|
|
{0x64, "System.StartDate"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet194_IDS[] = {
|
|
{0x2, "System.Video.StreamName"},
|
|
{0x3, "System.Video.FrameWidth"},
|
|
{0x4, "System.Video.FrameHeight"},
|
|
{0x6, "System.Video.FrameRate"},
|
|
{0x8, "System.Video.EncodingBitrate"},
|
|
{0x9, "System.Video.SampleSize"},
|
|
{0xa, "System.Video.Compression"},
|
|
{0x2a, "System.Video.HorizontalAspectRatio"},
|
|
{0x2b, "System.Video.TotalBitrate"},
|
|
{0x2c, "System.Video.FourCC"},
|
|
{0x2d, "System.Video.VerticalAspectRatio"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static const value_string PropSet195_IDS[] = {
|
|
{0x64, "System.Contact.MailingAddress"},
|
|
{0,NULL}
|
|
};
|
|
|
|
static struct GuidPropertySet GuidPropertySet[] = {
|
|
{ {0xa9bd1526, 0x6a80, 0x11d0, {0x8c, 0x9d, 0x00, 0x20, 0xaf, 0x1d, 0x74, 0x0e}},
|
|
"DBPROPSET_FSCIFRMWRK_EXT", "File system content index framework",
|
|
DBPROPSET_FSCIFRMWRK_EXT_IDS
|
|
},
|
|
{ {0xa7ac77ed, 0xf8d7, 0x11ce, {0xa7, 0x98, 0x00, 0x20, 0xf8, 0x00, 0x80, 0x25}},
|
|
"DBPROPSET_QUERYEXT", "Query extension",
|
|
DBPROPSET_QUERYEXT_IDS
|
|
},
|
|
{ {0xafafaca5, 0xb5d1, 0x11d0, {0x8c, 0x62, 0x00, 0xc0, 0x4f, 0xc2, 0xdb, 0x8d}},
|
|
"DBPROPSET_CIFRMWRKCORE_EXT", "Content index framework core",
|
|
DBPROPSET_CIFRMWRKCORE_EXT_IDS
|
|
},
|
|
{ {0xAA6EE6B0, 0xE828, 0x11D0, {0xB2, 0x3E, 0x00, 0xAA, 0x00, 0x47, 0xFC, 0x01}},
|
|
"DBPROPSET_MSIDXS_ROWSETEXT", "???",
|
|
DBPROPSET_MSIDXS_ROWSETEXT_IDS
|
|
},
|
|
{ {0xB725F130, 0x47ef, 0x101a, {0xA5, 0xF1, 0x02, 0x60, 0x8C, 0x9E, 0xEB, 0xAC}},
|
|
"Storage", "Storage Property Set",
|
|
StorageGuid_IDS
|
|
},
|
|
{ {0xF29F85E0, 0x4FF9, 0x1068, {0xAB, 0x91, 0x08, 0x00, 0x2B, 0x27, 0xB3, 0xD9}},
|
|
"Document", "Document Property Set",
|
|
DocPropSetGuid_IDS
|
|
},
|
|
{ {0x49691C90, 0x7E17, 0x101A, {0xA9, 0x1C, 0x08, 0x00, 0x2B, 0x2E, 0xCD, 0xA9}},
|
|
"Query", "Query Property Set",
|
|
QueryGuid_IDS
|
|
},
|
|
{ {0x28636AA6, 0x953D, 0x11D2, {0xB5, 0xD6, 0x00, 0xC0, 0x4F, 0xD9, 0x18, 0xD0}},
|
|
"ShellDetails", "Shell Details Property Set",
|
|
ShellDetails_IDS
|
|
},
|
|
{ {0x446D16B1, 0x8DAD, 0x4870, {0xA7, 0x48, 0x40, 0x2E, 0xA4, 0x3D, 0x78, 0x8C}},
|
|
"???", "Unspecified Property Set",
|
|
PropSet1_IDS
|
|
},
|
|
{ {0x1E3EE840, 0xBC2B, 0x476C, {0x82, 0x37, 0x2A, 0xCD, 0x1A, 0x83, 0x9B, 0x22}},
|
|
"???", "Unspecified Property Set",
|
|
PropSet2_IDS
|
|
},
|
|
{ {0x56A3372E, 0xCE9C, 0x11d2, {0x9F, 0x0E, 0x00, 0x60, 0x97, 0xC6, 0x86, 0xF6}},
|
|
"Music", "Music Property Set",
|
|
MusicGuid_IDS
|
|
},
|
|
{ {0xE3E0584C, 0xB788, 0x4A5A, {0xBB, 0x20, 0x7F, 0x5A, 0x44, 0xC9, 0xAC, 0xDD}},
|
|
"???", "Unspecified Property Set",
|
|
PropSet3_IDS
|
|
},
|
|
{ {0xDABD30ED, 0x0043, 0x4789, {0xA7, 0xF8, 0xD0, 0x13, 0xA4, 0x73, 0x66, 0x22}},
|
|
"???", "Unspecified Property Set",
|
|
PropSet4_IDS
|
|
},
|
|
{ {0x635E9051, 0x50A5, 0x4BA2, {0xB9, 0xDB, 0x4E, 0xD0, 0x56, 0xC7, 0x72, 0x96}},
|
|
"???", "Unspecified Property Set",
|
|
PropSet5_IDS
|
|
},
|
|
{ {0xD0A04F0A, 0x462A, 0x48A4, {0xBB, 0x2F, 0x37, 0x06, 0xE8, 0x8D, 0xBD, 0x7D}},
|
|
"???", "Unspecified Property Set",
|
|
PropSet6_IDS
|
|
},
|
|
{ {0xDE35258C, 0xC695, 0x4CBC, {0xB9, 0x82, 0x38, 0xB0, 0xAD, 0x24, 0xCE, 0xD0}},
|
|
"???", "Unspecified Property Set",
|
|
PropSet7_IDS
|
|
},
|
|
{ {0xD6942081, 0xD53B, 0x443D, {0xAD, 0x47, 0x5E, 0x05, 0x9D, 0x9C, 0xD2, 0x7A}},
|
|
"???", "Unspecified Property Set",
|
|
PropSet8_IDS
|
|
},
|
|
{ {0xF7DB74B4, 0x4287, 0x4103, {0xAF, 0xBA, 0xF1, 0xB1, 0x3D, 0xCD, 0x75, 0xCF}},
|
|
"???", "Unspecified Property Set",
|
|
PropSet9_IDS
|
|
},
|
|
{ {0x0B63E350, 0x9CCC, 0x11d0, {0xBC, 0xDB, 0x00, 0x80, 0x5F, 0xCC, 0xCE, 0x04}},
|
|
"???", "Unspecified Property Set",
|
|
PropSet10_IDS
|
|
},
|
|
{ {0x9C1FCF74, 0x2D97, 0x41BA, {0xB4, 0xAE, 0xCB, 0x2E, 0x36, 0x61, 0xA6, 0xE4}},
|
|
"???", "Unspecified Property Set",
|
|
PropSet11_IDS
|
|
},
|
|
{ {0x560C36C0, 0x503A, 0x11CF, {0xBA, 0xA1, 0x00, 0x00, 0x4C, 0x75, 0x2A, 0x9A}},
|
|
"DocCharacter", "Document characterization Property Set",
|
|
DocCharacter_IDS
|
|
},
|
|
{ {0x5CDA5FC8, 0x33EE, 0x4FF3, {0x90, 0x94, 0xAE, 0x7B, 0xD8, 0x86, 0x8C, 0x4D}},
|
|
"???", "Unspecified Property Set",
|
|
PropSet12_IDS
|
|
},
|
|
{ {0xF23F425C, 0x71A1, 0x4FA8, {0x92, 0x2F, 0x67, 0x8E, 0xA4, 0xA6, 0x04, 0x08}},
|
|
"???", "Unspecified Property Set",
|
|
PropSet13_IDS
|
|
},
|
|
{ {0xDC8F80BD, 0xAF1E, 0x4289, {0x85, 0xB6, 0x3D, 0xFC, 0x1B, 0x49, 0x39, 0x92}},
|
|
"???", "Unspecified Property Set",
|
|
PropSet14_IDS
|
|
},
|
|
{ {0xD5CDD502, 0x2E9C, 0x101B, {0x93, 0x97, 0x08, 0x00, 0x2B, 0x2C, 0xF9, 0xAE}},
|
|
"DocPropSet2", "Document Property Set 2",
|
|
DocPropSetGuid2_IDS
|
|
},
|
|
{ {0x176DC63C, 0x2688, 0x4E89, {0x81, 0x43, 0xA3, 0x47, 0x80, 0x0F, 0x25, 0xE9}},
|
|
"System.Contact", "System Contact Property Set",
|
|
SystemContact_IDS
|
|
},
|
|
{ {0xBFEE9149, 0xE3E2, 0x49A7, {0xA8, 0x62, 0xC0, 0x59, 0x88, 0x14, 0x5C, 0xEC}},
|
|
"???","Unspecified Property Set",
|
|
PropSet15_IDS
|
|
},
|
|
{ {0xFF962609, 0xB7D6, 0x4999, {0x86, 0x2D, 0x95, 0x18, 0x0D, 0x52, 0x9A, 0xEA}},
|
|
"???","Unspecified Property Set",
|
|
PropSet16_IDS
|
|
},
|
|
{ {0xAEAC19E4, 0x89AE, 0x4508, {0xB9, 0xB7, 0xBB, 0x86, 0x7A, 0xBE, 0xE2, 0xED}},
|
|
"???","Unspecified Property Set",
|
|
PropSet17_IDS
|
|
},
|
|
{ {0x09429607, 0x582D, 0x437F, {0x84, 0xC3, 0xDE, 0x93, 0xA2, 0xB2, 0x4C, 0x3C}},
|
|
"???","Unspecified Property Set",
|
|
PropSet18_IDS
|
|
},
|
|
{ {0x5BF396D4, 0x5EB2, 0x466F, {0xBD, 0xE9, 0x2F, 0xB3, 0xF2, 0x36, 0x1D, 0x6E}},
|
|
"???","Unspecified Property Set",
|
|
PropSet19_IDS
|
|
},
|
|
{ {0x10984E0A, 0xF9F2, 0x4321, {0xB7, 0xEF, 0xBA, 0xF1, 0x95, 0xAF, 0x43, 0x19}},
|
|
"???","Unspecified Property Set",
|
|
PropSet20_IDS
|
|
},
|
|
{ {0x39A7F922, 0x477C, 0x48DE, {0x8B, 0xC8, 0xB2, 0x84, 0x41, 0xE3, 0x42, 0xE3}},
|
|
"???","Unspecified Property Set",
|
|
PropSet21_IDS
|
|
},
|
|
{ {0x8F167568, 0x0AAE, 0x4322, {0x8E, 0xD9, 0x60, 0x55, 0xB7, 0xB0, 0xE3, 0x98}},
|
|
"???","Unspecified Property Set",
|
|
PropSet22_IDS
|
|
},
|
|
{ {0x000214A1, 0x0000, 0x0000, {0xC0, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x46}},
|
|
"???","Unspecified Property Set",
|
|
PropSet23_IDS
|
|
},
|
|
{ {0x43F8D7B7, 0xA444, 0x4F87, {0x93, 0x83, 0x52, 0x27, 0x1C, 0x9B, 0x91, 0x5C}},
|
|
"???","Unspecified Property Set",
|
|
PropSet24_IDS
|
|
},
|
|
{ {0x8FDC6DEA, 0xB929, 0x412B, {0xBA, 0x90, 0x39, 0x7A, 0x25, 0x74, 0x65, 0xFE}},
|
|
"???","Unspecified Property Set",
|
|
PropSet25_IDS
|
|
},
|
|
{ {0x188C1F91, 0x3C40, 0x4132, {0x9E, 0xC5, 0xD8, 0xB0, 0x3B, 0x72, 0xA8, 0xA2}},
|
|
"???","Unspecified Property Set",
|
|
PropSet26_IDS
|
|
},
|
|
{ {0xD37D52C6, 0x261C, 0x4303, {0x82, 0xB3, 0x08, 0xB9, 0x26, 0xAC, 0x6F, 0x12}},
|
|
"???","Unspecified Property Set",
|
|
PropSet27_IDS
|
|
},
|
|
{ {0x09EDD5B6, 0xB301, 0x43C5, {0x99, 0x90, 0xD0, 0x03, 0x02, 0xEF, 0xFD, 0x46}},
|
|
"???","Unspecified Property Set",
|
|
PropSet28_IDS
|
|
},
|
|
{ {0x9D2408B6, 0x3167, 0x422B, {0x82, 0xB0, 0xF5, 0x83, 0xB7, 0xA7, 0xCF, 0xE3}},
|
|
"???","Unspecified Property Set",
|
|
PropSet29_IDS
|
|
},
|
|
{ {0xE08805C8, 0xE395, 0x40DF, {0x80, 0xD2, 0x54, 0xF0, 0xD6, 0xC4, 0x31, 0x54}},
|
|
"???","Unspecified Property Set",
|
|
PropSet30_IDS
|
|
},
|
|
{ {0x2C53C813, 0xFB63, 0x4E22, {0xA1, 0xAB, 0x0B, 0x33, 0x1C, 0xA1, 0xE2, 0x73}},
|
|
"???","Unspecified Property Set",
|
|
PropSet31_IDS
|
|
},
|
|
{ {0xD98BE98B, 0xB86B, 0x4095, {0xBF, 0x52, 0x9D, 0x23, 0xB2, 0xE0, 0xA7, 0x52}},
|
|
"???","Unspecified Property Set",
|
|
PropSet32_IDS
|
|
},
|
|
{ {0xD4729704, 0x8EF1, 0x43EF, {0x90, 0x24, 0x2B, 0xD3, 0x81, 0x18, 0x7F, 0xD5}},
|
|
"???","Unspecified Property Set",
|
|
PropSet33_IDS
|
|
},
|
|
{ {0xA5477F61, 0x7A82, 0x4ECA, {0x9D, 0xDE, 0x98, 0xB6, 0x9B, 0x24, 0x79, 0xB3}},
|
|
"???","Unspecified Property Set",
|
|
PropSet34_IDS
|
|
},
|
|
{ {0x45EAE747, 0x8E2A, 0x40AE, {0x8C, 0xBF, 0xCA, 0x52, 0xAB, 0xA6, 0x15, 0x2A}},
|
|
"???","Unspecified Property Set",
|
|
PropSet35_IDS
|
|
},
|
|
{ {0x95C656C1, 0x2ABF, 0x4148, {0x9E, 0xD3, 0x9E, 0xC6, 0x02, 0xE3, 0xB7, 0xCD}},
|
|
"???","Unspecified Property Set",
|
|
PropSet36_IDS
|
|
},
|
|
{ {0x51EC3F47, 0xDD50, 0x421D, {0x87, 0x69, 0x33, 0x4F, 0x50, 0x42, 0x4B, 0x1E}},
|
|
"???","Unspecified Property Set",
|
|
PropSet37_IDS
|
|
},
|
|
{ {0x508161FA, 0x313B, 0x43D5, {0x83, 0xA1, 0xC1, 0xAC, 0xCF, 0x68, 0x62, 0x2C}},
|
|
"???","Unspecified Property Set",
|
|
PropSet38_IDS
|
|
},
|
|
{ {0x730FB6DD, 0xCF7C, 0x426B, {0xA0, 0x3F, 0xBD, 0x16, 0x6C, 0xC9, 0xEE, 0x24}},
|
|
"???","Unspecified Property Set",
|
|
PropSet40_IDS
|
|
},
|
|
{ {0x346C8BD1, 0x2E6A, 0x4C45, {0x89, 0xA4, 0x61, 0xB7, 0x8E, 0x8E, 0x70, 0x0F}},
|
|
"???","Unspecified Property Set",
|
|
PropSet41_IDS
|
|
},
|
|
{ {0x38965063, 0xEDC8, 0x4268, {0x84, 0x91, 0xB7, 0x72, 0x31, 0x72, 0xCF, 0x29}},
|
|
"???","Unspecified Property Set",
|
|
PropSet42_IDS
|
|
},
|
|
{ {0x6A15E5A0, 0x0A1E, 0x4CD7, {0xBB, 0x8C, 0xD2, 0xF1, 0xB0, 0xC9, 0x29, 0xBC}},
|
|
"???","Unspecified Property Set",
|
|
PropSet43_IDS
|
|
},
|
|
{ {0x3F08E66F, 0x2F44, 0x4BB9, {0xA6, 0x82, 0xAC, 0x35, 0xD2, 0x56, 0x23, 0x22}},
|
|
"???","Unspecified Property Set",
|
|
PropSet45_IDS
|
|
},
|
|
{ {0xC89A23D0, 0x7D6D, 0x4EB8, {0x87, 0xD4, 0x77, 0x6A, 0x82, 0xD4, 0x93, 0xE5}},
|
|
"???","Unspecified Property Set",
|
|
PropSet46_IDS
|
|
},
|
|
{ {0x644D37B4, 0xE1B3, 0x4BAD, {0xB0, 0x99, 0x7E, 0x7C, 0x04, 0x96, 0x6A, 0xCA}},
|
|
"???","Unspecified Property Set",
|
|
PropSet47_IDS
|
|
},
|
|
{ {0x83A6347E, 0x6FE4, 0x4F40, {0xBA, 0x9C, 0xC4, 0x86, 0x52, 0x40, 0xD1, 0xF4}},
|
|
"???","Unspecified Property Set",
|
|
PropSet48_IDS
|
|
},
|
|
{ {0xB812F15D, 0xC2D8, 0x4BBF, {0xBA, 0xCD, 0x79, 0x74, 0x43, 0x46, 0x11, 0x3F}},
|
|
"???","Unspecified Property Set",
|
|
PropSet49_IDS
|
|
},
|
|
{ {0xA06992B3, 0x8CAF, 0x4ED7, {0xA5, 0x47, 0xB2, 0x59, 0xE3, 0x2A, 0xC9, 0xFC}},
|
|
"???","Unspecified Property Set",
|
|
PropSet50_IDS
|
|
},
|
|
{ {0x41CF5AE0, 0xF75A, 0x4806, {0xBD, 0x87, 0x59, 0xC7, 0xD9, 0x24, 0x8E, 0xB9}},
|
|
"???","Unspecified Property Set",
|
|
PropSet51_IDS
|
|
},
|
|
{ {0x0ADEF160, 0xDB3F, 0x4308, {0x9A, 0x21, 0x06, 0x23, 0x7B, 0x16, 0xFA, 0x2A}},
|
|
"???","Unspecified Property Set",
|
|
PropSet52_IDS
|
|
},
|
|
{ {0x8AFCC170, 0x8A46, 0x4B53, {0x9E, 0xEE, 0x90, 0xBA, 0xE7, 0x15, 0x1E, 0x62}},
|
|
"???","Unspecified Property Set",
|
|
PropSet53_IDS
|
|
},
|
|
{ {0x56310920, 0x2491, 0x4919, {0x99, 0xCE, 0xEA, 0xDB, 0x06, 0xFA, 0xFD, 0xB2}},
|
|
"???","Unspecified Property Set",
|
|
PropSet54_IDS
|
|
},
|
|
{ {0xB33AF30B, 0xF552, 0x4584, {0x93, 0x6C, 0xCB, 0x93, 0xE5, 0xCD, 0xA2, 0x9F}},
|
|
"???","Unspecified Property Set",
|
|
PropSet55_IDS
|
|
},
|
|
{ {0x67DF94DE, 0x0CA7, 0x4D6F, {0xB7, 0x92, 0x05, 0x3A, 0x3E, 0x4F, 0x03, 0xCF}},
|
|
"???","Unspecified Property Set",
|
|
PropSet56_IDS
|
|
},
|
|
{ {0x9098F33C, 0x9A7D, 0x48A8, {0x8D, 0xE5, 0x2E, 0x12, 0x27, 0xA6, 0x4E, 0x91}},
|
|
"???","Unspecified Property Set",
|
|
PropSet57_IDS
|
|
},
|
|
{ {0xDE5EF3C7, 0x46E1, 0x484E, {0x99, 0x99, 0x62, 0xC5, 0x30, 0x83, 0x94, 0xC1}},
|
|
"???","Unspecified Property Set",
|
|
PropSet58_IDS
|
|
},
|
|
{ {0x315B9C8D, 0x80A9, 0x4EF9, {0xAE, 0x16, 0x8E, 0x74, 0x6D, 0xA5, 0x1D, 0x70}},
|
|
"???","Unspecified Property Set",
|
|
PropSet59_IDS
|
|
},
|
|
{ {0x98F98354, 0x617A, 0x46B8, {0x85, 0x60, 0x5B, 0x1B, 0x64, 0xBF, 0x1F, 0x89}},
|
|
"???","Unspecified Property Set",
|
|
PropSet60_IDS
|
|
},
|
|
{ {0x08F6D7C2, 0xE3F2, 0x44FC, {0xAF, 0x1E, 0x5A, 0xA5, 0xC8, 0x1A, 0x2D, 0x3E}},
|
|
"???","Unspecified Property Set",
|
|
PropSet61_IDS
|
|
},
|
|
{ {0xD4D0AA16, 0x9948, 0x41A4, {0xAA, 0x85, 0xD9, 0x7F, 0xF9, 0x64, 0x69, 0x93}},
|
|
"???","Unspecified Property Set",
|
|
PropSet62_IDS
|
|
},
|
|
{ {0xDE41CC29, 0x6971, 0x4290, {0xB4, 0x72, 0xF5, 0x9F, 0x2E, 0x2F, 0x31, 0xE2}},
|
|
"???","Unspecified Property Set",
|
|
PropSet63_IDS
|
|
},
|
|
{ {0xDEA7C82C, 0x1D89, 0x4A66, {0x94, 0x27, 0xA4, 0xE3, 0xDE, 0xBA, 0xBC, 0xB1}},
|
|
"???","Unspecified Property Set",
|
|
PropSet64_IDS
|
|
},
|
|
{ {0x00F58A38, 0xC54B, 0x4C40, {0x86, 0x96, 0x97, 0x23, 0x59, 0x80, 0xEA, 0xE1}},
|
|
"???","Unspecified Property Set",
|
|
PropSet65_IDS
|
|
},
|
|
{ {0xCD9ED458, 0x08CE, 0x418F, {0xA7, 0x0E, 0xF9, 0x12, 0xC7, 0xBB, 0x9C, 0x5C}},
|
|
"???","Unspecified Property Set",
|
|
PropSet66_IDS
|
|
},
|
|
{ {0x64440492, 0x4C8B, 0x11D1, {0x8B, 0x70, 0x08, 0x00, 0x36, 0xB1, 0x1A, 0x03}},
|
|
"???","Unspecified Property Set",
|
|
PropSet67_IDS
|
|
},
|
|
{ {0xAAA660F9, 0x9865, 0x458E, {0xB4, 0x84, 0x01, 0xBC, 0x7F, 0xE3, 0x97, 0x3E}},
|
|
"???","Unspecified Property Set",
|
|
PropSet68_IDS
|
|
},
|
|
{ {0xE8309B6E, 0x084C, 0x49B4, {0xB1, 0xFC, 0x90, 0xA8, 0x03, 0x31, 0xB6, 0x38}},
|
|
"???","Unspecified Property Set",
|
|
PropSet69_IDS
|
|
},
|
|
{ {0x64440490, 0x4C8B, 0x11D1, {0x8B, 0x70, 0x08, 0x00, 0x36, 0xB1, 0x1A, 0x03}},
|
|
"???","Unspecified Property Set",
|
|
PropSet70_IDS
|
|
},
|
|
{ {0xE4F10A3C, 0x49E6, 0x405D, {0x82, 0x88, 0xA2, 0x3B, 0xD4, 0xEE, 0xAA, 0x6C}},
|
|
"???","Unspecified Property Set",
|
|
PropSet71_IDS
|
|
},
|
|
{ {0x14B81DA1, 0x0135, 0x4D31, {0x96, 0xD9, 0x6C, 0xBF, 0xC9, 0x67, 0x1A, 0x99}},
|
|
"???","Unspecified Property Set",
|
|
PropSet72_IDS
|
|
},
|
|
{ {0xAAF16BAC, 0x2B55, 0x45E6, {0x9F, 0x6D, 0x41, 0x5E, 0xB9, 0x49, 0x10, 0xDF}},
|
|
"???","Unspecified Property Set",
|
|
PropSet73_IDS
|
|
},
|
|
{ {0x821437D6, 0x9EAB, 0x4765, {0xA5, 0x89, 0x3B, 0x1C, 0xBB, 0xD2, 0x2A, 0x61}},
|
|
"???","Unspecified Property Set",
|
|
PropSet74_IDS
|
|
},
|
|
{ {0xD55BAE5A, 0x3892, 0x417A, {0xA6, 0x49, 0xC6, 0xAC, 0x5A, 0xAA, 0xEA, 0xB3}},
|
|
"???","Unspecified Property Set",
|
|
PropSet75_IDS
|
|
},
|
|
{ {0x72FC5BA4, 0x24F9, 0x4011, {0x9F, 0x3F, 0xAD, 0xD2, 0x7A, 0xFA, 0xD8, 0x18}},
|
|
"???","Unspecified Property Set",
|
|
PropSet76_IDS
|
|
},
|
|
{ {0x0BA7D6C3, 0x568D, 0x4159, {0xAB, 0x91, 0x78, 0x1A, 0x91, 0xFB, 0x71, 0xE5}},
|
|
"???","Unspecified Property Set",
|
|
PropSet77_IDS
|
|
},
|
|
{ {0x744C8242, 0x4DF5, 0x456C, {0xAB, 0x9E, 0x01, 0x4E, 0xFB, 0x90, 0x21, 0xE3}},
|
|
"???","Unspecified Property Set",
|
|
PropSet78_IDS
|
|
},
|
|
{ {0xB9B4B3FC, 0x2B51, 0x4A42, {0xB5, 0xD8, 0x32, 0x41, 0x46, 0xAF, 0xCF, 0x25}},
|
|
"???","Unspecified Property Set",
|
|
PropSet79_IDS
|
|
},
|
|
{ {0x5DC2253F, 0x5E11, 0x4ADF, {0x9C, 0xFE, 0x91, 0x0D, 0xD0, 0x1E, 0x3E, 0x70}},
|
|
"???","Unspecified Property Set",
|
|
PropSet80_IDS
|
|
},
|
|
{ {0x7B9F6399, 0x0A3F, 0x4B12, {0x89, 0xBD, 0x4A, 0xDC, 0x51, 0xC9, 0x18, 0xAF}},
|
|
"???","Unspecified Property Set",
|
|
PropSet81_IDS
|
|
},
|
|
{ {0x8589E481, 0x6040, 0x473D, {0xB1, 0x71, 0x7F, 0xA8, 0x9C, 0x27, 0x08, 0xED}},
|
|
"???","Unspecified Property Set",
|
|
PropSet82_IDS
|
|
},
|
|
{ {0x5DA84765, 0xE3FF, 0x4278, {0x86, 0xB0, 0xA2, 0x79, 0x67, 0xFB, 0xDD, 0x03}},
|
|
"???","Unspecified Property Set",
|
|
PropSet83_IDS
|
|
},
|
|
{ {0x14977844, 0x6B49, 0x4AAD, {0xA7, 0x14, 0xA4, 0x51, 0x3B, 0xF6, 0x04, 0x60}},
|
|
"???","Unspecified Property Set",
|
|
PropSet84_IDS
|
|
},
|
|
{ {0x90E5E14E, 0x648B, 0x4826, {0xB2, 0xAA, 0xAC, 0xAF, 0x79, 0x0E, 0x35, 0x13}},
|
|
"???","Unspecified Property Set",
|
|
PropSet85_IDS
|
|
},
|
|
{ {0x293CA35A, 0x09AA, 0x4DD2, {0xB1, 0x80, 0x1F, 0xE2, 0x45, 0x72, 0x8A, 0x52}},
|
|
"???","Unspecified Property Set",
|
|
PropSet86_IDS
|
|
},
|
|
{ {0xC8EA94F0, 0xA9E3, 0x4969, {0xA9, 0x4B, 0x9C, 0x62, 0xA9, 0x53, 0x24, 0xE0}},
|
|
"???","Unspecified Property Set",
|
|
PropSet87_IDS
|
|
},
|
|
{ {0x8B26EA41, 0x058F, 0x43F6, {0xAE, 0xCC, 0x40, 0x35, 0x68, 0x1C, 0xE9, 0x77}},
|
|
"???","Unspecified Property Set",
|
|
PropSet88_IDS
|
|
},
|
|
{ {0xF21D9941, 0x81F0, 0x471A, {0xAD, 0xEE, 0x4E, 0x74, 0xB4, 0x92, 0x17, 0xED}},
|
|
"???","Unspecified Property Set",
|
|
PropSet89_IDS
|
|
},
|
|
{ {0xB0B87314, 0xFCF6, 0x4FEB, {0x8D, 0xFF, 0xA5, 0x0D, 0xA6, 0xAF, 0x56, 0x1C}},
|
|
"???","Unspecified Property Set",
|
|
PropSet90_IDS
|
|
},
|
|
{ {0xCC6F4F24, 0x6083, 0x4BD4, {0x87, 0x54, 0x67, 0x4D, 0x0D, 0xE8, 0x7A, 0xB8}},
|
|
"???","Unspecified Property Set",
|
|
PropSet91_IDS
|
|
},
|
|
{ {0xA0E74609, 0xB84D, 0x4F49, {0xB8, 0x60, 0x46, 0x2B, 0xD9, 0x97, 0x1F, 0x98}},
|
|
"???","Unspecified Property Set",
|
|
PropSet92_IDS
|
|
},
|
|
{ {0xD68DBD8A, 0x3374, 0x4B81, {0x99, 0x72, 0x3E, 0xC3, 0x06, 0x82, 0xDB, 0x3D}},
|
|
"???","Unspecified Property Set",
|
|
PropSet93_IDS
|
|
},
|
|
{ {0x2CBAA8F5, 0xD81F, 0x47CA, {0xB1, 0x7A, 0xF8, 0xD8, 0x22, 0x30, 0x01, 0x31}},
|
|
"???","Unspecified Property Set",
|
|
PropSet94_IDS
|
|
},
|
|
{ {0x72FAB781, 0xACDA, 0x43E5, {0xB1, 0x55, 0xB2, 0x43, 0x4F, 0x85, 0xE6, 0x78}},
|
|
"???","Unspecified Property Set",
|
|
PropSet95_IDS
|
|
},
|
|
{ {0x6B8DA074, 0x3B5C, 0x43BC, {0x88, 0x6F, 0x0A, 0x2C, 0xDC, 0xE0, 0x0B, 0x6F}},
|
|
"???","Unspecified Property Set",
|
|
PropSet96_IDS
|
|
},
|
|
{ {0x18BBD425, 0xECFD, 0x46EF, {0xB6, 0x12, 0x7B, 0x4A, 0x60, 0x34, 0xED, 0xA0}},
|
|
"???","Unspecified Property Set",
|
|
PropSet97_IDS
|
|
},
|
|
{ {0x276D7BB0, 0x5B34, 0x4FB0, {0xAA, 0x4B, 0x15, 0x8E, 0xD1, 0x2A, 0x18, 0x09}},
|
|
"???","Unspecified Property Set",
|
|
PropSet99_IDS
|
|
},
|
|
{ {0xFEC690B7, 0x5F30, 0x4646, {0xAE, 0x47, 0x4C, 0xAA, 0xFB, 0xA8, 0x84, 0xA3}},
|
|
"???","Unspecified Property Set",
|
|
PropSet100_IDS
|
|
},
|
|
{ {0x46B4E8DE, 0xCDB2, 0x440D, {0x88, 0x5C, 0x16, 0x58, 0xEB, 0x65, 0xB9, 0x14}},
|
|
"???","Unspecified Property Set",
|
|
PropSet101_IDS
|
|
},
|
|
{ {0xF628FD8C, 0x7BA8, 0x465A, {0xA6, 0x5B, 0xC5, 0xAA, 0x79, 0x26, 0x3A, 0x9E}},
|
|
"???","Unspecified Property Set",
|
|
PropSet102_IDS
|
|
},
|
|
{ {0x7A7D76F4, 0xB630, 0x4BD7, {0x95, 0xFF, 0x37, 0xCC, 0x51, 0xA9, 0x75, 0xC9}},
|
|
"???","Unspecified Property Set",
|
|
PropSet103_IDS
|
|
},
|
|
{ {0x446F787F, 0x10C4, 0x41CB, {0xA6, 0xC4, 0x4D, 0x03, 0x43, 0x55, 0x15, 0x97}},
|
|
"???","Unspecified Property Set",
|
|
PropSet104_IDS
|
|
},
|
|
{ {0xA9EA193C, 0xC511, 0x498A, {0xA0, 0x6B, 0x58, 0xE2, 0x77, 0x6D, 0xCC, 0x28}},
|
|
"???","Unspecified Property Set",
|
|
PropSet105_IDS
|
|
},
|
|
{ {0x97B0AD89, 0xDF49, 0x49CC, {0x83, 0x4E, 0x66, 0x09, 0x74, 0xFD, 0x75, 0x5B}},
|
|
"???","Unspecified Property Set",
|
|
PropSet106_IDS
|
|
},
|
|
{ {0xF6272D18, 0xCECC, 0x40B1, {0xB2, 0x6A, 0x39, 0x11, 0x71, 0x7A, 0xA7, 0xBD}},
|
|
"???","Unspecified Property Set",
|
|
PropSet107_IDS
|
|
},
|
|
{ {0x61478C08, 0xB600, 0x4A84, {0xBB, 0xE4, 0xE9, 0x9C, 0x45, 0xF0, 0xA0, 0x72}},
|
|
"???","Unspecified Property Set",
|
|
PropSet108_IDS
|
|
},
|
|
{ {0xBCCC8A3C, 0x8CEF, 0x42E5, {0x9B, 0x1C, 0xC6, 0x90, 0x79, 0x39, 0x8B, 0xC7}},
|
|
"???","Unspecified Property Set",
|
|
PropSet109_IDS
|
|
},
|
|
{ {0x9AD5BADB, 0xCEA7, 0x4470, {0xA0, 0x3D, 0xB8, 0x4E, 0x51, 0xB9, 0x94, 0x9E}},
|
|
"???","Unspecified Property Set",
|
|
PropSet110_IDS
|
|
},
|
|
{ {0xF1A24AA7, 0x9CA7, 0x40F6, {0x89, 0xEC, 0x97, 0xDE, 0xF9, 0xFF, 0xE8, 0xDB}},
|
|
"???","Unspecified Property Set",
|
|
PropSet111_IDS
|
|
},
|
|
{ {0x3602C812, 0x0F3B, 0x45F0, {0x85, 0xAD, 0x60, 0x34, 0x68, 0xD6, 0x94, 0x23}},
|
|
"???","Unspecified Property Set",
|
|
PropSet112_IDS
|
|
},
|
|
{ {0xA6F360D2, 0x55F9, 0x48DE, {0xB9, 0x09, 0x62, 0x0E, 0x09, 0x0A, 0x64, 0x7C}},
|
|
"???","Unspecified Property Set",
|
|
PropSet113_IDS
|
|
},
|
|
{ {0x897B3694, 0xFE9E, 0x43E6, {0x80, 0x66, 0x26, 0x0F, 0x59, 0x0C, 0x01, 0x00}},
|
|
"???","Unspecified Property Set",
|
|
PropSet114_IDS
|
|
},
|
|
{ {0x8619A4B6, 0x9F4D, 0x4429, {0x8C, 0x0F, 0xB9, 0x96, 0xCA, 0x59, 0xE3, 0x35}},
|
|
"???","Unspecified Property Set",
|
|
PropSet115_IDS
|
|
},
|
|
{ {0xA26F4AFC, 0x7346, 0x4299, {0xBE, 0x47, 0xEB, 0x1A, 0xE6, 0x13, 0x13, 0x9F}},
|
|
"???","Unspecified Property Set",
|
|
PropSet116_IDS
|
|
},
|
|
{ {0xBC4E71CE, 0x17F9, 0x48D5, {0xBE, 0xE9, 0x02, 0x1D, 0xF0, 0xEA, 0x54, 0x09}},
|
|
"???","Unspecified Property Set",
|
|
PropSet117_IDS
|
|
},
|
|
{ {0x65A98875, 0x3C80, 0x40AB, {0xAB, 0xBC, 0xEF, 0xDA, 0xF7, 0x7D, 0xBE, 0xE2}},
|
|
"???","Unspecified Property Set",
|
|
PropSet118_IDS
|
|
},
|
|
{ {0x84D8F337, 0x981D, 0x44B3, {0x96, 0x15, 0xC7, 0x59, 0x6D, 0xBA, 0x17, 0xE3}},
|
|
"???","Unspecified Property Set",
|
|
PropSet119_IDS
|
|
},
|
|
{ {0xBE1A72C6, 0x9A1D, 0x46B7, {0xAF, 0xE7, 0xAF, 0xAF, 0x8C, 0xEF, 0x49, 0x99}},
|
|
"???","Unspecified Property Set",
|
|
PropSet120_IDS
|
|
},
|
|
{ {0x8F367200, 0xC270, 0x457C, {0xB1, 0xD4, 0xE0, 0x7C, 0x5B, 0xCD, 0x90, 0xC7}},
|
|
"???","Unspecified Property Set",
|
|
PropSet121_IDS
|
|
},
|
|
{ {0x428040AC, 0xA177, 0x4C8A, {0x97, 0x60, 0xF6, 0xF7, 0x61, 0x22, 0x7F, 0x9A}},
|
|
"???","Unspecified Property Set",
|
|
PropSet122_IDS
|
|
},
|
|
{ {0xA3B29791, 0x7713, 0x4E1D, {0xBB, 0x40, 0x17, 0xDB, 0x85, 0xF0, 0x18, 0x31}},
|
|
"???","Unspecified Property Set",
|
|
PropSet123_IDS
|
|
},
|
|
{ {0xBCEEE283, 0x35DF, 0x4D53, {0x82, 0x6A, 0xF3, 0x6A, 0x3E, 0xEF, 0xC6, 0xBE}},
|
|
"???","Unspecified Property Set",
|
|
PropSet124_IDS
|
|
},
|
|
{ {0x91EFF6F3, 0x2E27, 0x42CA, {0x93, 0x3E, 0x7C, 0x99, 0x9F, 0xBE, 0x31, 0x0B}},
|
|
"???","Unspecified Property Set",
|
|
PropSet125_IDS
|
|
},
|
|
{ {0x5CBF2787, 0x48CF, 0x4208, {0xB9, 0x0E, 0xEE, 0x5E, 0x5D, 0x42, 0x02, 0x94}},
|
|
"???","Unspecified Property Set",
|
|
PropSet126_IDS
|
|
},
|
|
{ {0x1B5439E7, 0xEBA1, 0x4AF8, {0xBD, 0xD7, 0x7A, 0xF1, 0xD4, 0x54, 0x94, 0x93}},
|
|
"???","Unspecified Property Set",
|
|
PropSet127_IDS
|
|
},
|
|
{ {0x08C7CC5F, 0x60F2, 0x4494, {0xAD, 0x75, 0x55, 0xE3, 0xE0, 0xB5, 0xAD, 0xD0}},
|
|
"???","Unspecified Property Set",
|
|
PropSet128_IDS
|
|
},
|
|
{ {0x7FE3AA27, 0x2648, 0x42F3, {0x89, 0xB0, 0x45, 0x4E, 0x5C, 0xB1, 0x50, 0xC3}},
|
|
"???","Unspecified Property Set",
|
|
PropSet129_IDS
|
|
},
|
|
{ {0xE53D799D, 0x0F3F, 0x466E, {0xB2, 0xFF, 0x74, 0x63, 0x4A, 0x3C, 0xB7, 0xA4}},
|
|
"???","Unspecified Property Set",
|
|
PropSet130_IDS
|
|
},
|
|
{ {0x4776CAFA, 0xBCE4, 0x4CB1, {0xA2, 0x3E, 0x26, 0x5E, 0x76, 0xD8, 0xEB, 0x11}},
|
|
"???","Unspecified Property Set",
|
|
PropSet131_IDS
|
|
},
|
|
{ {0x71B377D6, 0xE570, 0x425F, {0xA1, 0x70, 0x80, 0x9F, 0xAE, 0x73, 0xE5, 0x4E}},
|
|
"???","Unspecified Property Set",
|
|
PropSet132_IDS
|
|
},
|
|
{ {0x3143BF7C, 0x80A8, 0x4854, {0x88, 0x80, 0xE2, 0xE4, 0x01, 0x89, 0xBD, 0xD0}},
|
|
"???","Unspecified Property Set",
|
|
PropSet133_IDS
|
|
},
|
|
{ {0xA6744477, 0xC237, 0x475B, {0xA0, 0x75, 0x54, 0xF3, 0x44, 0x98, 0x29, 0x2A}},
|
|
"???","Unspecified Property Set",
|
|
PropSet134_IDS
|
|
},
|
|
{ {0xC9C34F84, 0x2241, 0x4401, {0xB6, 0x07, 0xBD, 0x20, 0xED, 0x75, 0xAE, 0x7F}},
|
|
"???","Unspecified Property Set",
|
|
PropSet135_IDS
|
|
},
|
|
{ {0xF8FA7FA3, 0xD12B, 0x4785, {0x8A, 0x4E, 0x69, 0x1A, 0x94, 0xF7, 0xA3, 0xE7}},
|
|
"???","Unspecified Property Set",
|
|
PropSet136_IDS
|
|
},
|
|
{ {0x7268AF55, 0x1CE4, 0x4F6E, {0xA4, 0x1F, 0xB6, 0xE4, 0xEF, 0x10, 0xE4, 0xA9}},
|
|
"???","Unspecified Property Set",
|
|
PropSet137_IDS
|
|
},
|
|
{ {0xE1D4A09E, 0xD758, 0x4CD1, {0xB6, 0xEC, 0x34, 0xA8, 0xB5, 0xA7, 0x3F, 0x80}},
|
|
"???","Unspecified Property Set",
|
|
PropSet138_IDS
|
|
},
|
|
{ {0xD7313FF1, 0xA77A, 0x401C, {0x8C, 0x99, 0x3D, 0xBD, 0xD6, 0x8A, 0xDD, 0x36}},
|
|
"???","Unspecified Property Set",
|
|
PropSet139_IDS
|
|
},
|
|
{ {0xF85BF840, 0xA925, 0x4BC2, {0xB0, 0xC4, 0x8E, 0x36, 0xB5, 0x98, 0x67, 0x9E}},
|
|
"???","Unspecified Property Set",
|
|
PropSet140_IDS
|
|
},
|
|
{ {0x668CDFA5, 0x7A1B, 0x4323, {0xAE, 0x4B, 0xE5, 0x27, 0x39, 0x3A, 0x1D, 0x81}},
|
|
"???","Unspecified Property Set",
|
|
PropSet141_IDS
|
|
},
|
|
{ {0xEE3D3D8A, 0x5381, 0x4CFA, {0xB1, 0x3B, 0xAA, 0xF6, 0x6B, 0x5F, 0x4E, 0xC9}},
|
|
"???","Unspecified Property Set",
|
|
PropSet142_IDS
|
|
},
|
|
{ {0xD0C7F054, 0x3F72, 0x4725, {0x85, 0x27, 0x12, 0x9A, 0x57, 0x7C, 0xB2, 0x69}},
|
|
"???","Unspecified Property Set",
|
|
PropSet143_IDS
|
|
},
|
|
{ {0x3C8CEE58, 0xD4F0, 0x4CF9, {0xB7, 0x56, 0x4E, 0x5D, 0x24, 0x44, 0x7B, 0xCD}},
|
|
"???","Unspecified Property Set",
|
|
PropSet144_IDS
|
|
},
|
|
{ {0x6E682923, 0x7F7B, 0x4F0C, {0xA3, 0x37, 0xCF, 0xCA, 0x29, 0x66, 0x87, 0xBF}},
|
|
"???","Unspecified Property Set",
|
|
PropSet145_IDS
|
|
},
|
|
{ {0xFD122953, 0xFA93, 0x4EF7, {0x92, 0xC3, 0x04, 0xC9, 0x46, 0xB2, 0xF7, 0xC8}},
|
|
"???","Unspecified Property Set",
|
|
PropSet146_IDS
|
|
},
|
|
{ {0x0BE1C8E7, 0x1981, 0x4676, {0xAE, 0x14, 0xFD, 0xD7, 0x8F, 0x05, 0xA6, 0xE7}},
|
|
"???","Unspecified Property Set",
|
|
PropSet147_IDS
|
|
},
|
|
{ {0xF1176DFE, 0x7138, 0x4640, {0x8B, 0x4C, 0xAE, 0x37, 0x5D, 0xC7, 0x0A, 0x6D}},
|
|
"???","Unspecified Property Set",
|
|
PropSet148_IDS
|
|
},
|
|
{ {0x95BEB1FC, 0x326D, 0x4644, {0xB3, 0x96, 0xCD, 0x3E, 0xD9, 0x0E, 0x6D, 0xDF}},
|
|
"???","Unspecified Property Set",
|
|
PropSet149_IDS
|
|
},
|
|
{ {0xDDD1460F, 0xC0BF, 0x4553, {0x8C, 0xE4, 0x10, 0x43, 0x3C, 0x90, 0x8F, 0xB0}},
|
|
"???","Unspecified Property Set",
|
|
PropSet150_IDS
|
|
},
|
|
{ {0x9B174B34, 0x40FF, 0x11D2, {0xA2, 0x7E, 0x00, 0xC0, 0x4F, 0xC3, 0x08, 0x71}},
|
|
"???","Unspecified Property Set",
|
|
PropSet151_IDS
|
|
},
|
|
{ {0x08A65AA1, 0xF4C9, 0x43DD, {0x9D, 0xDF, 0xA3, 0x3D, 0x8E, 0x7E, 0xAD, 0x85}},
|
|
"???","Unspecified Property Set",
|
|
PropSet152_IDS
|
|
},
|
|
{ {0x084D8A0A, 0xE6D5, 0x40DE, {0xBF, 0x1F, 0xC8, 0x82, 0x0E, 0x7C, 0x87, 0x7C}},
|
|
"???","Unspecified Property Set",
|
|
PropSet153_IDS
|
|
},
|
|
{ {0x841E4F90, 0xFF59, 0x4D16, {0x89, 0x47, 0xE8, 0x1B, 0xBF, 0xFA, 0xB3, 0x6D}},
|
|
"???","Unspecified Property Set",
|
|
PropSet154_IDS
|
|
},
|
|
{ {0xFC9F7306, 0xFF8F, 0x4D49, {0x9F, 0xB6, 0x3F, 0xFE, 0x5C, 0x09, 0x51, 0xEC}},
|
|
"???","Unspecified Property Set",
|
|
PropSet155_IDS
|
|
},
|
|
{ {0x53DA57CF, 0x62C0, 0x45C4, {0x81, 0xDE, 0x76, 0x10, 0xBC, 0xEF, 0xD7, 0xF5}},
|
|
"???","Unspecified Property Set",
|
|
PropSet156_IDS
|
|
},
|
|
{ {0xF8D3F6AC, 0x4874, 0x42CB, {0xBE, 0x59, 0xAB, 0x45, 0x4B, 0x30, 0x71, 0x6A}},
|
|
"???","Unspecified Property Set",
|
|
PropSet157_IDS
|
|
},
|
|
{ {0x4684FE97, 0x8765, 0x4842, {0x9C, 0x13, 0xF0, 0x06, 0x44, 0x7B, 0x17, 0x8C}},
|
|
"???","Unspecified Property Set",
|
|
PropSet158_IDS
|
|
},
|
|
{ {0xC449D5CB, 0x9EA4, 0x4809, {0x82, 0xE8, 0xAF, 0x9D, 0x59, 0xDE, 0xD6, 0xD1}},
|
|
"???","Unspecified Property Set",
|
|
PropSet159_IDS
|
|
},
|
|
{ {0x3F8472B5, 0xE0AF, 0x4DB2, {0x80, 0x71, 0xC5, 0x3F, 0xE7, 0x6A, 0xE7, 0xCE}},
|
|
"???","Unspecified Property Set",
|
|
PropSet160_IDS
|
|
},
|
|
{ {0x0CEF7D53, 0xFA64, 0x11D1, {0xA2, 0x03, 0x00, 0x00, 0xF8, 0x1F, 0xED, 0xEE}},
|
|
"???","Unspecified Property Set",
|
|
PropSet161_IDS
|
|
},
|
|
{ {0xFDF84370, 0x031A, 0x4ADD, {0x9E, 0x91, 0x0D, 0x77, 0x5F, 0x1C, 0x66, 0x05}},
|
|
"???","Unspecified Property Set",
|
|
PropSet162_IDS
|
|
},
|
|
{ {0x6D748DE2, 0x8D38, 0x4CC3, {0xAC, 0x60, 0xF0, 0x09, 0xB0, 0x57, 0xC5, 0x57}},
|
|
"???","Unspecified Property Set",
|
|
PropSet163_IDS
|
|
},
|
|
{ {0x2579E5D0, 0x1116, 0x4084, {0xBD, 0x9A, 0x9B, 0x4F, 0x7C, 0xB4, 0xDF, 0x5E}},
|
|
"???","Unspecified Property Set",
|
|
PropSet164_IDS
|
|
},
|
|
{ {0xC554493C, 0xC1F7, 0x40C1, {0xA7, 0x6C, 0xEF, 0x8C, 0x06, 0x14, 0x00, 0x3E}},
|
|
"???","Unspecified Property Set",
|
|
PropSet165_IDS
|
|
},
|
|
{ {0x0DA41CFA, 0xD224, 0x4A18, {0xAE, 0x2F, 0x59, 0x61, 0x58, 0xDB, 0x4B, 0x3A}},
|
|
"???","Unspecified Property Set",
|
|
PropSet166_IDS
|
|
},
|
|
{ {0xA82D9EE7, 0xCA67, 0x4312, {0x96, 0x5E, 0x22, 0x6B, 0xCE, 0xA8, 0x50, 0x23}},
|
|
"???","Unspecified Property Set",
|
|
PropSet167_IDS
|
|
},
|
|
{ {0x09329B74, 0x40A3, 0x4C68, {0xBF, 0x07, 0xAF, 0x9A, 0x57, 0x2F, 0x60, 0x7C}},
|
|
"???","Unspecified Property Set",
|
|
PropSet168_IDS
|
|
},
|
|
{ {0x9A93244D, 0xA7AD, 0x4FF8, {0x9B, 0x99, 0x45, 0xEE, 0x4C, 0xC0, 0x9A, 0xF6}},
|
|
"???","Unspecified Property Set",
|
|
PropSet169_IDS
|
|
},
|
|
{ {0xF04BEF95, 0xC585, 0x4197, {0xA2, 0xB7, 0xDF, 0x46, 0xFD, 0xC9, 0xEE, 0x6D}},
|
|
"???","Unspecified Property Set",
|
|
PropSet170_IDS
|
|
},
|
|
{ {0x59DDE9F2, 0x5253, 0x40EA, {0x9A, 0x8B, 0x47, 0x9E, 0x96, 0xC6, 0x24, 0x9A}},
|
|
"???","Unspecified Property Set",
|
|
PropSet171_IDS
|
|
},
|
|
{ {0x6444048F, 0x4C8B, 0x11D1, {0x8B, 0x70, 0x08, 0x00, 0x36, 0xB1, 0x1A, 0x03}},
|
|
"???","Unspecified Property Set",
|
|
PropSet172_IDS
|
|
},
|
|
{ {0x9A9BC088, 0x4F6D, 0x469E, {0x99, 0x19, 0xE7, 0x05, 0x41, 0x20, 0x40, 0xF9}},
|
|
"???","Unspecified Property Set",
|
|
PropSet173_IDS
|
|
},
|
|
{ {0x6336B95E, 0xC7A7, 0x426D, {0x86, 0xFD, 0x7A, 0xE3, 0xD3, 0x9C, 0x84, 0xB4}},
|
|
"???","Unspecified Property Set",
|
|
PropSet174_IDS
|
|
},
|
|
{ {0xC06238B2, 0x0BF9, 0x4279, {0xA7, 0x23, 0x25, 0x85, 0x67, 0x15, 0xCB, 0x9D}},
|
|
"???","Unspecified Property Set",
|
|
PropSet175_IDS
|
|
},
|
|
{ {0xEC0B4191, 0xAB0B, 0x4C66, {0x90, 0xB6, 0xC6, 0x63, 0x7C, 0xDE, 0xBB, 0xAB}},
|
|
"???","Unspecified Property Set",
|
|
PropSet176_IDS
|
|
},
|
|
{ {0x660E04D6, 0x81AB, 0x4977, {0xA0, 0x9F, 0x82, 0x31, 0x31, 0x13, 0xAB, 0x26}},
|
|
"???","Unspecified Property Set",
|
|
PropSet177_IDS
|
|
},
|
|
{ {0xDC54FD2E, 0x189D, 0x4871, {0xAA, 0x01, 0x08, 0xC2, 0xF5, 0x7A, 0x4A, 0xBC}},
|
|
"???","Unspecified Property Set",
|
|
PropSet178_IDS
|
|
},
|
|
{ {0xCD102C9C, 0x5540, 0x4A88, {0xA6, 0xF6, 0x64, 0xE4, 0x98, 0x1C, 0x8C, 0xD1}},
|
|
"???","Unspecified Property Set",
|
|
PropSet179_IDS
|
|
},
|
|
{ {0x1F856A9F, 0x6900, 0x4ABA, {0x95, 0x05, 0x2D, 0x5F, 0x1B, 0x4D, 0x66, 0xCB}},
|
|
"???","Unspecified Property Set",
|
|
PropSet180_IDS
|
|
},
|
|
{ {0x90197CA7, 0xFD8F, 0x4E8C, {0x9D, 0xA3, 0xB5, 0x7E, 0x1E, 0x60, 0x92, 0x95}},
|
|
"???","Unspecified Property Set",
|
|
PropSet181_IDS
|
|
},
|
|
{ {0xF334115E, 0xDA1B, 0x4509, {0x9B, 0x3D, 0x11, 0x95, 0x04, 0xDC, 0x7A, 0xBB}},
|
|
"???","Unspecified Property Set",
|
|
PropSet182_IDS
|
|
},
|
|
{ {0xBF53D1C3, 0x49E0, 0x4F7F, {0x85, 0x67, 0x5A, 0x82, 0x1D, 0x8A, 0xC5, 0x42}},
|
|
"???","Unspecified Property Set",
|
|
PropSet183_IDS
|
|
},
|
|
{ {0xC75FAA05, 0x96FD, 0x49E7, {0x9C, 0xB4, 0x9F, 0x60, 0x10, 0x82, 0xD5, 0x53}},
|
|
"???","Unspecified Property Set",
|
|
PropSet184_IDS
|
|
},
|
|
{ {0x2E4B640D, 0x5019, 0x46D8, {0x88, 0x81, 0x55, 0x41, 0x4C, 0xC5, 0xCA, 0xA0}},
|
|
"???","Unspecified Property Set",
|
|
PropSet185_IDS
|
|
},
|
|
{ {0x6B8B68F6, 0x200B, 0x47EA, {0x8D, 0x25, 0xD8, 0x05, 0x0F, 0x57, 0x33, 0x9F}},
|
|
"???","Unspecified Property Set",
|
|
PropSet186_IDS
|
|
},
|
|
{ {0x2D152B40, 0xCA39, 0x40DB, {0xB2, 0xCC, 0x57, 0x37, 0x25, 0xB2, 0xFE, 0xC5}},
|
|
"???","Unspecified Property Set",
|
|
PropSet187_IDS
|
|
},
|
|
{ {0x1E005EE6, 0xBF27, 0x428B, {0xB0, 0x1C, 0x79, 0x67, 0x6A, 0xCD, 0x28, 0x70}},
|
|
"???","Unspecified Property Set",
|
|
PropSet188_IDS
|
|
},
|
|
{ {0xD6304E01, 0xF8F5, 0x4F45, {0x8B, 0x15, 0xD0, 0x24, 0xA6, 0x29, 0x67, 0x89}},
|
|
"???","Unspecified Property Set",
|
|
PropSet189_IDS
|
|
},
|
|
{ {0x402B5934, 0xEC5A, 0x48C3, {0x93, 0xE6, 0x85, 0xE8, 0x6A, 0x2D, 0x93, 0x4E}},
|
|
"???","Unspecified Property Set",
|
|
PropSet190_IDS
|
|
},
|
|
{ {0x9AEBAE7A, 0x9644, 0x487D, {0xA9, 0x2C, 0x65, 0x75, 0x85, 0xED, 0x75, 0x1A}},
|
|
"???","Unspecified Property Set",
|
|
PropSet191_IDS
|
|
},
|
|
{ {0x63C25B20, 0x96BE, 0x488F, {0x87, 0x88, 0xC0, 0x9C, 0x40, 0x7A, 0xD8, 0x12}},
|
|
"???","Unspecified Property Set",
|
|
PropSet192_IDS
|
|
},
|
|
{ {0x48FD6EC8, 0x8A12, 0x4CDF, {0xA0, 0x3E, 0x4E, 0xC5, 0xA5, 0x11, 0xED, 0xDE}},
|
|
"???","Unspecified Property Set",
|
|
PropSet193_IDS
|
|
},
|
|
{ {0x64440491, 0x4C8B, 0x11D1, {0x8B, 0x70, 0x08, 0x00, 0x36, 0xB1, 0x1A, 0x03}},
|
|
"???","Unspecified Property Set",
|
|
PropSet194_IDS
|
|
},
|
|
{ {0xC0AC206A, 0x827E, 0x4650, {0x95, 0xAE, 0x77, 0xE2, 0xBB, 0x74, 0xFC, 0xC9}},
|
|
"???","Unspecified Property Set",
|
|
PropSet195_IDS
|
|
}
|
|
};
|
|
|
|
static const value_string version_vals[] = {
|
|
{0x00000102, "Windows Vista or 2008"},
|
|
{0x00000109, "Windows XP or 2003 with Windows Search 4.0"},
|
|
{0x00000700, "Windows 7 or 2008 R2"},
|
|
{0x00010102, "Windows Vista or 2008 (64 bit)"},
|
|
{0x00010109, "Windows XP or 2003 with Windows Search 4.0 (64 bit)"},
|
|
{0x00010700, "Windows 7 or 2008 R2 (64 bit)"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static struct GuidPropertySet *GuidPropertySet_find_guid(const e_guid_t *guid)
|
|
{
|
|
unsigned i;
|
|
for (i=0; i<array_length(GuidPropertySet); i++) {
|
|
if (guid_cmp(&GuidPropertySet[i].guid, guid) == 0) {
|
|
return &GuidPropertySet[i];
|
|
}
|
|
}
|
|
return NULL;
|
|
}
|
|
|
|
static void get_name_from_fullpropspec(struct CFullPropSpec *v, char *out, int bufsize)
|
|
{
|
|
struct GuidPropertySet *pset = GuidPropertySet_find_guid(&v->guid);
|
|
const char *id_str, *guid_str;
|
|
char *dest = out;
|
|
id_str = pset ? try_val_to_str(v->u.propid, pset->id_map) : NULL;
|
|
|
|
if (id_str) {
|
|
snprintf(dest, bufsize, "%s", id_str);
|
|
} else {
|
|
guid_str = guids_get_guid_name(&v->guid, wmem_packet_scope());
|
|
if (guid_str) {
|
|
snprintf(dest, bufsize, "\"%s\"", guid_str);
|
|
} else {
|
|
guid_str = guid_to_str(wmem_packet_scope(), &v->guid);
|
|
snprintf(dest, bufsize, "{%s}", guid_str);
|
|
}
|
|
if (v->kind == PRSPEC_LPWSTR) {
|
|
snprintf(dest, bufsize, "%s \"%s\"", guid_str, v->u.name);
|
|
} else if (v->kind == PRSPEC_PROPID) {
|
|
snprintf(dest, bufsize, "%s 0x%08x", guid_str, v->u.propid);
|
|
} else {
|
|
char *str = ws_strdup_printf("%s <INVALID>", dest);
|
|
g_strlcpy(dest, str, bufsize);
|
|
g_free(str);
|
|
}
|
|
}
|
|
}
|
|
|
|
/******************************************************************************/
|
|
static int parse_uin32_array(tvbuff_t *tvb, int offset, proto_tree *tree, guint32 count, const char *fmt, ...)
|
|
{
|
|
guint32 v, i;
|
|
proto_item *item;
|
|
const char *txt;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
proto_tree_add_subtree(tree, tvb, offset, count * 4, ett_mswsp_uin32_array, &item, txt);
|
|
proto_item_append_text(item, " count %u [", count);
|
|
for (i=0; i<count; i++) {
|
|
v = tvb_get_letohl(tvb, offset);
|
|
offset += 4;
|
|
if (i>0) {
|
|
proto_item_append_text(item, ",%u", v);
|
|
} else {
|
|
proto_item_append_text(item, "%u", v);
|
|
}
|
|
}
|
|
proto_item_append_text(item, "]");
|
|
return offset;
|
|
}
|
|
|
|
static int parse_padding(tvbuff_t *tvb, int offset, int alignment, proto_tree *pad_tree, const char *fmt, ...)
|
|
{
|
|
if (offset % alignment) {
|
|
const int padding = alignment - (offset % alignment);
|
|
const char *txt;
|
|
va_list ap;
|
|
proto_item *ti;
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
proto_tree_add_subtree(pad_tree, tvb, offset, padding, ett_mswsp_msg_padding, &ti, txt);
|
|
va_end(ap);
|
|
|
|
proto_item_append_text(ti, " (%d)", padding);
|
|
offset += padding;
|
|
}
|
|
DISSECTOR_ASSERT((offset % alignment) == 0);
|
|
return offset;
|
|
}
|
|
|
|
static int parse_guid(tvbuff_t *tvb, int offset, proto_tree *tree, e_guid_t *guid, const char *text)
|
|
{
|
|
const char *guid_str, *name, *bytes;
|
|
proto_tree *tr;
|
|
|
|
tvb_get_letohguid(tvb, offset, guid);
|
|
guid_str = guid_to_str(wmem_packet_scope(), guid);
|
|
name = guids_get_guid_name(guid, wmem_packet_scope());
|
|
|
|
tr = proto_tree_add_subtree_format(tree, tvb, offset, 16, ett_GUID, NULL, "%s: %s {%s}", text, name ? name : "", guid_str);
|
|
|
|
|
|
proto_tree_add_item(tr, hf_mswsp_guid_time_low, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tr, hf_mswsp_guid_time_mid, tvb, offset, 2, ENC_LITTLE_ENDIAN);
|
|
offset += 2;
|
|
proto_tree_add_item(tr, hf_mswsp_guid_time_high, tvb, offset, 2, ENC_LITTLE_ENDIAN);
|
|
offset += 2;
|
|
proto_tree_add_item(tr, hf_mswsp_guid_time_clock_hi, tvb, offset, 1, ENC_LITTLE_ENDIAN);
|
|
offset += 1;
|
|
proto_tree_add_item(tr, hf_mswsp_guid_time_clock_low, tvb, offset, 1, ENC_LITTLE_ENDIAN);
|
|
offset += 1;
|
|
bytes = bytes_to_str_punct(wmem_packet_scope(), &guid->data4[2], 6, ':');
|
|
proto_tree_add_string(tr, hf_mswsp_guid_node, tvb, offset, 6, bytes);
|
|
|
|
offset += 6;
|
|
|
|
return offset;
|
|
}
|
|
|
|
/* Language Code ID - MS-LCID section 2.2 "LCID Structure":
|
|
*
|
|
* https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-lcid/63d3d639-7fd2-4afb-abbe-0d5b5551eef8
|
|
*/
|
|
static int parse_lcid(tvbuff_t *tvb, int offset, proto_tree *parent_tree, const char *text)
|
|
{
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
guint32 lcid;
|
|
|
|
lcid = tvb_get_letohl(tvb, offset);
|
|
item = proto_tree_add_uint_format(parent_tree, hf_mswsp_lcid, tvb, offset, 4, lcid, "%s: 0x%x", text, lcid);
|
|
tree = proto_item_add_subtree(item, ett_LCID);
|
|
|
|
proto_tree_add_uint(tree, hf_mswsp_lcid_langid, tvb, offset + 2, 2, lcid);
|
|
proto_tree_add_uint(tree, hf_mswsp_lcid_sortid, tvb, offset + 1, 1, (lcid >> 16) & 0xF);
|
|
offset += 4;
|
|
return offset;
|
|
}
|
|
|
|
/*****************************************************************************************/
|
|
/* 2.2.1.1 CBaseStorageVariant */
|
|
static int parse_CBaseStorageVariant(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CBaseStorageVariant *value, const char *text);
|
|
|
|
/* 2.2.1.2 CFullPropSpec */
|
|
static int parse_CFullPropSpec(tvbuff_t *tvb, int offset, proto_tree *tree, proto_tree *pad_tree, struct CFullPropSpec *v, const char *fmt, ...);
|
|
|
|
/* 2.2.1.3 CContentRestriction */
|
|
static int parse_CContentRestriction(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CContentRestriction *v, const char *fmt, ...);
|
|
|
|
/* 2.2.1.5 CNatLanguageRestriction */
|
|
static int parse_CNatLanguageRestriction(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CNatLanguageRestriction *v, const char *fmt, ...);
|
|
|
|
/* 2.2.1.6 CNodeRestriction */
|
|
static int parse_CNodeRestriction(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *tree, proto_tree *pad_tree, struct CNodeRestriction *v, const char* fmt, ...);
|
|
|
|
/* 2.2.1.7 CPropertyRestriction */
|
|
static int parse_CPropertyRestriction(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CPropertyRestriction *v, const char *fmt, ...);
|
|
|
|
/* 2.2.1.8 CReuseWhere */
|
|
static int parse_CReuseWhere(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree _U_, struct CReuseWhere *v, const char *fmt, ...);
|
|
|
|
/* 2.2.1.10 CSort */
|
|
static int parse_CSort(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree _U_, const char *fmt, ...);
|
|
|
|
/* 2.2.1.12 CCoercionRestriction */
|
|
static int parse_CCoercionRestriction(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CCoercionRestriction *v, const char *fmt, ...);
|
|
/* 2.2.1.16 CRestrictionArray */
|
|
static int parse_CRestrictionArray(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...);
|
|
|
|
/* 2.2.1.17 CRestriction */
|
|
static int parse_CRestriction(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CRestriction *v, const char *fmt, ...);
|
|
|
|
/* 2.2.1.18 CColumnSet */
|
|
static int parse_CColumnSet(tvbuff_t *tvb, int offset, proto_tree *tree, const char *fmt, ...);
|
|
|
|
/* 2.2.1.20 CCategorizationSpec */
|
|
static int parse_CCategorizationSpec(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...);
|
|
|
|
/* 2.2.1.21 CCategSpec */
|
|
static int parse_CCategSpec(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...);
|
|
|
|
/* 2.2.1.22 CRangeCategSpec */
|
|
static int parse_CRangeCategSpec(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...);
|
|
|
|
/* 2.2.1.23 RANGEBOUNDARY */
|
|
static int parse_RANGEBOUNDARY(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...);
|
|
|
|
/* 2.2.1.24 CAggregSet */
|
|
static int parse_CAggregSet(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...);
|
|
|
|
/* 2.2.1.25 CAggregSpec */
|
|
static int parse_CAggregSpec(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...);
|
|
|
|
/* 2.2.1.26 CSortAggregSet */
|
|
static int parse_CSortAggregSet(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...);
|
|
|
|
/* 2.2.1.27 CAggregSortKey */
|
|
static int parse_CAggregSortKey(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...);
|
|
|
|
/* 2.2.1.28 CInGroupSortAggregSets */
|
|
static int parse_CInGroupSortAggregSets(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...);
|
|
|
|
/* 2.2.1.29 CInGroupSortAggregSet */
|
|
static int parse_CInGroupSortAggregSet(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...);
|
|
|
|
/* 2.2.1.30 CDbColId */
|
|
static int parse_CDbColId(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *text);
|
|
|
|
/* 2.2.1.31 CDbProp */
|
|
static int parse_CDbProp(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct GuidPropertySet *propset, const char *fmt, ...);
|
|
|
|
/* 2.2.1.32 CDbPropSet */
|
|
static int parse_CDbPropSet(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...);
|
|
|
|
/* 2.2.1.33 CPidMapper */
|
|
static int parse_CPidMapper(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...);
|
|
|
|
/* 2.2.1.34 CColumnGroupArray */
|
|
static int parse_CColumnGroupArray(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...);
|
|
|
|
/* 2.2.1.35 CColumnGroup */
|
|
static int parse_CColumnGroup(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...);
|
|
|
|
/* 2.2.1.41 CRowsetProperties */
|
|
static int parse_CRowsetProperties(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...);
|
|
|
|
/* 2.2.1.43 CSortSet */
|
|
static int parse_CSortSet(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...);
|
|
|
|
/* 2.2.1.44 CTableColumn */
|
|
static int parse_CTableColumn(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CTableColumn *col, const char *fmt, ...);
|
|
|
|
|
|
/*
|
|
2.2.1.4 CInternalPropertyRestriction
|
|
2.2.1.9 CScopeRestriction
|
|
2.2.1.11 CVectorRestriction
|
|
2.2.1.13 CRelDocRestriction
|
|
2.2.1.14 CProbRestriction
|
|
2.2.1.15 CFeedbackRestriction
|
|
2.2.1.19 CCategorizationSet
|
|
2.2.1.45 SERIALIZEDPROPERTYVALUE
|
|
2.2.1.46 CCompletionCategSp
|
|
*/
|
|
|
|
static int parse_CSort(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree _U_, const char *fmt, ...)
|
|
{
|
|
guint32 col, ord, ind;
|
|
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
const char *txt;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CSort, &item, txt);
|
|
|
|
col = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_cscort_column, tvb, offset, 4, col);
|
|
offset += 4;
|
|
|
|
ord = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_cscort_order, tvb, offset, 4, ord);
|
|
offset += 4;
|
|
|
|
ind = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_cscort_individual, tvb, offset, 4, ind);
|
|
offset += 4;
|
|
|
|
offset = parse_lcid(tvb, offset, tree, "lcid");
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
static int parse_CSortSet(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...)
|
|
{
|
|
guint32 count, i;
|
|
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
const char *txt;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CSortSet, &item, txt);
|
|
|
|
count = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_cscortset_count, tvb, offset, 4, count);
|
|
offset += 4;
|
|
|
|
for (i=0; i<count; i++) {
|
|
offset = parse_padding(tvb, offset, 4, tree, "padding_sortArray[%u]", i);
|
|
offset = parse_CSort(tvb, offset, tree, pad_tree, "sortArray[%u]", i);
|
|
}
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
static int parse_CTableColumn(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CTableColumn *col, const char *fmt, ...)
|
|
{
|
|
|
|
|
|
proto_item *item, *ti_type;
|
|
proto_tree *tree;
|
|
va_list ap;
|
|
struct vtype_data *type;
|
|
enum vType vtype_val = VT_EMPTY;
|
|
enum vType vtype_valhi = VT_EMPTY;
|
|
struct CFullPropSpec v;
|
|
const char *txt;
|
|
guint8 used;
|
|
|
|
const char *modifier = "";
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CTableColumn, &item, txt);
|
|
|
|
offset = parse_CFullPropSpec(tvb, offset, tree, pad_tree, &v, "PropSpec");
|
|
get_name_from_fullpropspec(&v, col->name, PROP_LENGTH);
|
|
col->vtype = tvb_get_letohl(tvb, offset);
|
|
vtype_val = (enum vType)col->vtype;
|
|
vtype_valhi = (enum vType)(col->vtype & 0xFF00);
|
|
if (vtype_valhi) {
|
|
if (vtype_valhi == VT_VECTOR) {
|
|
modifier = "|VT_VECTOR";
|
|
} else if (vtype_valhi == VT_ARRAY) {
|
|
modifier = "|VT_ARRAY";
|
|
} else {
|
|
modifier = "|(Unknown, possibly error)";
|
|
}
|
|
}
|
|
type = vType_get_type(vtype_val);
|
|
if (type == NULL) {
|
|
/*
|
|
* Not a valid type.
|
|
*/
|
|
ti_type = proto_tree_add_string(tree, hf_mswsp_ctablecolumn_vtype, tvb, offset, 4, "Unknown CTableColumn type");
|
|
expert_add_info(pinfo, ti_type, &ei_mswsp_invalid_variant_type);
|
|
} else
|
|
proto_tree_add_string_format_value(tree, hf_mswsp_ctablecolumn_vtype, tvb, offset, 4, type->str, "%s%s", type->str, modifier);
|
|
offset += 4;
|
|
|
|
used = tvb_get_guint8(tvb, offset);
|
|
col->aggregateused = used;
|
|
proto_tree_add_uint(tree, hf_mswsp_ctablecolumn_aggused, tvb, offset, 1, used);
|
|
offset += 1;
|
|
|
|
if (used) {
|
|
col->aggregatetype = tvb_get_guint8(tvb, offset);
|
|
proto_tree_add_string(tree, hf_mswsp_ctablecolumn_aggtype, tvb, offset, 1, val_to_str(col->aggregatetype, DBAGGTTYPE, "(Unknown: 0x%x)"));
|
|
offset += 1;
|
|
}
|
|
col->valueused = tvb_get_guint8(tvb, offset);
|
|
used = col->valueused;
|
|
proto_tree_add_uint(tree, hf_mswsp_ctablecolumn_valused, tvb, offset, 1, used);
|
|
offset += 1;
|
|
|
|
if (used) {
|
|
offset = parse_padding(tvb, offset, 2, pad_tree, "padding_Value");
|
|
|
|
col->valueoffset = tvb_get_letohs(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_ctablecolumn_valoffset, tvb, offset, 2, col->valueoffset);
|
|
offset += 2;
|
|
|
|
col->valuesize = tvb_get_letohs(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_ctablecolumn_valsize, tvb, offset, 2, col->valuesize);
|
|
offset += 2;
|
|
}
|
|
|
|
used = tvb_get_guint8(tvb, offset);
|
|
col->statusused = used;
|
|
proto_tree_add_uint(tree, hf_mswsp_ctablecolumn_statused, tvb, offset, 1, used);
|
|
offset += 1;
|
|
|
|
if (used) {
|
|
offset = parse_padding(tvb, offset, 2, pad_tree, "padding_Status");
|
|
|
|
col->statusoffset = tvb_get_letohs(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_ctablecolumn_statoffset, tvb, offset, 2, col->statusoffset);
|
|
offset += 2;
|
|
}
|
|
|
|
used = tvb_get_guint8(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_ctablecolumn_lenused, tvb, offset, 1, used);
|
|
col->lengthused = used;
|
|
offset += 1;
|
|
|
|
if (used) {
|
|
offset = parse_padding(tvb, offset, 2, pad_tree, "padding_Length");
|
|
|
|
col->lengthoffset = tvb_get_letohs(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_ctablecolumn_lenoffset, tvb, offset, 2, col->lengthoffset);
|
|
offset += 2;
|
|
}
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
static int parse_PRSPEC_Kind(tvbuff_t *tvb, int offset, proto_tree *tree, enum PRSPEC_Kind *prspec)
|
|
{
|
|
static const value_string KIND[] = {
|
|
{0, "PRSPEC_LPWSTR"},
|
|
{1, "PRSPEC_PROPID"},
|
|
{0, NULL}
|
|
};
|
|
|
|
gint32 kind = tvb_get_letohl(tvb, offset);
|
|
DISSECTOR_ASSERT(kind < (PRSPEC_PROPID + 1));
|
|
if (kind) {
|
|
*prspec = PRSPEC_PROPID;
|
|
} else {
|
|
*prspec = PRSPEC_LPWSTR;
|
|
}
|
|
proto_tree_add_string(tree, hf_mswsp_cfullpropspec_kind, tvb, offset, 4, val_to_str(*prspec, KIND, "(Unknown: 0x%x)"));
|
|
offset += 4;
|
|
return offset;
|
|
}
|
|
|
|
static int parse_CFullPropSpec(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CFullPropSpec *v, const char *fmt, ...)
|
|
{
|
|
struct GuidPropertySet *pset;
|
|
const char *id_str, *guid_str, *txt;
|
|
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CFullPropSpec, &item, txt);
|
|
|
|
offset = parse_padding(tvb, offset, 8, pad_tree, "paddingPropSet");
|
|
|
|
offset = parse_guid(tvb, offset, tree, &v->guid, "GUID");
|
|
pset = GuidPropertySet_find_guid(&v->guid);
|
|
|
|
offset = parse_PRSPEC_Kind(tvb, offset, tree, &v->kind);
|
|
|
|
v->u.propid = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_cfullpropspec_propid, tvb, offset, 4, v->u.propid);
|
|
offset += 4;
|
|
|
|
if (v->kind == PRSPEC_LPWSTR) {
|
|
int len = 2*v->u.propid;
|
|
proto_tree_add_item_ret_string(tree, hf_mswsp_cfullpropspec_propname, tvb, offset, len, ENC_LITTLE_ENDIAN | ENC_UCS_2, wmem_packet_scope(), &v->u.name);
|
|
offset += len;
|
|
}
|
|
|
|
id_str = pset ? try_val_to_str(v->u.propid, pset->id_map) : NULL;
|
|
|
|
if (id_str) {
|
|
proto_item_append_text(item, ": %s", id_str);
|
|
} else {
|
|
guid_str = guids_get_guid_name(&v->guid, wmem_packet_scope());
|
|
if (guid_str) {
|
|
proto_item_append_text(item, ": \"%s\"", guid_str);
|
|
} else {
|
|
guid_str = guid_to_str(wmem_packet_scope(), &v->guid);
|
|
proto_item_append_text(item, ": {%s}", guid_str);
|
|
}
|
|
|
|
if (v->kind == PRSPEC_LPWSTR) {
|
|
proto_item_append_text(item, " \"%s\"", v->u.name);
|
|
} else if (v->kind == PRSPEC_PROPID) {
|
|
proto_item_append_text(item, " 0x%08x", v->u.propid);
|
|
} else {
|
|
proto_item_append_text(item, " <INVALID>");
|
|
}
|
|
}
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
|
|
|
|
static const value_string PR_VALS[] = {
|
|
{PRLT, "PRLT"},
|
|
{PRLE, "PRLE"},
|
|
{PRGT, "PRGT"},
|
|
{PRGE, "PRGE"},
|
|
{PREQ, "PREQ"},
|
|
{PRNE, "PRNE"},
|
|
{PRRE, "PRRE"},
|
|
{PRAllBits, "PRAllBits"},
|
|
{PRSomeBits, "PRSomeBits"},
|
|
{PRAll, "PRAll"},
|
|
{PRAny, "PRAny"},
|
|
{0, NULL}
|
|
};
|
|
|
|
static int parse_relop(tvbuff_t *tvb, int offset, proto_tree *tree, guint32 *relop, const char **str)
|
|
{
|
|
const char *str1 = NULL, *str2 = NULL;
|
|
guint32 tmp = tvb_get_letohl(tvb, offset);
|
|
guint32 modifier = (tmp & 0xF00);
|
|
DISSECTOR_ASSERT((tmp & 0xf) < PRSomeBits +1);
|
|
|
|
switch(tmp & 0xf) {
|
|
case PRLT:
|
|
*relop = PRLT;
|
|
break;
|
|
case PRLE:
|
|
*relop = PRLE;
|
|
break;
|
|
case PRGT:
|
|
*relop = PRGT;
|
|
break;
|
|
case PRGE:
|
|
*relop = PRGE;
|
|
break;
|
|
case PREQ:
|
|
*relop = PREQ;
|
|
break;
|
|
case PRNE:
|
|
*relop = PRNE;
|
|
break;
|
|
case PRRE:
|
|
*relop = PRRE;
|
|
break;
|
|
case PRAllBits:
|
|
*relop = PRAllBits;
|
|
break;
|
|
case PRSomeBits:
|
|
*relop = PRSomeBits;
|
|
break;
|
|
default:
|
|
break;
|
|
}
|
|
|
|
str2 = val_to_str(*relop, PR_VALS, "0x%04x");
|
|
|
|
if (modifier) {
|
|
switch (modifier) {
|
|
case PRAll:
|
|
*relop = *relop | PRAll;
|
|
break;
|
|
case PRAny:
|
|
*relop |= PRAny;
|
|
break;
|
|
default:
|
|
DISSECTOR_ASSERT(FALSE);
|
|
break;
|
|
}
|
|
str1 = try_val_to_str((modifier), PR_VALS);
|
|
if (str1) {
|
|
str1 = wmem_strdup_printf(wmem_packet_scope(), "%s | ", str1);
|
|
str2 = wmem_strdup_printf(wmem_packet_scope(), "%s%s", str1, str2);
|
|
}
|
|
}
|
|
proto_tree_add_string_format_value(tree, hf_mswsp_cproprestrict_relop, tvb, offset, 4, str2, "%s (0x%04x)", str2[0]=='\0' ? "" : str2, *relop);
|
|
|
|
if (str) {
|
|
*str = str2;
|
|
}
|
|
return offset + 4;
|
|
}
|
|
static int parse_CPropertyRestriction(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CPropertyRestriction *v, const char *fmt, ...)
|
|
{
|
|
proto_tree *tree;
|
|
proto_item *item;
|
|
const char *txt, *str = NULL;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CPropertyRestriction, &item, txt);
|
|
|
|
offset = parse_relop(tvb, offset, tree, &v->relop, &str);
|
|
proto_item_append_text(item, " Op: %s", str);
|
|
|
|
offset = parse_CFullPropSpec(tvb, offset, tree, pad_tree, &v->property, "Property");
|
|
|
|
offset = parse_CBaseStorageVariant(tvb, pinfo, offset, tree, pad_tree, &v->prval, "prval");
|
|
|
|
offset = parse_padding(tvb, offset, 4, pad_tree, "padding_lcid");
|
|
|
|
v->lcid = tvb_get_letohl(tvb, offset);
|
|
offset = parse_lcid(tvb, offset, tree, "lcid");
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
|
|
return offset;
|
|
}
|
|
|
|
static int parse_CCoercionRestriction(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CCoercionRestriction *v, const char *fmt, ...)
|
|
{
|
|
proto_tree *tree;
|
|
proto_item *item;
|
|
const char *txt;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CCoercionRestriction, &item, txt);
|
|
|
|
v->value = tvb_get_letohieee_float(tvb, offset);
|
|
proto_tree_add_float(tree, hf_mswsp_ccoercerestrict_value, tvb, offset, 4, v->value);
|
|
|
|
offset += 4;
|
|
|
|
offset = parse_CRestriction(tvb, pinfo, offset, tree, pad_tree, &v->child, "child");
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
static int parse_CContentRestriction(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CContentRestriction *v, const char *fmt, ...)
|
|
{
|
|
proto_tree *tree;
|
|
proto_item *item;
|
|
va_list ap;
|
|
guint32 cc;
|
|
const char *txt;
|
|
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CContentRestriction, &item, txt);
|
|
|
|
offset = parse_CFullPropSpec(tvb, offset, tree, pad_tree, &v->property, "Property");
|
|
|
|
offset = parse_padding(tvb, offset, 4, pad_tree, "Padding1");
|
|
|
|
cc = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_ccontentrestrict_cc, tvb, offset, 4, cc);
|
|
offset += 4;
|
|
|
|
proto_tree_add_item_ret_string(tree, hf_mswsp_ccontentrestrict_phrase, tvb, offset, 2*cc, ENC_LITTLE_ENDIAN | ENC_UCS_2, wmem_packet_scope(), &v->phrase);
|
|
offset += 2*cc;
|
|
|
|
offset = parse_padding(tvb, offset, 4, pad_tree, "Padding2");
|
|
|
|
v->lcid = tvb_get_letohl(tvb, offset);
|
|
offset = parse_lcid(tvb, offset, tree, "lcid");
|
|
|
|
v->method = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_ccontentrestrict_method, tvb, offset, 4, v->method);
|
|
offset += 4;
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
int parse_CNatLanguageRestriction(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CNatLanguageRestriction *v, const char *fmt, ...)
|
|
{
|
|
proto_tree *tree;
|
|
proto_item *item;
|
|
va_list ap;
|
|
guint32 cc;
|
|
const char *txt;
|
|
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CNatLanguageRestriction, &item, txt);
|
|
|
|
offset = parse_CFullPropSpec(tvb, offset, tree, pad_tree, &v->property, "Property");
|
|
|
|
offset = parse_padding(tvb, offset, 4, pad_tree, "padding_cc");
|
|
|
|
cc = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_natlangrestrict_cc, tvb, offset, 4, cc);
|
|
offset += 4;
|
|
|
|
proto_tree_add_item_ret_string(tree, hf_mswsp_natlangrestrict_phrase, tvb, offset, 2*cc, ENC_LITTLE_ENDIAN | ENC_UCS_2, wmem_packet_scope(), &v->phrase);
|
|
offset += 2*cc;
|
|
|
|
offset = parse_padding(tvb, offset, 4, pad_tree, "padding_lcid");
|
|
|
|
v->lcid = tvb_get_letohl(tvb, offset);
|
|
offset = parse_lcid(tvb, offset, tree, "lcid");
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
|
|
static int parse_CReuseWhere(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree _U_, struct CReuseWhere *v, const char *fmt, ...)
|
|
{
|
|
proto_item *item;
|
|
va_list ap;
|
|
const char *txt;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_mswsp_msg_creusewhere, &item, txt);
|
|
v->whereId = tvb_get_letohl(tvb, offset);
|
|
offset += 4;
|
|
|
|
proto_item_append_text(item, " Id: %u", v->whereId);
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
static const value_string RT_VALS[] = {
|
|
{RTNone, "RTNone"},
|
|
{RTAnd, "RTAnd"},
|
|
{RTOr, "RTOr"},
|
|
{RTNot, "RTNot"},
|
|
{RTContent, "RTContent"},
|
|
{RTProperty, "RTProperty"},
|
|
{RTProximity, "RTProximity"},
|
|
{RTVector, ""},
|
|
{RTNatLanguage, "RTNatLanguage"},
|
|
{RTScope, "RTScope"},
|
|
{RTCoerce_Add, "RTCoerce_Add"},
|
|
{RTCoerce_Multiply, "RTCoerce_Multiply"},
|
|
{RTCoerce_Absolute, "RTCoerce_Absolute"},
|
|
{RTProb, "RTProb"},
|
|
{RTFeedback, "RTFeedback"},
|
|
{RTReldoc, "RTReldoc"},
|
|
{RTReuseWhere, "RTReuseWhere"},
|
|
{RTInternalProp, "RTInternalProp"},
|
|
{RTPhrase, "RTInternalProp"},
|
|
{0, NULL}
|
|
};
|
|
|
|
#define EP_ALLOC(T) wmem_new(wmem_packet_scope(), T)
|
|
|
|
static int parse_rType(tvbuff_t *tvb, int offset, proto_tree *tree, enum rType *rtype, const char **str)
|
|
{
|
|
const char *txt = NULL;
|
|
guint32 type = tvb_get_letohl(tvb, offset);
|
|
switch(type) {
|
|
case RTNone:
|
|
*rtype = RTNone;
|
|
break;
|
|
case RTAnd:
|
|
*rtype = RTAnd;
|
|
break;
|
|
case RTOr:
|
|
*rtype = RTOr;
|
|
break;
|
|
case RTNot:
|
|
*rtype = RTNot;
|
|
break;
|
|
case RTContent:
|
|
*rtype = RTContent;
|
|
break;
|
|
case RTProperty:
|
|
*rtype = RTProperty;
|
|
break;
|
|
case RTProximity:
|
|
*rtype = RTProximity;
|
|
break;
|
|
case RTVector:
|
|
*rtype = RTVector;
|
|
break;
|
|
case RTNatLanguage:
|
|
*rtype = RTNatLanguage;
|
|
break;
|
|
case RTScope:
|
|
*rtype = RTScope;
|
|
break;
|
|
case RTCoerce_Add:
|
|
*rtype = RTCoerce_Add;
|
|
break;
|
|
case RTCoerce_Multiply:
|
|
*rtype = RTCoerce_Multiply;
|
|
break;
|
|
case RTCoerce_Absolute:
|
|
*rtype = RTCoerce_Absolute;
|
|
break;
|
|
case RTProb:
|
|
*rtype = RTProb;
|
|
break;
|
|
case RTFeedback:
|
|
*rtype = RTFeedback;
|
|
break;
|
|
case RTReldoc:
|
|
*rtype = RTReldoc;
|
|
break;
|
|
case RTReuseWhere:
|
|
*rtype = RTReuseWhere;
|
|
break;
|
|
case RTInternalProp:
|
|
*rtype = RTInternalProp;
|
|
break;
|
|
default:
|
|
DISSECTOR_ASSERT(FALSE);
|
|
break;
|
|
}
|
|
txt = val_to_str(*rtype, RT_VALS, "0x%.8x");
|
|
proto_tree_add_string_format_value(tree, hf_mswsp_crestrict_ultype, tvb, offset, 4, txt, "%s (0x%.8x)", txt[0] == '0' ? "" : txt, *rtype);
|
|
if (str) {
|
|
*str = txt;
|
|
}
|
|
return offset + 4;
|
|
}
|
|
|
|
static int parse_CRestriction(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CRestriction *v, const char *fmt, ...)
|
|
{
|
|
proto_tree *tree;
|
|
proto_item *item;
|
|
const char *str, *txt;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CRestriction, &item, txt);
|
|
|
|
|
|
offset = parse_rType(tvb, offset, tree, &v->ulType, &str);
|
|
proto_item_append_text(item, " Type: %s", str);
|
|
|
|
v->Weight = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_crestrict_weight, tvb, offset, 4, v->Weight);
|
|
offset += 4;
|
|
|
|
switch(v->ulType) {
|
|
case RTNone:
|
|
break;
|
|
case RTAnd:
|
|
case RTOr:
|
|
case RTProximity:
|
|
case RTPhrase: {
|
|
v->u.RTAnd = EP_ALLOC(struct CNodeRestriction);
|
|
offset = parse_CNodeRestriction(tvb, pinfo, offset, tree, pad_tree, v->u.RTAnd, "CNodeRestriction");
|
|
break;
|
|
}
|
|
case RTNot: {
|
|
v->u.RTNot = EP_ALLOC(struct CRestriction);
|
|
offset = parse_CRestriction(tvb, pinfo, offset, tree, pad_tree,
|
|
v->u.RTNot, "CRestriction");
|
|
break;
|
|
}
|
|
case RTProperty: {
|
|
v->u.RTProperty = EP_ALLOC(struct CPropertyRestriction);
|
|
offset = parse_CPropertyRestriction(tvb, pinfo, offset, tree, pad_tree,
|
|
v->u.RTProperty, "CPropertyRestriction");
|
|
break;
|
|
}
|
|
case RTCoerce_Add:
|
|
case RTCoerce_Multiply:
|
|
case RTCoerce_Absolute: {
|
|
v->u.RTCoerce_Add = EP_ALLOC(struct CCoercionRestriction);
|
|
offset = parse_CCoercionRestriction(tvb, pinfo, offset, tree, pad_tree,
|
|
v->u.RTCoerce_Add, "CCoercionRestriction");
|
|
break;
|
|
}
|
|
case RTContent: {
|
|
v->u.RTContent = EP_ALLOC(struct CContentRestriction);
|
|
offset = parse_CContentRestriction(tvb, offset, tree, pad_tree,
|
|
v->u.RTContent, "CContentRestriction");
|
|
break;
|
|
}
|
|
case RTReuseWhere: {
|
|
v->u.RTReuseWhere = EP_ALLOC(struct CReuseWhere);
|
|
offset = parse_CReuseWhere(tvb, offset, tree, pad_tree,
|
|
v->u.RTReuseWhere, "CReuseWhere");
|
|
break;
|
|
}
|
|
case RTNatLanguage: {
|
|
v->u.RTNatLanguage = EP_ALLOC(struct CNatLanguageRestriction);
|
|
offset = parse_CNatLanguageRestriction(tvb, offset, tree, pad_tree,
|
|
v->u.RTNatLanguage, "CNatLanguageRestriction");
|
|
break;
|
|
}
|
|
default:
|
|
proto_item_append_text(item, " Not supported!");
|
|
}
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
static int parse_CRestrictionArray(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...)
|
|
{
|
|
guint8 present, count;
|
|
|
|
proto_tree *tree;
|
|
proto_item *item;
|
|
const char *txt;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CRestrictionArray, &item, txt);
|
|
|
|
pad_tree = tree;
|
|
|
|
count = tvb_get_guint8(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_crestrictarray_count, tvb, offset, 1, count);
|
|
offset += 1;
|
|
|
|
present = tvb_get_guint8(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_crestrictarray_present, tvb, offset, 1, present);
|
|
offset += 1;
|
|
|
|
if (present) {
|
|
unsigned i;
|
|
offset = parse_padding(tvb, offset, 4, pad_tree, "paddingCRestrictionPresent");
|
|
|
|
for (i=0; i<count; i++) {
|
|
struct CRestriction r;
|
|
offset = parse_CRestriction(tvb, pinfo, offset, tree, pad_tree, &r, "Restriction[%d]", i);
|
|
}
|
|
}
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
static int parse_CNodeRestriction(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CNodeRestriction *v, const char *fmt, ...)
|
|
{
|
|
proto_tree *tree;
|
|
proto_item *item;
|
|
unsigned i;
|
|
const char *txt;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CNodeRestriction, &item, txt);
|
|
|
|
v->cNode = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_cnoderestrict_cnode, tvb, offset, 4, v->cNode);
|
|
offset += 4;
|
|
|
|
for (i=0; i<v->cNode; i++) {
|
|
struct CRestriction r;
|
|
ZERO_STRUCT(r);
|
|
offset = parse_CRestriction(tvb, pinfo, offset, tree, pad_tree, &r, "paNode[%u]", i);
|
|
offset = parse_padding(tvb, offset, 4, tree, "padding_paNode[%u]", i); /*at begin or end of loop ????*/
|
|
|
|
}
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
|
|
/*****************************************************************************************/
|
|
|
|
static int vvalue_tvb_get0(tvbuff_t *tvb _U_, int offset _U_, void *val _U_)
|
|
{
|
|
return 0;
|
|
}
|
|
|
|
static int vvalue_tvb_get1(tvbuff_t *tvb, int offset, void *val)
|
|
{
|
|
guint8 *ui1 = (guint8*)val;
|
|
*ui1 = tvb_get_guint8(tvb, offset);
|
|
return 1;
|
|
}
|
|
|
|
static int vvalue_tvb_get2(tvbuff_t *tvb, int offset, void *val)
|
|
{
|
|
guint16 *ui2 = (guint16*)val;
|
|
*ui2 = tvb_get_letohs(tvb, offset);
|
|
return 2;
|
|
}
|
|
|
|
static int vvalue_tvb_get4(tvbuff_t *tvb, int offset, void *val)
|
|
{
|
|
guint32 *ui4 = (guint32*)val;
|
|
*ui4 = tvb_get_letohl(tvb, offset);
|
|
return 4;
|
|
}
|
|
|
|
static int vvalue_tvb_get8(tvbuff_t *tvb, int offset, void *val)
|
|
{
|
|
guint64 *ui8 = (guint64*)val;
|
|
*ui8 = tvb_get_letoh64(tvb, offset);
|
|
return 8;
|
|
}
|
|
|
|
static int vvalue_tvb_blob(tvbuff_t *tvb, int offset, void *val)
|
|
{
|
|
struct data_blob *blob = (struct data_blob*)val;
|
|
guint32 len = tvb_get_letohl(tvb, offset);
|
|
|
|
blob->size = len;
|
|
blob->data = (guint8*)tvb_memdup(wmem_packet_scope(), tvb, offset + 4, len);
|
|
|
|
return 4 + len;
|
|
}
|
|
|
|
static int vvalue_tvb_lpstr(tvbuff_t *tvb, int offset, void *val)
|
|
{
|
|
struct data_str *str = (struct data_str*)val;
|
|
gint len;
|
|
|
|
str->len = tvb_get_letohl(tvb, offset);
|
|
str->str = tvb_get_stringz_enc(wmem_packet_scope(), tvb, offset + 4, &len,
|
|
ENC_ASCII|ENC_LITTLE_ENDIAN);
|
|
/* XXX test str->len == len */
|
|
return 4 + len;
|
|
}
|
|
|
|
static int vvalue_tvb_lpwstr_len(tvbuff_t *tvb, int offset, int length, void *val)
|
|
{
|
|
struct data_str *str = (struct data_str*)val;
|
|
const gchar *ptr;
|
|
int len;
|
|
|
|
if (length == 0) {
|
|
/* we don't know the length */
|
|
ptr = tvb_get_stringz_enc(wmem_packet_scope(), tvb, offset, &len,
|
|
ENC_UTF_16|ENC_LITTLE_ENDIAN);
|
|
} else {
|
|
ptr = tvb_get_string_enc(wmem_packet_scope(), tvb, offset, length,
|
|
ENC_UTF_16|ENC_LITTLE_ENDIAN);
|
|
len = length;
|
|
}
|
|
str->str = ptr;
|
|
return len;
|
|
}
|
|
|
|
static int vvalue_tvb_lpwstr(tvbuff_t *tvb, int offset, void *val)
|
|
{
|
|
struct data_str *str = (struct data_str*)val;
|
|
|
|
str->len = tvb_get_letohl(tvb, offset);
|
|
|
|
return 4 + vvalue_tvb_lpwstr_len(tvb, offset + 4, 0, val);
|
|
}
|
|
|
|
/* Maximum sane vector size. Arbitrary. */
|
|
#define MAX_VT_VECTOR_SIZE 5000
|
|
static int vvalue_tvb_vector_internal(tvbuff_t *tvb, int offset, struct vt_vector *val, struct vtype_data *type, guint num)
|
|
{
|
|
const int offset_in = offset;
|
|
const gboolean varsize = (type->size == -1);
|
|
const guint elsize = varsize ? (guint)sizeof(struct data_blob) : (guint)type->size;
|
|
guint8 *data;
|
|
int len;
|
|
guint i;
|
|
|
|
/*
|
|
* Make sure we actually *have* the data we're going to fetch
|
|
* here, before making a possibly-doomed attempt to allocate
|
|
* memory for it.
|
|
*
|
|
* First, check for sane values.
|
|
*/
|
|
if (num > MAX_VT_VECTOR_SIZE) {
|
|
THROW(ReportedBoundsError);
|
|
}
|
|
|
|
/*
|
|
* No huge numbers from the wire; now make sure we at least have that data.
|
|
*/
|
|
tvb_ensure_bytes_exist(tvb, offset, elsize * num);
|
|
|
|
/*
|
|
* OK, it exists; allocate a buffer into which to fetch it.
|
|
*/
|
|
data = (guint8*)wmem_alloc(wmem_packet_scope(), elsize * num);
|
|
|
|
val->len = num;
|
|
val->u.vt_ui1 = data;
|
|
DISSECTOR_ASSERT((void*)&val->u == ((void*)&val->u.vt_ui1));
|
|
|
|
for (i=0; i<num; i++) {
|
|
DISSECTOR_ASSERT_HINT(type->tvb_get != 0,
|
|
"type that we don't know yet how to handle, please submit a bug with trace");
|
|
len = type->tvb_get(tvb, offset, data);
|
|
data += elsize;
|
|
offset += len;
|
|
if (varsize && (offset % 4) ) { /* at begin or end of loop ??? */
|
|
int padding = 4 - (offset % 4);
|
|
offset += padding;
|
|
}
|
|
}
|
|
return offset - offset_in;
|
|
}
|
|
|
|
static int vvalue_tvb_vector(tvbuff_t *tvb, int offset, struct vt_vector *val, struct vtype_data *type)
|
|
{
|
|
const guint num = tvb_get_letohl(tvb, offset);
|
|
return 4 + vvalue_tvb_vector_internal(tvb, offset+4, val, type, num);
|
|
}
|
|
|
|
static void vvalue_strbuf_append_null(wmem_strbuf_t *strbuf _U_, void *ptr _U_)
|
|
{}
|
|
|
|
static void vvalue_strbuf_append_i1(wmem_strbuf_t *strbuf, void *ptr)
|
|
{
|
|
gint8 i1 = *(gint8*)ptr;
|
|
wmem_strbuf_append_printf(strbuf, "%d", (int)i1);
|
|
}
|
|
|
|
static void vvalue_strbuf_append_i2(wmem_strbuf_t *strbuf, void *ptr)
|
|
{
|
|
gint16 i2 = *(gint16*)ptr;
|
|
wmem_strbuf_append_printf(strbuf, "%d", (int)i2);
|
|
}
|
|
|
|
static void vvalue_strbuf_append_i4(wmem_strbuf_t *strbuf, void *ptr)
|
|
{
|
|
gint32 i4 = *(gint32*)ptr;
|
|
wmem_strbuf_append_printf(strbuf, "%d", i4);
|
|
}
|
|
|
|
static void vvalue_strbuf_append_i8(wmem_strbuf_t *strbuf, void *ptr)
|
|
{
|
|
gint64 i8 = *(gint64*)ptr;
|
|
wmem_strbuf_append_printf(strbuf, "%" PRId64, i8);
|
|
}
|
|
|
|
static void vvalue_strbuf_append_ui1(wmem_strbuf_t *strbuf, void *ptr)
|
|
{
|
|
guint8 ui1 = *(guint8*)ptr;
|
|
wmem_strbuf_append_printf(strbuf, "%u", (unsigned)ui1);
|
|
}
|
|
|
|
static void vvalue_strbuf_append_ui2(wmem_strbuf_t *strbuf, void *ptr)
|
|
{
|
|
guint16 ui2 = *(guint16*)ptr;
|
|
wmem_strbuf_append_printf(strbuf, "%u", (unsigned)ui2);
|
|
}
|
|
|
|
static void vvalue_strbuf_append_ui4(wmem_strbuf_t *strbuf, void *ptr)
|
|
{
|
|
guint32 ui4 = *(guint32*)ptr;
|
|
wmem_strbuf_append_printf(strbuf, "%d", ui4);
|
|
}
|
|
|
|
static void vvalue_strbuf_append_ui8(wmem_strbuf_t *strbuf, void *ptr)
|
|
{
|
|
guint64 ui8 = *(guint64*)ptr;
|
|
wmem_strbuf_append_printf(strbuf, "%" PRIu64, ui8);
|
|
}
|
|
|
|
static void vvalue_strbuf_append_r4(wmem_strbuf_t *strbuf, void *ptr)
|
|
{
|
|
float r4 = *(float*)ptr;
|
|
wmem_strbuf_append_printf(strbuf, "%g", (double)r4);
|
|
}
|
|
|
|
static void vvalue_strbuf_append_r8(wmem_strbuf_t *strbuf, void *ptr)
|
|
{
|
|
double r8 = *(double*)ptr;
|
|
wmem_strbuf_append_printf(strbuf, "%g", r8);
|
|
}
|
|
|
|
static void vvalue_strbuf_append_str(wmem_strbuf_t *strbuf, void *ptr)
|
|
{
|
|
struct data_str *str = (struct data_str*)ptr;
|
|
wmem_strbuf_append_printf(strbuf, "\"%s\"", str->str);
|
|
}
|
|
|
|
static void vvalue_strbuf_append_blob(wmem_strbuf_t *strbuf, void *ptr)
|
|
{
|
|
struct data_blob *blob = (struct data_blob*)ptr;
|
|
wmem_strbuf_append_printf(strbuf, "size: %d", (int)blob->size);
|
|
}
|
|
|
|
static void vvalue_strbuf_append_bool(wmem_strbuf_t *strbuf, void *ptr)
|
|
{
|
|
guint16 val = *(guint*)ptr;
|
|
switch (val) {
|
|
case 0:
|
|
wmem_strbuf_append(strbuf, "False");
|
|
break;
|
|
case 0xffff:
|
|
wmem_strbuf_append(strbuf, "True");
|
|
break;
|
|
default:
|
|
wmem_strbuf_append_printf(strbuf, "Invalid (0x%4x)", val);
|
|
}
|
|
}
|
|
|
|
static void vvalue_strbuf_append_vector(wmem_strbuf_t *strbuf, struct vt_vector val, struct vtype_data *type)
|
|
{
|
|
const int elsize = (type->size == -1) ? (int)sizeof(struct data_blob) : type->size;
|
|
unsigned i;
|
|
guint8 *data = val.u.vt_ui1;
|
|
wmem_strbuf_append_c(strbuf, '[');
|
|
for (i=0; i<val.len; i++) {
|
|
if (i>0) {
|
|
wmem_strbuf_append_c(strbuf, ',');
|
|
}
|
|
type->strbuf_append(strbuf, data);
|
|
data += elsize;
|
|
}
|
|
wmem_strbuf_append_c(strbuf, ']');
|
|
}
|
|
|
|
static struct vtype_data VT_TYPE[] = {
|
|
{VT_EMPTY, "VT_EMPTY", 0, vvalue_tvb_get0, NULL, vvalue_strbuf_append_null},
|
|
{VT_NULL, "VT_NULL", 0, vvalue_tvb_get0, NULL, vvalue_strbuf_append_null},
|
|
{VT_I2, "VT_I2", 2, vvalue_tvb_get2, NULL, vvalue_strbuf_append_i2},
|
|
{VT_I4, "VT_I4", 4, vvalue_tvb_get4, NULL, vvalue_strbuf_append_i4},
|
|
{VT_R4, "VT_R4", 4, vvalue_tvb_get4, NULL, vvalue_strbuf_append_r4},
|
|
{VT_R8, "VT_R8", 8, vvalue_tvb_get8, NULL, vvalue_strbuf_append_r8},
|
|
{VT_CY, "VT_CY", 8, vvalue_tvb_get8, NULL, vvalue_strbuf_append_i8},
|
|
{VT_DATE, "VT_DATE", 8, vvalue_tvb_get8, NULL, vvalue_strbuf_append_r8},
|
|
{VT_BSTR, "VT_BSTR", -1, vvalue_tvb_lpwstr, vvalue_tvb_lpwstr_len, vvalue_strbuf_append_str},
|
|
{VT_ERROR, "VT_ERROR", 4, vvalue_tvb_get4, NULL, vvalue_strbuf_append_ui4},
|
|
{VT_BOOL, "VT_BOOL", 2, vvalue_tvb_get2, NULL, vvalue_strbuf_append_bool},
|
|
{VT_VARIANT, "VT_VARIANT", -1, NULL, NULL, NULL},
|
|
{VT_DECIMAL, "VT_DECIMAL", 16, NULL, NULL, NULL},
|
|
{VT_I1, "VT_I1", 1, vvalue_tvb_get1, NULL, vvalue_strbuf_append_i1},
|
|
{VT_UI1, "VT_UI1", 1, vvalue_tvb_get1, NULL, vvalue_strbuf_append_ui1},
|
|
{VT_UI2, "VT_UI2", 2, vvalue_tvb_get2, NULL, vvalue_strbuf_append_ui2},
|
|
{VT_UI4, "VT_UI4", 4, vvalue_tvb_get4, NULL, vvalue_strbuf_append_ui4},
|
|
{VT_I8, "VT_I8", 8, vvalue_tvb_get8, NULL, vvalue_strbuf_append_i8},
|
|
{VT_UI8, "VT_UI8", 8, vvalue_tvb_get8, NULL, vvalue_strbuf_append_ui8},
|
|
{VT_INT, "VT_INT", 4, vvalue_tvb_get4, NULL, vvalue_strbuf_append_i4},
|
|
{VT_UINT, "VT_UINT", 4, vvalue_tvb_get4, NULL, vvalue_strbuf_append_ui4},
|
|
{VT_LPSTR, "VT_LPSTR", -1, vvalue_tvb_lpstr, NULL, vvalue_strbuf_append_str},
|
|
{VT_LPWSTR, "VT_LPWSTR", -1, vvalue_tvb_lpwstr, vvalue_tvb_lpwstr_len, vvalue_strbuf_append_str},
|
|
{VT_COMPRESSED_LPWSTR, "VT_COMPRESSED_LPWSTR", -1, NULL, NULL, vvalue_strbuf_append_str},
|
|
{VT_FILETIME, "VT_FILETIME", 8, vvalue_tvb_get8, NULL, vvalue_strbuf_append_i8},
|
|
{VT_BLOB, "VT_BLOB", -1, vvalue_tvb_blob, NULL, vvalue_strbuf_append_blob},
|
|
{VT_BLOB_OBJECT, "VT_BLOB_OBJECT", -1, vvalue_tvb_blob, NULL, vvalue_strbuf_append_blob},
|
|
{VT_CLSID, "VT_CLSID", 16, NULL, NULL, NULL}
|
|
};
|
|
|
|
static struct vtype_data *vType_get_type(guint16 t)
|
|
{
|
|
unsigned i;
|
|
t = (t & 0xFF);
|
|
for (i=0; i<array_length(VT_TYPE); i++) {
|
|
if (t == VT_TYPE[i].tag) {
|
|
return &VT_TYPE[i];
|
|
}
|
|
}
|
|
return NULL;
|
|
}
|
|
|
|
static const char *str_CBaseStorageVariant(struct CBaseStorageVariant *value, gboolean print_type)
|
|
{
|
|
|
|
wmem_strbuf_t *strbuf = wmem_strbuf_new(wmem_packet_scope(), "");
|
|
if (value == NULL) {
|
|
return "<NULL>";
|
|
}
|
|
|
|
if (value->type == NULL) {
|
|
return "<??""?>";
|
|
}
|
|
|
|
if (print_type) {
|
|
wmem_strbuf_append(strbuf, value->type->str);
|
|
|
|
if (value->vType & 0xFF00) {
|
|
wmem_strbuf_append_printf(strbuf, "[%d]", value->vValue.vt_vector.len);
|
|
}
|
|
wmem_strbuf_append(strbuf, ": ");
|
|
}
|
|
|
|
switch (value->vType & 0xFF00) {
|
|
case 0:
|
|
value->type->strbuf_append(strbuf, &value->vValue);
|
|
break;
|
|
case VT_ARRAY:
|
|
vvalue_strbuf_append_vector(strbuf, value->vValue.vt_array.vData, value->type);
|
|
break;
|
|
case VT_VECTOR:
|
|
vvalue_strbuf_append_vector(strbuf, value->vValue.vt_vector, value->type);
|
|
break;
|
|
default:
|
|
wmem_strbuf_append(strbuf, "Invalid");
|
|
}
|
|
|
|
return wmem_strbuf_get_str(strbuf);
|
|
}
|
|
|
|
static int parse_CBaseStorageVariant(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree _U_, struct CBaseStorageVariant *value, const char *text)
|
|
{
|
|
int i, len;
|
|
proto_item *ti, *ti_type, *ti_val;
|
|
proto_tree *tree, *tr;
|
|
enum vType highType;
|
|
|
|
ZERO_STRUCT(*value);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CBaseStorageVariant, &ti, text);
|
|
|
|
value->vType = tvb_get_letohs(tvb, offset);
|
|
value->type = vType_get_type(value->vType & 0xFF);
|
|
if (value->type == NULL) {
|
|
/*
|
|
* Not a valid type.
|
|
*/
|
|
ti_type = proto_tree_add_string(tree, hf_mswsp_cbasestorvariant_vtype, tvb, offset, 2, "Unknown CBaseStorageVariant type");
|
|
expert_add_info(pinfo, ti_type, &ei_mswsp_invalid_variant_type);
|
|
|
|
THROW_MESSAGE(ReportedBoundsError, "Unknown CBaseStorageVariant type");
|
|
return offset;
|
|
}
|
|
|
|
ti_type = proto_tree_add_string(tree, hf_mswsp_cbasestorvariant_vtype, tvb, offset, 2, value->type->str);
|
|
offset += 2;
|
|
|
|
value->vData1 = tvb_get_guint8(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_cbasestorvariant_vdata1, tvb, offset, 1, value->vData1);
|
|
offset += 1;
|
|
|
|
value->vData2 = tvb_get_guint8(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_cbasestorvariant_vdata2, tvb, offset, 1, value->vData2);
|
|
offset += 1;
|
|
|
|
highType = (enum vType)(value->vType & 0xFF00);
|
|
|
|
ti_val = proto_tree_add_string(tree, hf_mswsp_cbasestorvariant_vvalue, tvb, offset, 0, "");
|
|
|
|
switch (highType) {
|
|
case VT_EMPTY:
|
|
DISSECTOR_ASSERT_HINT(value->type->tvb_get != 0,
|
|
"type that we don't know yet how to handle, please submit a bug with trace");
|
|
len = value->type->tvb_get(tvb, offset, &value->vValue.vt_single);
|
|
offset += len;
|
|
break;
|
|
case VT_VECTOR:
|
|
proto_item_append_text(ti_type, "|VT_VECTOR");
|
|
tr = proto_item_add_subtree(ti_val, ett_CBaseStorageVariant_Vector);
|
|
|
|
len = vvalue_tvb_vector(tvb, offset, &value->vValue.vt_vector, value->type);
|
|
proto_tree_add_uint(tr, hf_mswsp_cbasestorvariant_num, tvb, offset, 4, value->vValue.vt_vector.len);
|
|
offset += len;
|
|
break;
|
|
case VT_ARRAY: {
|
|
guint16 cDims, fFeatures;
|
|
guint32 cbElements, cElements, lLbound;
|
|
int num = 1;
|
|
|
|
proto_item_append_text(ti_type, "|VT_ARRAY");
|
|
tr = proto_item_add_subtree(ti_val, ett_CBaseStorageVariant_Array);
|
|
|
|
cDims = tvb_get_letohs(tvb, offset);
|
|
proto_tree_add_uint(tr, hf_mswsp_cbasestorvariant_cdims, tvb, offset, 2, cDims);
|
|
offset += 2;
|
|
|
|
fFeatures = tvb_get_letohs(tvb, offset);
|
|
proto_tree_add_uint(tr, hf_mswsp_cbasestorvariant_ffeatures, tvb, offset, 2, fFeatures);
|
|
offset += 2;
|
|
|
|
cbElements = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tr, hf_mswsp_cbasestorvariant_cbelements, tvb, offset, 4, cbElements);
|
|
offset += 4;
|
|
for (i=0; i<cDims; i++) {
|
|
cElements = tvb_get_letohl(tvb, offset);
|
|
lLbound = tvb_get_letohl(tvb, offset + 4);
|
|
proto_tree_add_string_format(tr, hf_mswsp_cbasestorvariant_rgsabound, tvb, offset, 8, "", "Rgsabound[%d]: (%d:%d)", i, cElements, lLbound);
|
|
offset += 8;
|
|
num *= cElements;
|
|
}
|
|
|
|
len = vvalue_tvb_vector_internal(tvb, offset, &value->vValue.vt_array.vData, value->type, num);
|
|
offset += len;
|
|
break;
|
|
}
|
|
default:
|
|
proto_item_append_text(ti_type, "|0x%x", highType);
|
|
}
|
|
proto_item_set_end(ti, tvb, offset);
|
|
proto_item_set_end(ti_val, tvb, offset);
|
|
|
|
proto_item_append_text(ti_val, " %s", str_CBaseStorageVariant(value, FALSE));
|
|
proto_item_append_text(ti, " %s", str_CBaseStorageVariant(value, TRUE));
|
|
|
|
return offset;
|
|
}
|
|
|
|
enum {
|
|
DBKIND_GUID_NAME = 0,
|
|
DBKIND_GUID_PROPID = 1
|
|
};
|
|
|
|
static int parse_CDbColId(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *text)
|
|
{
|
|
guint32 eKind, ulId;
|
|
e_guid_t guid;
|
|
const char *str;
|
|
static const char *KIND[] = {"DBKIND_GUID_NAME", "DBKIND_GUID_PROPID"};
|
|
|
|
proto_item *tree_item;
|
|
proto_tree *tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CDbColId, &tree_item, text);
|
|
|
|
eKind = tvb_get_letohl(tvb, offset);
|
|
str = (eKind < 2 ? KIND[eKind] : "???");
|
|
proto_tree_add_string_format_value(tree, hf_mswsp_cdbcolid_ekind, tvb, offset, 4, str, "%s (%u)", str, eKind);
|
|
offset += 4;
|
|
|
|
offset = parse_padding(tvb, offset, 8, pad_tree, "paddingGuidAlign");
|
|
|
|
offset = parse_guid(tvb, offset, tree, &guid, "GUID");
|
|
|
|
ulId = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_cdbcolid_ulid, tvb, offset, 4, ulId);
|
|
offset += 4;
|
|
|
|
if (eKind == DBKIND_GUID_NAME) {
|
|
char *name;
|
|
int len = ulId;
|
|
name = tvb_get_string_enc(wmem_packet_scope(), tvb, offset, len, ENC_LITTLE_ENDIAN | ENC_UCS_2);
|
|
proto_item_append_text(tree_item, " \"%s\"", name);
|
|
proto_tree_add_string_format_value(tree, hf_mswsp_cdbcolid_vstring, tvb, offset, len, name, "\"%s\"", name);
|
|
offset += len;
|
|
} else if (eKind == DBKIND_GUID_PROPID) {
|
|
proto_item_append_text(tree_item, " %08x", ulId);
|
|
} else {
|
|
proto_item_append_text(tree_item, "<INVALID>");
|
|
}
|
|
|
|
proto_item_set_end(tree_item, tvb, offset);
|
|
|
|
return offset;
|
|
}
|
|
|
|
static int parse_CDbProp(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct GuidPropertySet *propset, const char *fmt, ...)
|
|
{
|
|
static const value_string EMPTY_VS[] = {{0, NULL}};
|
|
const value_string *vs = (propset && propset->id_map) ? propset->id_map : EMPTY_VS;
|
|
guint32 id, opt, status;
|
|
struct CBaseStorageVariant value;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
const char *str, *txt;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CDbProp, &item, txt);
|
|
|
|
id = tvb_get_letohl(tvb, offset);
|
|
str = val_to_str(id, vs, "0x%08x");
|
|
proto_tree_add_string_format_value(tree, hf_mswsp_cdbprop_id, tvb, offset, 4, str, "%s (0x%08x)", (str[0] == '0' ? "" : str), id);
|
|
offset += 4;
|
|
proto_item_append_text(item, " Id: %s", str);
|
|
|
|
opt = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_cdbprop_options, tvb, offset, 4, opt);
|
|
offset += 4;
|
|
|
|
status = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_cdbprop_status, tvb, offset, 4, status);
|
|
offset += 4;
|
|
|
|
offset = parse_CDbColId(tvb, offset, tree, pad_tree, "colid");
|
|
|
|
offset = parse_CBaseStorageVariant(tvb, pinfo, offset, tree, pad_tree, &value, "vValue");
|
|
|
|
str = str_CBaseStorageVariant(&value, TRUE);
|
|
proto_item_append_text(item, " %s", str);
|
|
proto_item_set_end(item, tvb, offset);
|
|
|
|
return offset;
|
|
}
|
|
|
|
static int parse_CDbPropSet(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...)
|
|
{
|
|
int i, num;
|
|
e_guid_t guid;
|
|
struct GuidPropertySet *pset;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
const char *txt;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CDbPropSet, &item, txt);
|
|
|
|
offset = parse_guid(tvb, offset, tree, &guid, "guidPropertySet");
|
|
|
|
pset = GuidPropertySet_find_guid(&guid);
|
|
|
|
if (pset) {
|
|
proto_item_append_text(item, " \"%s\" (%s)", pset->desc, pset->def);
|
|
} else {
|
|
const char *guid_str = guid_to_str(wmem_packet_scope(), &guid);
|
|
proto_item_append_text(item, " {%s}", guid_str);
|
|
}
|
|
|
|
offset = parse_padding(tvb, offset, 4, pad_tree, "guidPropertySet");
|
|
|
|
num = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_cdbpropset_cprops, tvb, offset, 4, num);
|
|
offset += 4;
|
|
proto_item_append_text(item, " Num: %d", num);
|
|
|
|
for (i = 0; i<num; i++) {
|
|
offset = parse_padding(tvb, offset, 4, pad_tree, "aProp[%d]", i);
|
|
offset = parse_CDbProp(tvb, pinfo, offset, tree, pad_tree, pset, "aProp[%d]", i);
|
|
}
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
static int parse_PropertySetArray(tvbuff_t *tvb, packet_info *pinfo, int offset, int size_offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...)
|
|
{
|
|
const int offset_in = offset;
|
|
guint32 size, num;
|
|
int i;
|
|
proto_tree *tree;
|
|
proto_item *item;
|
|
const char *txt;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CDbPropSet_Array, &item, txt);
|
|
|
|
size = tvb_get_letohl(tvb, size_offset);
|
|
proto_tree_add_item(tree, hf_mswsp_msg_ConnectIn_Blob1, tvb,
|
|
size_offset, 4, ENC_LITTLE_ENDIAN);
|
|
|
|
num = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_item(tree, hf_mswsp_msg_ConnectIn_PropSets_num, tvb,
|
|
offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
for (i = 0; i < (int)num; i++) {
|
|
offset = parse_CDbPropSet(tvb, pinfo, offset, tree, pad_tree, "PropertySet[%d]", i);
|
|
}
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
DISSECTOR_ASSERT(offset - offset_in == (int)size);
|
|
return offset;
|
|
}
|
|
|
|
int parse_CColumnSet(tvbuff_t *tvb, int offset, proto_tree *tree, const char *fmt, ...)
|
|
{
|
|
guint32 count, v, i;
|
|
proto_item *item;
|
|
const char *txt;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
count = tvb_get_letohl(tvb, offset);
|
|
offset += 4;
|
|
proto_tree_add_subtree(tree, tvb, offset, count * 4, ett_mswsp_uin32_array, &item, txt);
|
|
proto_item_append_text(item, " Count %u [", count);
|
|
|
|
for (i=0; i<count; i++) {
|
|
v = tvb_get_letohl(tvb, offset);
|
|
offset += 4;
|
|
if (i>0) {
|
|
proto_item_append_text(item, ",%u", v);
|
|
} else {
|
|
proto_item_append_text(item, "%u", v);
|
|
}
|
|
}
|
|
proto_item_append_text(item, "]");
|
|
return offset;
|
|
}
|
|
|
|
/* 2.2.1.23 RANGEBOUNDARY */
|
|
int parse_RANGEBOUNDARY(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...)
|
|
{
|
|
guint32 ulType;
|
|
guint8 labelPresent;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
const char *txt;
|
|
struct CBaseStorageVariant prval;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
tree =proto_tree_add_subtree (parent_tree, tvb, offset, 0, ett_RANGEBOUNDARY, &item, txt);
|
|
|
|
ulType = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_item(tree, hf_mswsp_rangeboundry_ultype, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
proto_item_append_text(item, ": Type 0x%08x", ulType);
|
|
offset += 4;
|
|
|
|
ZERO_STRUCT(prval);
|
|
offset = parse_CBaseStorageVariant(tvb, pinfo, offset, tree, pad_tree, &prval, "prVal");
|
|
|
|
labelPresent = tvb_get_guint8(tvb, offset);
|
|
proto_tree_add_item(tree, hf_mswsp_rangeboundry_labelpresent, tvb, offset, 1, ENC_LITTLE_ENDIAN);
|
|
offset += 1;
|
|
|
|
if (labelPresent) {
|
|
guint32 ccLabel;
|
|
const guint8* label;
|
|
offset = parse_padding(tvb, offset, 4, pad_tree, "paddingLabelPresent");
|
|
|
|
ccLabel = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_item_ret_uint(tree, hf_mswsp_rangeboundry_cclabel, tvb, offset, 4, ENC_LITTLE_ENDIAN, &ccLabel);
|
|
offset += 4;
|
|
|
|
proto_tree_add_item_ret_string(tree, hf_mswsp_rangeboundry_label, tvb, offset, 2*ccLabel, ENC_LITTLE_ENDIAN | ENC_UCS_2, wmem_packet_scope(), &label);
|
|
proto_item_append_text(item, " Label: \"%s\"", label);
|
|
offset += 2*ccLabel;
|
|
}
|
|
|
|
proto_item_append_text(item, " Val: %s", str_CBaseStorageVariant(&prval, TRUE));
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
|
|
/* 2.2.1.22 CRangeCategSpec */
|
|
int parse_CRangeCategSpec(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...)
|
|
{
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
va_list ap;
|
|
unsigned i;
|
|
const char *txt;
|
|
guint32 cRange;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CRangeCategSpec, &item, txt);
|
|
|
|
offset = parse_lcid(tvb, offset, tree, "lcid");
|
|
|
|
cRange = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_crangecategspec_crange, tvb, offset, 4, cRange);
|
|
offset += 4;
|
|
|
|
for (i=0; i<cRange; i++) {
|
|
offset = parse_RANGEBOUNDARY(tvb, pinfo, offset, tree, pad_tree, "aRangeBegin[%u]", i);
|
|
|
|
}
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
/* 2.2.1.21 CCategSpec */
|
|
int parse_CCategSpec(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...)
|
|
{
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
|
|
va_list ap;
|
|
guint32 type;
|
|
const char *txt;
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CCategSpec, &item, txt);
|
|
|
|
type = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_ccategspec_type, tvb, offset, 4, type);
|
|
proto_item_append_text(item, " Type %u", type);
|
|
offset += 4;
|
|
|
|
offset = parse_CSort(tvb, offset, tree, pad_tree, "CSort");
|
|
|
|
/*
|
|
* A CRangeCategSpec structure specifying the range values.
|
|
* This field MUST be omitted if _ulCategType is set to
|
|
* CATEGORIZE_UNIQUE e.g. '0' otherwise it MUST be present.
|
|
*/
|
|
if (type != 0) {
|
|
offset = parse_CRangeCategSpec(tvb, pinfo, offset, tree, pad_tree, "CRangeCategSpec");
|
|
}
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
/* 2.2.1.25 CAggregSpec */
|
|
static int parse_CAggregSpec(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...)
|
|
{
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
va_list ap;
|
|
guint32 type, ccAlias, idColumn;
|
|
const char *txt;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CAggregSpec, &item, txt);
|
|
|
|
proto_tree_add_item_ret_uint(tree, hf_mswsp_caggregspec_type, tvb, offset, 1, ENC_LITTLE_ENDIAN, &type);
|
|
offset += 1;
|
|
|
|
offset = parse_padding(tvb, offset, 4, pad_tree, "padding");
|
|
|
|
proto_tree_add_item_ret_uint(tree, hf_mswsp_caggregspec_ccalias, tvb, offset, 4, ENC_LITTLE_ENDIAN, &ccAlias);
|
|
offset += 4;
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_caggregspec_alias, tvb, offset, 2*ccAlias, ENC_LITTLE_ENDIAN | ENC_UCS_2);
|
|
offset += 2*ccAlias;
|
|
|
|
proto_tree_add_item_ret_uint(tree, hf_mswsp_caggregspec_idcolumn, tvb, offset, 4, ENC_LITTLE_ENDIAN, &idColumn);
|
|
offset += 4;
|
|
if (type == DBAGGTTYPE_REPRESENTATIVEOF
|
|
|| type == DBAGGTTYPE_BYFREQ
|
|
|| type == DBAGGTTYPE_FIRST) {
|
|
proto_tree_add_uint(tree,
|
|
hf_mswsp_caggregspec_ulmaxnumtoreturn,
|
|
tvb, offset, 4, idColumn);
|
|
offset += 4;
|
|
if (type == DBAGGTTYPE_REPRESENTATIVEOF) {
|
|
proto_tree_add_uint(tree,
|
|
hf_mswsp_caggregspec_idrepresentative,
|
|
tvb, offset, 4, idColumn);
|
|
}
|
|
}
|
|
/* Optional ???
|
|
ulMaxNumToReturn, idRepresentative;
|
|
*/
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
/* 2.2.1.24 CAggregSet */
|
|
static int parse_CAggregSet(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...)
|
|
{
|
|
guint32 cCount, i;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
const char *txt;
|
|
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CAggregSet, &item, txt);
|
|
|
|
cCount = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_caggregset_count, tvb, offset, 4, cCount);
|
|
offset += 4;
|
|
|
|
for (i=0; i<cCount; i++) {
|
|
/* 2.2.1.25 CAggregSpec */
|
|
offset = parse_CAggregSpec(tvb, offset, tree, pad_tree, "AggregSpecs[%u]", i);
|
|
}
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
/* 2.2.1.27 CAggregSortKey */
|
|
static int parse_CAggregSortKey(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...)
|
|
{
|
|
guint32 order;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
const char *txt;
|
|
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CAggregSortKey, &item, txt);
|
|
|
|
order = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_caggregsortkey_order, tvb, offset, 4, order);
|
|
offset += 4;
|
|
|
|
offset = parse_CAggregSpec(tvb, offset, tree, pad_tree, "ColumnSpec");
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
|
|
/* 2.2.1.26 CSortAggregSet */
|
|
static int parse_CSortAggregSet(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...)
|
|
{
|
|
guint32 cCount, i;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
const char *txt;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CSortAggregSet, &item, txt);
|
|
|
|
cCount = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_csortaggregset_count, tvb, offset, 4, cCount);
|
|
offset += 4;
|
|
|
|
for (i=0; i<cCount; i++) {
|
|
/* 2.2.1.27 CAggregSortKey */
|
|
offset = parse_CAggregSortKey(tvb, offset, tree, pad_tree, "SortKeys[%u]", i);
|
|
}
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
enum CInGroupSortAggregSet_type {
|
|
GroupIdDefault = 0x00, /* The default for all ranges. */
|
|
GroupIdMinValue = 0x01, /*The first range in the parent's group.*/
|
|
GroupIdNull = 0x02, /*The last range in the parent's group.*/
|
|
GroupIdValue = 0x03
|
|
};
|
|
|
|
static int parse_CInGroupSortAggregSet_type(tvbuff_t *tvb, int offset, proto_tree *tree, enum CInGroupSortAggregSet_type *type)
|
|
{
|
|
guint8 tmp = tvb_get_guint8(tvb, offset);
|
|
switch(tmp) {
|
|
case GroupIdDefault:
|
|
*type = GroupIdDefault;
|
|
break;
|
|
case GroupIdMinValue:
|
|
*type = GroupIdMinValue;
|
|
break;
|
|
case GroupIdNull:
|
|
*type = GroupIdNull;
|
|
break;
|
|
case GroupIdValue:
|
|
*type = GroupIdValue;
|
|
break;
|
|
default:
|
|
DISSECTOR_ASSERT(FALSE);
|
|
break;
|
|
}
|
|
proto_tree_add_uint(tree, hf_mswsp_cingroupsortaggregset_type, tvb, offset, 1, *type);
|
|
return offset + 1;
|
|
}
|
|
|
|
/* 2.2.1.29 CInGroupSortAggregSet */
|
|
static int parse_CInGroupSortAggregSet(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...)
|
|
{
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
va_list ap;
|
|
enum CInGroupSortAggregSet_type type;
|
|
const char *txt;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CInGroupSortAggregSet, &item, txt);
|
|
|
|
offset = parse_CInGroupSortAggregSet_type(tvb, offset, tree, &type);
|
|
offset = parse_padding(tvb, offset, 4, pad_tree, "CInGroupSortAggregSet");
|
|
|
|
if (type == GroupIdValue) {
|
|
struct CBaseStorageVariant id;
|
|
offset = parse_CBaseStorageVariant(tvb, pinfo, offset, tree, pad_tree, &id, "inGroupId");
|
|
}
|
|
|
|
offset = parse_CSortSet(tvb, offset, tree, pad_tree, "SortSet");
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
|
|
/* 2.2.1.28 CInGroupSortAggregSets */
|
|
static int parse_CInGroupSortAggregSets(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...)
|
|
{
|
|
guint32 cCount, i;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
const char *txt;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CInGroupSortAggregSets, &item, txt);
|
|
|
|
cCount = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_cingroupsortaggregsets_count, tvb, offset, 4, cCount);
|
|
offset += 4;
|
|
|
|
for (i=0; i<cCount; i++) {
|
|
/* 2.2.1.29 CInGroupSortAggregSet */
|
|
offset = parse_CInGroupSortAggregSet(tvb, pinfo, offset, tree, pad_tree, "SortSets[%u]", i);
|
|
}
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
/* 2.2.1.20 CCategorizationSpec */
|
|
int parse_CCategorizationSpec(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...)
|
|
{
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
const char *txt;
|
|
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CCategorizationSpec, &item, txt);
|
|
|
|
/* 2.2.1.18 CColumnSet */
|
|
offset = parse_CColumnSet(tvb, offset, tree, "csColumns");
|
|
|
|
/* 2.2.1.21 CCategSpec */
|
|
offset = parse_CCategSpec(tvb, pinfo, offset, tree, pad_tree, "Spec");
|
|
|
|
/* 2.2.1.24 CAggregSet */
|
|
offset = parse_CAggregSet(tvb, offset, tree, pad_tree, "AggregSet");
|
|
|
|
/* 2.2.1.26 CSortAggregSet */
|
|
offset = parse_CSortAggregSet(tvb, offset, tree, pad_tree, "SortAggregSet");
|
|
|
|
/* 2.2.1.28 CInGroupSortAggregSets */
|
|
offset = parse_CInGroupSortAggregSets(tvb, pinfo, offset, tree, pad_tree, "InGroupSortAggregSets");
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_categorizationspec_cmaxres, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
static int * const mswsp_bool_options[] = {
|
|
&hf_mswsp_bool_options_cursor,
|
|
&hf_mswsp_bool_options_async,
|
|
&hf_mswsp_bool_options_firstrows,
|
|
&hf_mswsp_bool_options_holdrows,
|
|
&hf_mswsp_bool_options_chaptered,
|
|
&hf_mswsp_bool_options_useci,
|
|
&hf_mswsp_bool_options_defertrim,
|
|
&hf_mswsp_bool_options_rowsetevents,
|
|
&hf_mswsp_bool_options_dontcomputeexpensive,
|
|
NULL
|
|
};
|
|
|
|
int parse_CRowsetProperties(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree _U_, const char *fmt, ...)
|
|
{
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
const char *txt;
|
|
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
|
|
va_end(ap);
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CRowsetProperties, &item, txt);
|
|
|
|
proto_tree_add_bitmask_with_flags(tree, tvb, offset,
|
|
hf_mswsp_bool_options, ett_mswsp_bool_options, mswsp_bool_options, ENC_LITTLE_ENDIAN, BMT_NO_APPEND);
|
|
|
|
offset += 4;
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_crowsetprops_ulmaxopenrows, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_crowsetprops_ulmemusage, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_crowsetprops_cmaxresults, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_crowsetprops_ccmdtimeout, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
int parse_CPidMapper(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...)
|
|
{
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
va_list ap;
|
|
guint32 count, i;
|
|
const char *txt;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CPidMapper, &item, txt);
|
|
|
|
count = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_cpidmapper_count, tvb, offset, 4, count);
|
|
offset += 4;
|
|
|
|
offset = parse_padding(tvb, offset, 8, pad_tree, "CPidMapper_PropSpec");
|
|
|
|
for (i=0; i<count; i++) {
|
|
struct CFullPropSpec v;
|
|
ZERO_STRUCT(v);
|
|
/*at begin or end of loop???*/
|
|
offset = parse_padding(tvb, offset, 4, pad_tree,
|
|
"CPidMapper_PropSpec[%u]", i);
|
|
offset = parse_CFullPropSpec(tvb, offset, tree, pad_tree, &v, "PropSpec[%u]", i);
|
|
}
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
/* 2.2.1.35 CColumnGroup */
|
|
int parse_CColumnGroup(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree _U_, const char *fmt, ...)
|
|
{
|
|
proto_tree *tree;
|
|
proto_item *item, *ti;
|
|
va_list ap;
|
|
const char *txt;
|
|
guint32 count, groupPid, i;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CColumnGroup, &item, txt);
|
|
|
|
count = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_ccolumngroup_count, tvb, offset, 4, count);
|
|
offset += 4;
|
|
|
|
groupPid = tvb_get_letohl(tvb, offset);
|
|
ti = proto_tree_add_uint(tree, hf_mswsp_ccolumngroup_grouppid, tvb, offset, 4, groupPid);
|
|
if ((0xFFFF0000 & groupPid) == 0x7FFF0000) {
|
|
proto_item_append_text(ti, " Idx: %u", groupPid & 0xFFFF);
|
|
} else {
|
|
proto_item_append_text(ti, "<Invalid>");
|
|
}
|
|
offset += 4;
|
|
|
|
for (i=0; i<count; i++) {
|
|
/* 2.2.1.36 SProperty */
|
|
guint32 pid, weight;
|
|
pid = tvb_get_letohl(tvb, offset);
|
|
weight = tvb_get_letohl(tvb, offset + 4);
|
|
proto_tree_add_uint_format(tree, hf_mswsp_ccolumngroup_pid, tvb, offset, 8, pid, "Props[%u]: pid: %u weight: %u", i, pid, weight);
|
|
offset += 8;
|
|
}
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
/* 2.2.1.34 CColumnGroupArray */
|
|
int parse_CColumnGroupArray(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...)
|
|
{
|
|
proto_tree *tree;
|
|
proto_item *item;
|
|
va_list ap;
|
|
const char *txt;
|
|
|
|
guint32 count, i;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CColumnGroupArray, &item, txt);
|
|
|
|
count = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_ccolumngrouparray_count, tvb, offset, 4, count);
|
|
offset += 4;
|
|
|
|
for (i=0; i<count; i++) {
|
|
offset = parse_padding(tvb, offset, 4, pad_tree, "aGroupArray[%u]", i);
|
|
offset = parse_CColumnGroup(tvb, offset, tree, pad_tree, "aGroupArray[%u]", i);
|
|
}
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
static int parse_UInt32Array(tvbuff_t *tvb, int offset, proto_tree *parent_tree, guint32 count, const char *item_name, const char *fmt, ...)
|
|
{
|
|
guint32 v, i;
|
|
proto_tree *tree;
|
|
proto_item *item;
|
|
const char *txt;
|
|
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_Array, &item, txt);
|
|
|
|
for (i=0; i<count; i++) {
|
|
v = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint_format(tree, hf_mswsp_int32array_value, tvb, offset, 4, v, "%s[%u] = %u", item_name,i, v);
|
|
offset += 4;
|
|
}
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
/* 2.2.1.40 CRowSeekNext */
|
|
static int parse_CRowSeekNext(tvbuff_t *tvb, int offset, proto_tree *parent_tree, const char *fmt, ...)
|
|
{
|
|
proto_tree *tree;
|
|
proto_item *item;
|
|
const char *txt;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CRowsSeekNext, &item, txt);
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_crowseeknext_cskip, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
|
|
/* 2.2.1.37 CRowSeekAt */
|
|
static int parse_CRowSeekAt(tvbuff_t *tvb, int offset, proto_tree *parent_tree, const char *fmt, ...)
|
|
{
|
|
proto_tree *tree;
|
|
proto_item *item;
|
|
va_list ap;
|
|
const char *txt;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CRowsSeekAt, &item, txt);
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_crowseekat_bmkoffset, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_crowseekat_skip, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_crowseekat_hregion, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
/* 2.2.1.38 CRowSeekAtRatio */
|
|
static int parse_CRowSeekAtRatio(tvbuff_t *tvb, int offset, proto_tree *parent_tree, const char *fmt, ...)
|
|
{
|
|
proto_tree *tree;
|
|
proto_item *item;
|
|
va_list ap;
|
|
const char *txt;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CRowsSeekAtRatio, &item, txt);
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_crowseekatratio_ulnumerator, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_crowseekatratio_uldenominator, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_crowseekatratio_hregion, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
/* 2.2.1.39 CRowSeekByBookmark */
|
|
static int parse_CRowSeekByBookmark(tvbuff_t *tvb, int offset, proto_tree *parent_tree, const char *fmt, ...)
|
|
{
|
|
proto_tree *tree;
|
|
proto_item *item;
|
|
guint32 num;
|
|
const char *txt;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CRowsSeekByBookmark, &item, txt);
|
|
|
|
num = tvb_get_letohl(tvb,offset);
|
|
proto_tree_add_item(tree, hf_mswsp_crowseekbybookmark_cbookmarks, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
offset = parse_UInt32Array(tvb, offset, tree, num, "abookmark", "abookmarks");
|
|
|
|
num = tvb_get_letohl(tvb,offset);
|
|
proto_tree_add_item(tree, hf_mswsp_crowseekbybookmark_maxret, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
offset = parse_UInt32Array(tvb, offset, tree, num, "ascret", "ascret");
|
|
|
|
proto_item_set_end(item, tvb, offset);
|
|
return offset;
|
|
}
|
|
|
|
static int get_fixed_vtype_dataize(enum vType vtype)
|
|
{
|
|
struct vtype_data *vt_type = vType_get_type(vtype);
|
|
if (vt_type) {
|
|
return vt_type->size;
|
|
}
|
|
return -1;
|
|
}
|
|
|
|
static int parse_CRowVariantArrayInfo(tvbuff_t *tvb, int offset, proto_tree *tree, gboolean is_64bit, struct CRowVariant *variant)
|
|
{
|
|
if (is_64bit) {
|
|
variant->content.array_vector.i64.count =
|
|
tvb_get_letoh64(tvb, offset);
|
|
proto_tree_add_uint64(tree, hf_mswsp_crowvariantinfo_count64, tvb, offset, 8, variant->content.array_vector.i64.count);
|
|
offset += 8;
|
|
variant->content.array_vector.i64.array_address = tvb_get_letoh64(tvb, offset);
|
|
proto_tree_add_uint64(tree, hf_mswsp_arrayvector_address64, tvb, offset, 8, variant->content.array_vector.i64.array_address);
|
|
offset += 8;
|
|
|
|
} else {
|
|
variant->content.array_vector.i32.count =
|
|
tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_crowvariantinfo_count32, tvb, offset, 4, variant->content.array_vector.i32.count );
|
|
offset += 4;
|
|
variant->content.array_vector.i32.array_address = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_arrayvector_address32, tvb, offset, 4, variant->content.array_vector.i32.array_address);
|
|
offset += 4;
|
|
}
|
|
return offset;
|
|
}
|
|
|
|
static int parse_VariantColVector(tvbuff_t *tvb, int offset, proto_tree *tree, guint64 base_address, gboolean is_64bit, struct CRowVariant *variant, struct vtype_data *vt_list_type)
|
|
{
|
|
guint32 i = 0;
|
|
guint64 count = 0;
|
|
int buf_offset = 0;
|
|
proto_tree *sub_tree;
|
|
wmem_strbuf_t *strbuf;
|
|
|
|
offset = parse_CRowVariantArrayInfo(tvb, offset, tree, is_64bit, variant);
|
|
if (is_64bit) {
|
|
buf_offset =
|
|
(int)(variant->content.array_vector.i64.array_address - base_address);
|
|
count = variant->content.array_vector.i64.count;
|
|
} else {
|
|
buf_offset =
|
|
(int)(variant->content.array_vector.i32.array_address - base_address);
|
|
count = variant->content.array_vector.i32.count;
|
|
}
|
|
sub_tree = proto_tree_add_subtree(tree, tvb, buf_offset, 0, ett_CRowVariant_Vector, NULL, "values");
|
|
for (i = 0; i < count; i++) {
|
|
guint64 item_address = 0;
|
|
gint address_of_address = 0;
|
|
int size;
|
|
union vt_single value;
|
|
int len;
|
|
if (is_64bit) {
|
|
size = 8;
|
|
address_of_address = buf_offset + (i * size);
|
|
item_address = tvb_get_letoh64(tvb, address_of_address);
|
|
proto_tree_add_uint64_format(sub_tree, hf_mswsp_rowvariant_item_address64, tvb, address_of_address, size, item_address, "address[%d] 0x%" PRIx64, i, item_address);
|
|
} else {
|
|
size = 4;
|
|
item_address = tvb_get_letohl(tvb, buf_offset + (i * size));
|
|
proto_tree_add_uint_format(sub_tree, hf_mswsp_rowvariant_item_address32, tvb, address_of_address, size, (guint32)item_address, "address[%d] 0x%x", i, (guint32)item_address);
|
|
}
|
|
strbuf = wmem_strbuf_new(wmem_packet_scope(), "");
|
|
if (vt_list_type->size == -1) {
|
|
/* dynamic type */
|
|
DISSECTOR_ASSERT_HINT(vt_list_type->tvb_get_value_only != 0,
|
|
"appears this is a vector of dynamic types that we don't know yet how to handle, please submit a bug with trace");
|
|
len = vt_list_type->tvb_get_value_only(tvb, (int)(item_address - base_address), 0, &value);
|
|
vt_list_type->strbuf_append(strbuf, &value);
|
|
} else {
|
|
/*
|
|
* assume non dynamic size types are stored directly.
|
|
* Note: not test as not seen in the wild.
|
|
*/
|
|
len = vt_list_type->size;
|
|
DISSECTOR_ASSERT_HINT(vt_list_type->tvb_get != 0,
|
|
"appears this is a vector of fixed types that we don't know yet how to handle, please submit a bug with trace");
|
|
|
|
vt_list_type->tvb_get(tvb, (int)(item_address - base_address), &value);
|
|
vt_list_type->strbuf_append(strbuf, &value);
|
|
}
|
|
proto_tree_add_string(sub_tree, hf_mswsp_rowvariant_item_value, tvb, (gint)(item_address - base_address), len, wmem_strbuf_get_str(strbuf));
|
|
}
|
|
return offset;
|
|
}
|
|
|
|
static int parse_VariantCol(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *parent_tree, guint64 base_address, guint32 length _U_, gboolean is_64bit, struct CRowVariant *variant, const char *fmt, ...)
|
|
{
|
|
proto_tree *tree;
|
|
proto_item *item, *ti_type;
|
|
|
|
va_list ap;
|
|
struct vtype_data *vt_type;
|
|
const char *modifier = "", *txt;
|
|
int size;
|
|
guint16 vtype_high;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CRowVariant, &item, txt);
|
|
|
|
variant->vtype = tvb_get_letohs(tvb, offset);
|
|
vt_type = vType_get_type((enum vType)variant->vtype);
|
|
vtype_high = (variant->vtype & 0xFF00);
|
|
if (vtype_high) {
|
|
if (vtype_high == VT_VECTOR) {
|
|
modifier = "|VT_VECTOR";
|
|
} else if (vtype_high == VT_ARRAY) {
|
|
modifier = "|VT_ARRAY";
|
|
} else {
|
|
modifier = "|Unknown, possibly error";
|
|
}
|
|
}
|
|
|
|
if (vt_type == NULL) {
|
|
/*
|
|
* Not a valid type.
|
|
*/
|
|
ti_type = proto_tree_add_string(tree, hf_mswsp_ctablecolumn_vtype, tvb, offset, 4, "Unknown variant column type");
|
|
expert_add_info(pinfo, ti_type, &ei_mswsp_invalid_variant_type);
|
|
|
|
THROW_FORMATTED(ReportedBoundsError, "Unknown variant column type%s", modifier);
|
|
return offset;
|
|
}
|
|
proto_tree_add_string_format_value(tree, hf_mswsp_rowvariant_vtype, tvb, offset, 2, vt_type->str, "%s%s", vt_type->str, modifier);
|
|
offset += 2;
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_rowvariant_reserved1, tvb, offset, 2, ENC_LITTLE_ENDIAN);
|
|
variant->reserved1 = tvb_get_letohs(tvb, offset);
|
|
|
|
offset += 2;
|
|
proto_tree_add_item(tree, hf_mswsp_rowvariant_reserved2, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
variant->reserved2 = tvb_get_letohl(tvb, offset);
|
|
offset += 4;
|
|
|
|
size = get_fixed_vtype_dataize((enum vType)(variant->vtype & 0x00FF));
|
|
|
|
if (vtype_high == VT_VECTOR || vtype_high == VT_ARRAY) {
|
|
offset = parse_VariantColVector(tvb, offset, tree, base_address,
|
|
is_64bit, variant, vt_type);
|
|
} else {
|
|
wmem_strbuf_t *strbuf = wmem_strbuf_new(wmem_packet_scope(), "");
|
|
if (size != -1) {
|
|
/* single fixed size value type */
|
|
const char* desc = vt_type->str;
|
|
|
|
DISSECTOR_ASSERT_HINT(vt_type->tvb_get != 0,
|
|
"appears fixed type that we don't know yet how to handle, please submit a bug with trace");
|
|
vt_type->tvb_get(tvb, offset, &variant->content);
|
|
vt_type->strbuf_append(strbuf, &variant->content);
|
|
proto_tree_add_string_format_value(tree, hf_mswsp_rowvariant_item_value, tvb, offset, size, desc, "%s: %s", desc, wmem_strbuf_get_str(strbuf));
|
|
} else {
|
|
gint64 value_address;
|
|
int buf_offset = offset;
|
|
int len;
|
|
union vt_single non_fixed_size_val;
|
|
DISSECTOR_ASSERT_HINT(vt_type->tvb_get_value_only != 0, "appears this is a dynamic type that we don't know yet how to handle, please submit a bug with network trace");
|
|
if (is_64bit) {
|
|
variant->content.hyperw = tvb_get_letoh64(tvb, offset);
|
|
offset += 8;
|
|
value_address = variant->content.hyperw;
|
|
proto_tree_add_uint64(tree, hf_mswsp_rowvariant_item_address64, tvb, buf_offset, 8, value_address);
|
|
} else {
|
|
variant->content.longw = tvb_get_letohl(tvb, offset);
|
|
offset += 4;
|
|
value_address = variant->content.longw;
|
|
proto_tree_add_uint(tree, hf_mswsp_rowvariant_item_address32, tvb, buf_offset, 4, (guint32)value_address);
|
|
}
|
|
|
|
len = vt_type->tvb_get_value_only(tvb, (int)(value_address - base_address), 0, &non_fixed_size_val);
|
|
vt_type->strbuf_append(strbuf, &non_fixed_size_val);
|
|
proto_tree_add_string(tree, hf_mswsp_rowvariant_item_value, tvb, (gint)(value_address - base_address), len, wmem_strbuf_get_str(strbuf));
|
|
}
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
static int parse_RowsBufferCol(tvbuff_t *tvb, packet_info *pinfo, int offset, guint32 row, guint32 col, struct CPMSetBindingsIn *bindingsin, struct rows_data *rowsin, gboolean b_is_64bit, proto_tree *parent_tree, const char *fmt, ...)
|
|
{
|
|
proto_tree *tree;
|
|
proto_item *item;
|
|
guint32 buf_start = offset;
|
|
guint32 buf_offset = buf_start + (row * bindingsin->brow);
|
|
struct CTableColumn *pcol = &bindingsin->acolumns[col];
|
|
|
|
static const value_string STATUS[] = {
|
|
{0, "StoreStatusOk"},
|
|
{1, "StoreStatusDeferred"},
|
|
{2, "StoreStatusNull"},
|
|
{0, NULL}
|
|
};
|
|
|
|
const char *txt;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_GetRowsColumn, &item, txt);
|
|
proto_item_append_text(item, " (%s)", pcol->name);
|
|
if (pcol->statusused) {
|
|
int tmp_offset = buf_offset + pcol->statusoffset;
|
|
proto_tree_add_string(tree, hf_mswsp_ctablecolumn_status, tvb, tmp_offset, 1, val_to_str(tvb_get_guint8(tvb, tmp_offset), STATUS, "(Invalid: 0x%x)"));
|
|
}
|
|
if (pcol->lengthused) {
|
|
int tmp_offset = buf_offset + pcol->lengthoffset;
|
|
proto_tree_add_item(tree, hf_mswsp_ctablecolumn_length, tvb, tmp_offset, 1, ENC_LITTLE_ENDIAN);
|
|
}
|
|
if (pcol->valueused) {
|
|
int tmp_offset = buf_offset + pcol->valueoffset;
|
|
struct CRowVariant variant;
|
|
guint32 len = pcol->valuesize;
|
|
guint64 base_address = rowsin->ulclientbase;/*( + rowsin->cbreserved;*/
|
|
ZERO_STRUCT(variant);
|
|
|
|
if (pcol->lengthused) {
|
|
len = tvb_get_letohs(tvb, buf_offset + pcol->lengthoffset) - pcol->valuesize;
|
|
}
|
|
if (pcol->vtype == VT_VARIANT) {
|
|
parse_VariantCol(tvb, pinfo, tmp_offset, tree, base_address, len, b_is_64bit, &variant, "CRowVariant");
|
|
}
|
|
}
|
|
return offset;
|
|
}
|
|
|
|
static int parse_RowsBuffer(tvbuff_t *tvb, packet_info *pinfo, int offset, guint32 num_rows, struct CPMSetBindingsIn *bindingsin, struct rows_data *rowsin, gboolean is64bit, proto_tree *parent_tree, const char *fmt, ...)
|
|
{
|
|
proto_tree *tree;
|
|
proto_item *item;
|
|
guint32 num;
|
|
const char *txt;
|
|
va_list ap;
|
|
|
|
va_start(ap, fmt);
|
|
txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap);
|
|
va_end(ap);
|
|
|
|
tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_GetRowsRow, &item, txt);
|
|
|
|
for (num = 0; num < num_rows; ++num) {
|
|
guint32 col;
|
|
proto_tree *row_tree;
|
|
row_tree = proto_tree_add_subtree_format(tree, tvb, offset, 0, ett_GetRowsRow, NULL, "Row[%d]", num);
|
|
for (col = 0; col < bindingsin->ccolumns; col++) {
|
|
parse_RowsBufferCol(tvb, pinfo, offset, num, col, bindingsin, rowsin, is64bit, row_tree, "Col[%d]", col);
|
|
}
|
|
}
|
|
return offset;
|
|
}
|
|
/* Code to actually dissect the packets */
|
|
|
|
static int dissect_CPMConnect(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *private_data)
|
|
{
|
|
proto_item *ti;
|
|
proto_tree *tree;
|
|
gint offset = 16;
|
|
guint len;
|
|
guint32 version;
|
|
struct message_data *data = NULL;
|
|
struct mswsp_ct *ct = NULL;
|
|
|
|
ti = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA);
|
|
tree = proto_item_add_subtree(ti, ett_mswsp_msg);
|
|
proto_item_set_text(ti, "CPMConnect%s", in ? "In" : "Out");
|
|
col_append_str(pinfo->cinfo, COL_INFO, "Connect");
|
|
|
|
ti = proto_tree_add_item_ret_uint(tree, hf_mswsp_msg_Connect_Version, tvb,
|
|
offset, 4, ENC_LITTLE_ENDIAN, &version);
|
|
|
|
ct = get_create_converstation_data(pinfo);
|
|
|
|
if (ct) {
|
|
data = find_or_create_message_data(ct, pinfo, 0xC8, in, private_data);
|
|
if (data) {
|
|
data->content.version = version;
|
|
}
|
|
}
|
|
offset += 4;
|
|
|
|
if (in) {
|
|
guint32 blob_size1_off, blob_size2_off;
|
|
proto_tree *pad_tree;
|
|
|
|
pad_tree = proto_tree_add_subtree(tree, tvb, offset, 0, ett_mswsp_pad, &ti, "Padding");
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_msg_ConnectIn_ClientIsRemote, tvb,
|
|
offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
/* _cbBlob1 */
|
|
blob_size1_off = offset;
|
|
offset += 4;
|
|
|
|
offset = parse_padding(tvb, offset, 8, pad_tree, "_paddingcbBlob2");
|
|
|
|
/* _cbBlob2 */
|
|
blob_size2_off = offset;
|
|
offset += 4;
|
|
|
|
offset = parse_padding(tvb, offset, 16, pad_tree, "_padding");
|
|
|
|
len = tvb_unicode_strsize(tvb, offset);
|
|
proto_tree_add_item(tree, hf_mswsp_msg_ConnectIn_MachineName, tvb,
|
|
offset, len, ENC_LITTLE_ENDIAN | ENC_UCS_2);
|
|
offset += len;
|
|
|
|
len = tvb_unicode_strsize(tvb, offset);
|
|
ti = proto_tree_add_item(tree, hf_mswsp_msg_ConnectIn_UserName, tvb,
|
|
offset, len, ENC_LITTLE_ENDIAN | ENC_UCS_2);
|
|
offset += len;
|
|
|
|
offset = parse_padding(tvb, offset, 8, pad_tree, "_paddingcPropSets");
|
|
|
|
offset = parse_PropertySetArray(tvb, pinfo, offset, blob_size1_off, tree, pad_tree, "PropSets");
|
|
|
|
offset = parse_padding(tvb, offset, 8, pad_tree, "paddingExtPropset");
|
|
|
|
offset = parse_PropertySetArray(tvb, pinfo, offset, blob_size2_off, tree, pad_tree, "ExtPropset");
|
|
|
|
offset = parse_padding(tvb, offset, 8, pad_tree, "???");
|
|
|
|
DISSECTOR_ASSERT(offset == (int)tvb_reported_length(tvb));
|
|
|
|
/* make "Padding" the last item */
|
|
proto_tree_move_item(tree, ti, proto_tree_get_parent(pad_tree));
|
|
} else {
|
|
|
|
}
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
static int dissect_CPMDisconnect(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree _U_, gboolean in _U_, void *data _U_)
|
|
{
|
|
col_append_str(pinfo->cinfo, COL_INFO, "Disconnect");
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
static int dissect_CPMCreateQuery(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_)
|
|
{
|
|
gint offset = 16;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
|
|
item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA);
|
|
tree = proto_item_add_subtree(item, ett_mswsp_msg);
|
|
|
|
proto_item_set_text(item, "CPMCreateQuery%s", in ? "In" : "Out");
|
|
col_append_str(pinfo->cinfo, COL_INFO, "CreateQuery");
|
|
|
|
if (in) {
|
|
proto_item *ti;
|
|
proto_tree *pad_tree = proto_tree_add_subtree(tree, tvb, offset, 0, ett_mswsp_pad, &ti, "Padding");
|
|
guint8 CColumnSetPresent, CRestrictionPresent, CSortSetPresent, CCategorizationSetPresent;
|
|
guint32 size = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_msg_cpmcreatequery_size, tvb, offset, 4, size);
|
|
offset += 4;
|
|
|
|
CColumnSetPresent = tvb_get_guint8(tvb, offset);
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcreatequery_ccolumnsetpresent, tvb, offset, 1, ENC_LITTLE_ENDIAN);
|
|
offset += 1;
|
|
|
|
if (CColumnSetPresent) {
|
|
offset = parse_padding(tvb, offset, 4, pad_tree, "paddingCColumnSetPresent");
|
|
offset = parse_padding(tvb, offset, 4, pad_tree, "paddingCColumnSetPresent");
|
|
offset = parse_CColumnSet(tvb, offset, tree, "CColumnSet");
|
|
}
|
|
|
|
CRestrictionPresent = tvb_get_guint8(tvb, offset);
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcreatequery_crestrictionpresent, tvb, offset, 1, ENC_LITTLE_ENDIAN);
|
|
offset += 1;
|
|
|
|
if (CRestrictionPresent) {
|
|
offset = parse_CRestrictionArray(tvb, pinfo, offset, tree, pad_tree, "RestrictionArray");
|
|
}
|
|
|
|
CSortSetPresent = tvb_get_guint8(tvb, offset);
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcreatequery_csortpresent, tvb, offset, 1, ENC_LITTLE_ENDIAN);
|
|
offset += 1;
|
|
|
|
if (CSortSetPresent) {
|
|
offset = parse_padding(tvb, offset, 4, tree, "paddingCSortSetPresent");
|
|
offset = parse_CInGroupSortAggregSets(tvb, pinfo, offset, tree, pad_tree, "GroupSortAggregSets");
|
|
|
|
}
|
|
|
|
CCategorizationSetPresent = tvb_get_guint8(tvb, offset);
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcreatequery_ccategpresent, tvb, offset, 1, ENC_LITTLE_ENDIAN);
|
|
offset += 1;
|
|
|
|
if (CCategorizationSetPresent) {
|
|
guint32 count, i;
|
|
offset = parse_padding(tvb, offset, 4, pad_tree, "paddingCCategorizationSetPresent");
|
|
/* 2.2.1.19 CCategorizationSet */
|
|
count = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_msg_cpmcreatequery_ccateg_count, tvb, offset, 4, count);
|
|
offset += 4;
|
|
for (i=0; i<count; i++) {
|
|
offset = parse_CCategorizationSpec(tvb, pinfo, offset, tree, pad_tree, "categories[%u]", i);
|
|
}
|
|
}
|
|
|
|
offset = parse_padding(tvb, offset, 4, tree, "XXXX");
|
|
|
|
offset = parse_CRowsetProperties(tvb, offset, tree, pad_tree, "RowSetProperties");
|
|
|
|
offset = parse_CPidMapper(tvb, offset, tree, pad_tree, "PidMapper");
|
|
|
|
parse_CColumnGroupArray(tvb, offset, tree, pad_tree, "GroupArray");
|
|
} else { /* out */
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcreatequery_trueseq, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcreatequery_workid, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
/*
|
|
* #FIXME Cursors is an array of uint32 where the size of the array is
|
|
* determined by categories in the CategorizationSet in the CPMQuery
|
|
* request message.
|
|
*/
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcreatequery_cursors, tvb, offset, -1, ENC_NA);
|
|
}
|
|
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
static int dissect_CPMFreeCursor(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree _U_, gboolean in _U_, void *data _U_)
|
|
{
|
|
col_append_str(pinfo->cinfo, COL_INFO, "FreeCursor");
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
static int dissect_CPMGetRows(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *private_data)
|
|
{
|
|
struct mswsp_ct *ct = NULL;
|
|
gint offset = 16;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
proto_tree *seek_tree;
|
|
guint32 eType = 0;
|
|
|
|
item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, in ? 0 : -1, ENC_NA);
|
|
tree = proto_item_add_subtree(item, ett_mswsp_msg);
|
|
|
|
proto_item_set_text(item, "GetRows%s", in ? "In" : "Out");
|
|
col_append_str(pinfo->cinfo, COL_INFO, "GetRows");
|
|
|
|
ct = get_create_converstation_data(pinfo);
|
|
if (in) {
|
|
/* 2.2.3.11 */
|
|
struct message_data *data = NULL;
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_hcursor, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_rowstotransfer, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_rowwidth, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_cbseek, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
data = find_or_create_message_data(ct, pinfo, 0xCC, in, private_data);
|
|
if (data) {
|
|
data->content.rowsin.cbreserved = tvb_get_letohl(tvb, offset);
|
|
}
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_cbreserved, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_cbreadbuffer, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
if (data) {
|
|
data->content.rowsin.ulclientbase = tvb_get_letohl(tvb, offset);
|
|
}
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_ulclientbase, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_fbwdfetch, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
eType = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_etype, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_chapt, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
seek_tree = proto_tree_add_subtree(tree, tvb, offset, 0, ett_SeekDescription, NULL, "SeekDescription");
|
|
switch (eType) {
|
|
case 0: /* eRowSeekNone */
|
|
break;
|
|
case 1: /* eRowSeekNext */
|
|
parse_CRowSeekNext(tvb, offset, seek_tree, "CRowSeekNext");
|
|
break;
|
|
case 2: /* eRowSeekAt */
|
|
parse_CRowSeekAt(tvb, offset, seek_tree, "CRowSeekAt");
|
|
|
|
break;
|
|
case 3: /* eRowSeekAtRatio */
|
|
parse_CRowSeekAtRatio(tvb, offset, seek_tree, "CRowSeekAtRatio");
|
|
break;
|
|
case 4: /* eRowSeekByBookmark */
|
|
parse_CRowSeekByBookmark(tvb, offset, seek_tree, "CRowSeekByRatio");
|
|
break;
|
|
default: /*error*/
|
|
break;
|
|
}
|
|
} else {
|
|
/* 2.2.3.12 */
|
|
/*
|
|
* GetRows response needs information from GetRow & SetBindings
|
|
* requests
|
|
*/
|
|
/* find the preceeding SetBinding data */
|
|
guint32 num_rows = 0;
|
|
proto_item *ti;
|
|
proto_tree *pad_tree = proto_tree_add_subtree(tree, tvb, offset, 0, ett_mswsp_pad, &ti, "Padding");
|
|
struct CPMSetBindingsIn *bindingsin = find_binding_msg_data(ct, pinfo,
|
|
private_data);
|
|
struct rows_data *rowsin = find_rowsin_msg_data(ct, pinfo, private_data);
|
|
gboolean b_64bit_mode = FALSE;
|
|
gboolean b_has_arch = is_64bit_mode(ct, pinfo, &b_64bit_mode, private_data);
|
|
num_rows = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_crowsreturned, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
eType = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_etype, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_chapt, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
seek_tree = proto_tree_add_subtree(tree, tvb, offset, 0, ett_SeekDescription, NULL, "SeekDescription");
|
|
switch (eType) {
|
|
case 0: /* eRowSeekNone */
|
|
break;
|
|
case 1: /* eRowSeekNext */
|
|
parse_CRowSeekNext(tvb, offset, seek_tree, "CRowSeekNext");
|
|
break;
|
|
case 2: /* eRowSeekAt */
|
|
parse_CRowSeekAt(tvb, offset, seek_tree, "CRowSeekAt");
|
|
|
|
break;
|
|
case 3: /* eRowSeekAtRatio */
|
|
parse_CRowSeekAtRatio(tvb, offset, seek_tree, "CRowSeekAtRatio");
|
|
break;
|
|
case 4: /* eRowSeekByBookmark */
|
|
parse_CRowSeekByBookmark(tvb, offset, seek_tree, "CRowSeekByRatio");
|
|
break;
|
|
default: /*error*/
|
|
break;
|
|
}
|
|
|
|
if (b_has_arch && bindingsin && rowsin) {
|
|
offset = parse_padding(tvb, offset, rowsin->cbreserved, pad_tree,
|
|
"paddingRows");
|
|
parse_RowsBuffer(tvb, pinfo, offset, num_rows, bindingsin, rowsin, b_64bit_mode, tree, "Rows");
|
|
} else {
|
|
gint nbytes = tvb_reported_length_remaining(tvb, offset);
|
|
proto_tree_add_expert_format(tree, pinfo, &ei_missing_msg_context, tvb, offset, nbytes, "Undissected %d bytes (due to missing preceding msg(s))", nbytes);
|
|
}
|
|
}
|
|
|
|
return tvb_reported_length(tvb);
|
|
|
|
}
|
|
|
|
static int dissect_CPMRatioFinished(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_)
|
|
{
|
|
gint offset = 16;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
col_append_str(pinfo->cinfo, COL_INFO, "RatioFinished");
|
|
item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA);
|
|
tree = proto_item_add_subtree(item, ett_mswsp_msg);
|
|
proto_item_set_text(item, "RationFinised%s", in ? "In" : "Out");
|
|
if (in) {
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmratiofinished_hcursor, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmratiofinished_fquick, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
} else {
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmratiofinished_ulnumerator, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmratiofinished_uldenominator, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmratiofinished_crows, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmratiofinished_fnewrows, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
}
|
|
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
static int dissect_CPMCompareBmk(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_)
|
|
{
|
|
gint offset = 16;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
|
|
item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, in ? 0 : -1, ENC_NA);
|
|
tree = proto_item_add_subtree(item, ett_mswsp_msg);
|
|
|
|
proto_item_set_text(item, "CompareBmk%s", in ? "In" : "Out");
|
|
col_append_str(pinfo->cinfo, COL_INFO, "CompareBmk");
|
|
if (in) {
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcomparebmk_hcursor, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcomparebmk_chapt, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcomparebmk_bmkfirst, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcomparebmk_bmksecond, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
} else {
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcomparebmk_dwcomparison, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
}
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
static int dissect_CPMGetApproximatePosition(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_)
|
|
{
|
|
gint offset = 16;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
|
|
item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, in ? 0 : -1, ENC_NA);
|
|
tree = proto_item_add_subtree(item, ett_mswsp_msg);
|
|
|
|
proto_item_set_text(item, "GetApproximatePosition%s", in ? "In" : "Out");
|
|
col_append_str(pinfo->cinfo, COL_INFO, "GetApproximatePosition");
|
|
if (in) {
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetapproxpos_hcursor, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetapproxpos_chapt, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetapproxpos_bmk, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
} else {
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetapproxpos_numerator, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetapproxpos_denominator, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
}
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
/* 2.2.3.10 */
|
|
static int dissect_CPMSetBindings(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *private_data)
|
|
{
|
|
gint offset = 16;
|
|
struct CPMSetBindingsIn request;
|
|
|
|
col_append_str(pinfo->cinfo, COL_INFO, "SetBindings");
|
|
if (in) {
|
|
|
|
struct mswsp_ct *ct = NULL;
|
|
struct message_data *data = NULL;
|
|
proto_item *ti;
|
|
proto_tree *tree, *pad_tree;
|
|
guint32 size, num, n;
|
|
gint64 column_size;
|
|
|
|
ti = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA);
|
|
tree = proto_item_add_subtree(ti, ett_mswsp_msg);
|
|
|
|
proto_item_set_text(ti, "SetBindingsIn");
|
|
|
|
pad_tree = proto_tree_add_subtree(tree, tvb, offset, 0, ett_mswsp_pad, &ti, "Padding");
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmsetbinding_hcursor, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
request.hcursor = tvb_get_letohl(tvb, offset);
|
|
offset += 4;
|
|
request.brow = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmsetbinding_cbrow, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
size = tvb_get_letohl(tvb, offset);
|
|
request.bbindingdesc = size;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmsetbinding_desc, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
request.dummy = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmsetbinding_dummy, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
num = tvb_get_letohl(tvb, offset);
|
|
request.ccolumns = num;
|
|
ti = proto_tree_add_item(tree, hf_mswsp_msg_cpmsetbinding_ccolumns, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmsetbinding_acolumns, tvb, offset, size-4, ENC_NA);
|
|
|
|
/* Sanity check size value */
|
|
column_size = num*MIN_CTABLECOL_SIZE;
|
|
if (num > MAX_CTABLECOL_SIZE || column_size > tvb_reported_length_remaining(tvb, offset))
|
|
{
|
|
expert_add_info(pinfo, ti, &ei_mswsp_msg_cpmsetbinding_ccolumns);
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
ct = get_create_converstation_data(pinfo);
|
|
|
|
request.acolumns = (struct CTableColumn*)wmem_alloc(wmem_file_scope(),
|
|
sizeof(struct CTableColumn) * num);
|
|
for (n=0; n<num; n++) {
|
|
offset = parse_padding(tvb, offset, 4, pad_tree, "padding_aColumns[%u]", n);
|
|
offset = parse_CTableColumn(tvb, pinfo, offset, tree, pad_tree, &request.acolumns[n],"aColumns[%u]", n);
|
|
}
|
|
data = find_or_create_message_data(ct, pinfo,0xD0,in, private_data);
|
|
if (data) {
|
|
data->content.bindingsin = request;
|
|
}
|
|
|
|
} else { /* server only returns status with header */
|
|
}
|
|
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
static int dissect_CPMGetNotify(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree _U_, gboolean in _U_, void *data _U_)
|
|
{
|
|
col_append_str(pinfo->cinfo, COL_INFO, "GetNotify");
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
static int dissect_CPMSendNotifyOut(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in _U_, void *data _U_)
|
|
{
|
|
gint offset = 16;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
|
|
col_append_str(pinfo->cinfo, COL_INFO, "SendNotify");
|
|
item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA);
|
|
tree = proto_item_add_subtree(item, ett_mswsp_msg);
|
|
proto_item_set_text(item, "GetSendNotifyOut");
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmsendnotify_watchnotify, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
static int dissect_CPMGetQueryStatus(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_)
|
|
{
|
|
gint offset = 16;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
|
|
item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA);
|
|
tree = proto_item_add_subtree(item, ett_mswsp_msg);
|
|
|
|
proto_item_set_text(item, "GetQueryStatus%s", in ? "In" : "Out");
|
|
col_append_str(pinfo->cinfo, COL_INFO, "GetQueryStatus");
|
|
|
|
if (in) {
|
|
/* 2.2.3.7 */
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetquerystatus_hcursor, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
} else {
|
|
/* 2.2.3.7 */
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetquerystatus_qstatus, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
}
|
|
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
static int dissect_CPMCiState(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_)
|
|
{
|
|
gint offset = 16;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
|
|
col_append_str(pinfo->cinfo, COL_INFO, "CiState");
|
|
|
|
if (!in) {
|
|
item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA);
|
|
tree = proto_item_add_subtree(item, ett_mswsp_msg);
|
|
proto_item_set_text(item, "CiStateOut");
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_cbstruct, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_cwordlist, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_cpersistindex, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_cqueries, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_cfreshtest, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_cfreshtest, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_dwmergeprogress, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_estate, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_cfiltereddocs, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_ctotaldocs, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_cpendingscans, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_dwindexsize, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_cuniquekeys, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_csecqdocuments, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_dwpropcachesize, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
}
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
static int dissect_CPMFetchValue(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_)
|
|
{
|
|
gint offset = 16;
|
|
proto_item *item;
|
|
proto_tree *tree, *pad_tree;
|
|
col_append_str(pinfo->cinfo, COL_INFO, "FetchValue");
|
|
|
|
item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA);
|
|
tree = proto_tree_add_subtree_format(parent_tree, tvb, offset, 0, ett_mswsp_msg, &item, "FetchValue%s", in ? "In" : "Out");
|
|
pad_tree = proto_tree_add_subtree(tree, tvb, offset, 0, ett_mswsp_pad, NULL, "Padding");
|
|
if (in) {
|
|
struct CFullPropSpec prop;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmfetchvalue_wid, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmfetchvalue_cbsofar, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmfetchvalue_cbpropspec, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmfetchvalue_cbchunk, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
offset = parse_CFullPropSpec(tvb, offset, tree, pad_tree, &prop,
|
|
"PropSpec");
|
|
parse_padding(tvb, offset, 4, pad_tree,"_padding");
|
|
} else {
|
|
guint32 cbValue = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmfetchvalue_cbvalue, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmfetchvalue_fmoreexists, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmfetchvalue_fvalueexists, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmfetchvalue_vvalue, tvb, offset, cbValue, ENC_NA);
|
|
}
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
static int dissect_CPMGetQueryStatusEx(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_)
|
|
{
|
|
gint offset = 16;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
|
|
item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA);
|
|
tree = proto_item_add_subtree(item, ett_mswsp_msg);
|
|
|
|
proto_item_set_text(item, "GetQueryStatusEx%s", in ? "In" : "Out");
|
|
col_append_str(pinfo->cinfo, COL_INFO, "GetQueryStatusEx");
|
|
|
|
if (in) {
|
|
/* 2.2.3.8 */
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_hcursor, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_bmk, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
} else {
|
|
/* 2.2.3.9 */
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_qstatus, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_cfiltereddocs, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_cdocstofilter, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_dwratiodenom, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_dwrationumer, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_irowbmk, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_crowstotal, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_maxrank, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_cresultsfound, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_whereid, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
}
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
static int dissect_CPMRestartPosition(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_)
|
|
{
|
|
gint offset = 16;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
|
|
col_append_str(pinfo->cinfo, COL_INFO, "CPMRestartPosition");
|
|
|
|
if (in) {
|
|
item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA);
|
|
tree = proto_item_add_subtree(item, ett_mswsp_msg);
|
|
proto_item_set_text(item, "CPMRestartPosition");
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmrestartposition_hcursor, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmrestartposition_chapt, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
}
|
|
|
|
col_append_str(pinfo->cinfo, COL_INFO, "RestartPosition");
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
static int dissect_CPMSetCatState(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree _U_, gboolean in _U_, void *data _U_)
|
|
{
|
|
col_append_str(pinfo->cinfo, COL_INFO, "SetCatState");
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
static int dissect_CPMGetRowsetNotify(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_)
|
|
{
|
|
gint offset = 16;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
col_append_str(pinfo->cinfo, COL_INFO, "GetRowsetNotify");
|
|
if (!in) {
|
|
item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA);
|
|
tree = proto_item_add_subtree(item, ett_mswsp_msg);
|
|
proto_item_set_text(item, "GetRowsetNotifyOut");
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrowsetnotify_wid, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
|
|
/* moveevents */
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrowsetnotify_moreevents, tvb, offset, 1, ENC_LITTLE_ENDIAN);
|
|
/* eventType */
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrowsetnotify_eventtype, tvb, offset, 1, ENC_LITTLE_ENDIAN);
|
|
offset += 1;
|
|
|
|
/* rowSetItemState */
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrowsetnotify_rowsetitemstate, tvb, offset, 1, ENC_LITTLE_ENDIAN);
|
|
offset += 1;
|
|
|
|
/* changedItemState */
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrowsetnotify_changeditemstate, tvb, offset, 1, ENC_LITTLE_ENDIAN);
|
|
offset += 1;
|
|
|
|
/* rowSetEvent */
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrowsetnotify_rowsetevent, tvb, offset, 1, ENC_LITTLE_ENDIAN);
|
|
offset += 1;
|
|
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrowsetnotify_rowseteventdata1, tvb, offset, 8, ENC_LITTLE_ENDIAN);
|
|
offset += 8;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrowsetnotify_rowseteventdata2, tvb, offset, 8, ENC_LITTLE_ENDIAN);
|
|
/* it seems there is an extra unknown 8 bytes following */
|
|
}
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
static int dissect_CPMFindIndices(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_)
|
|
{
|
|
gint offset = 16;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
col_append_str(pinfo->cinfo, COL_INFO, "FindIndices");
|
|
item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA);
|
|
tree = proto_item_add_subtree(item, ett_mswsp_msg);
|
|
proto_item_set_text(item, "FindIndices%s", in ? "In" : "Out");
|
|
|
|
if (in) {
|
|
guint32 cWids;
|
|
guint32 cDepthPrev;
|
|
cWids = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_msg_cpmfindindices_cwids, tvb, offset, 4, cWids);
|
|
offset += 4;
|
|
cDepthPrev = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_msg_cpmfindindices_cdepthprev, tvb, offset, 4, cDepthPrev);
|
|
offset += 4;
|
|
offset = parse_uin32_array(tvb, offset, tree, cWids, "pwids");
|
|
parse_uin32_array(tvb, offset, tree, cDepthPrev, "prgiRowPrev");
|
|
} else {
|
|
guint32 cDepthNext;
|
|
cDepthNext = tvb_get_letohl(tvb, offset);
|
|
proto_tree_add_uint(tree, hf_mswsp_msg_cpmfindindices_cdepthnext, tvb, offset, 4, cDepthNext);
|
|
offset += 4;
|
|
parse_uin32_array(tvb, offset, tree, cDepthNext, "prgiRowNext");
|
|
}
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
static int dissect_CPMSetScopePrioritization(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_)
|
|
{
|
|
gint offset = 16;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
|
|
col_append_str(pinfo->cinfo, COL_INFO, "SetScopePrioritization");
|
|
|
|
if (in) {
|
|
item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA);
|
|
tree = proto_item_add_subtree(item, ett_mswsp_msg);
|
|
proto_item_set_text(item, "SetScopePrioritizationIn");
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmsetscopeprioritization_priority, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmsetscopeprioritization_eventfreq, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
}
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
static int dissect_CPMGetScopeStatistics(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_)
|
|
{
|
|
|
|
gint offset = 16;
|
|
proto_item *item;
|
|
proto_tree *tree;
|
|
|
|
item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, in ? 0 : -1, ENC_NA);
|
|
tree = proto_item_add_subtree(item, ett_mswsp_msg);
|
|
|
|
proto_item_set_text(item, "GetScopeStatistics%s", in ? "In" : "Out");
|
|
col_append_str(pinfo->cinfo, COL_INFO, "GetScopeStatistics");
|
|
|
|
if (in) {
|
|
/* 2.2.3.33 */
|
|
} else {
|
|
/* 2.2.3.34 */
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmsetscopestatisics_dwindexitems, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmsetscopestatisics_dwoutstandingadds, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
offset += 4;
|
|
proto_tree_add_item(tree, hf_mswsp_msg_cpmsetscopestatisics_dwoutstandingmodifies, tvb, offset, 4, ENC_LITTLE_ENDIAN);
|
|
}
|
|
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
|
|
static const value_string msg_ids[] = {
|
|
{0x000000C8, "CPMConnect"}, /* In/Out */
|
|
{0x000000C9, "CPMDisconnect"},
|
|
{0x000000CA, "CPMCreateQuery"}, /* In/Out */
|
|
{0x000000CB, "CPMFreeCursor"}, /* In/Out */
|
|
{0x000000CC, "CPMGetRows"}, /* In/Out */
|
|
{0x000000CD, "CPMRatioFinished"}, /* In/Out */
|
|
{0x000000CE, "CPMCompareBmk"}, /* In/Out */
|
|
{0x000000CF, "CPMGetApproximatePosition"}, /* In/Out */
|
|
{0x000000D0, "CPMSetBindingsIn"},
|
|
{0x000000D1, "CPMGetNotify"},
|
|
{0x000000D2, "CPMSendNotifyOut"},
|
|
{0x000000D7, "CPMGetQueryStatusIn"}, /* In/Out */
|
|
{0x000000D9, "CPMCiStateInOut"},
|
|
{0x000000E4, "CPMFetchValue"}, /* In/Out */
|
|
{0x000000E7, "CPMGetQueryStatusEx"}, /* In/Out */
|
|
{0x000000E8, "CPMRestartPositionIn"},
|
|
{0x000000EC, "CPMSetCatStateIn"}, /* (not supported) */
|
|
{0x000000F1, "CPMGetRowsetNotify"}, /* In/Out */
|
|
{0x000000F2, "CPMFindIndices"}, /* In/Out */
|
|
{0x000000F3, "CPMSetScopePrioritization"}, /* In/Out */
|
|
{0x000000F4, "CPMGetScopeStatistics"}, /* In/Out */
|
|
{0, NULL}
|
|
};
|
|
|
|
|
|
static int
|
|
dissect_mswsp(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, gboolean in, void *data)
|
|
{
|
|
proto_tree *mswsp_tree = NULL;
|
|
proto_tree *hdr_tree;
|
|
proto_item *ti, *hti;
|
|
guint32 msg;
|
|
guint32 status;
|
|
|
|
|
|
if (tvb_reported_length(tvb) < 16) {
|
|
return 0;
|
|
}
|
|
|
|
/* col_set_str(pinfo->cinfo, COL_PROTOCOL, "MS-WSP"); */
|
|
col_append_str(pinfo->cinfo, COL_PROTOCOL, " WSP");
|
|
/* col_clear(pinfo->cinfo, COL_INFO); */
|
|
|
|
col_set_str(pinfo->cinfo, COL_INFO, "WSP ");
|
|
col_append_str(pinfo->cinfo, COL_INFO, in ? "Request: " : "Response: ");
|
|
|
|
ti = proto_tree_add_item(tree, proto_mswsp, tvb, 0, -1, ENC_NA);
|
|
mswsp_tree = proto_item_add_subtree(ti, ett_mswsp);
|
|
|
|
hti = proto_tree_add_item(mswsp_tree, hf_mswsp_hdr, tvb, 0, 16, ENC_NA);
|
|
hdr_tree = proto_item_add_subtree(hti, ett_mswsp_hdr);
|
|
|
|
proto_tree_add_item_ret_uint(hdr_tree, hf_mswsp_hdr_msg, tvb,
|
|
0, 4, ENC_LITTLE_ENDIAN, &msg);
|
|
proto_item_append_text(hti, " %s", val_to_str(msg, VALS(msg_ids),
|
|
"(Unknown: 0x%x)"));
|
|
|
|
proto_tree_add_item_ret_uint(hdr_tree, hf_mswsp_hdr_status, tvb,
|
|
4, 4, ENC_LITTLE_ENDIAN, &status);
|
|
if (!in || status != 0) {
|
|
proto_item_append_text(hti, " %s",
|
|
val_to_str(status, VALS(dcom_hresult_vals),
|
|
"(Unknown: 0x%x)"));
|
|
}
|
|
|
|
proto_tree_add_checksum(hdr_tree, tvb, 8, hf_mswsp_hdr_checksum, -1, NULL, pinfo, 0, ENC_LITTLE_ENDIAN, PROTO_CHECKSUM_NO_FLAGS);
|
|
/* todo: validate checksum */
|
|
|
|
proto_tree_add_item(hdr_tree, hf_mswsp_hdr_reserved, tvb,
|
|
12, 4, ENC_LITTLE_ENDIAN);
|
|
|
|
|
|
switch(msg) {
|
|
case 0xC8:
|
|
dissect_CPMConnect(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xC9:
|
|
dissect_CPMDisconnect(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xCA:
|
|
dissect_CPMCreateQuery(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xCB:
|
|
dissect_CPMFreeCursor(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xCC:
|
|
dissect_CPMGetRows(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xCD:
|
|
dissect_CPMRatioFinished(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xCE:
|
|
dissect_CPMCompareBmk(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xCF:
|
|
dissect_CPMGetApproximatePosition(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xD0:
|
|
dissect_CPMSetBindings(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xD1:
|
|
dissect_CPMGetNotify(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xD2:
|
|
dissect_CPMSendNotifyOut(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xD7:
|
|
dissect_CPMGetQueryStatus(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xD9:
|
|
dissect_CPMCiState(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xE4:
|
|
dissect_CPMFetchValue(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xE7:
|
|
dissect_CPMGetQueryStatusEx(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xE8:
|
|
dissect_CPMRestartPosition(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xEC:
|
|
dissect_CPMSetCatState(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xF1:
|
|
dissect_CPMGetRowsetNotify(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xF2:
|
|
dissect_CPMFindIndices(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xF3:
|
|
dissect_CPMSetScopePrioritization(tvb, pinfo, tree, in, data);
|
|
break;
|
|
case 0xF4:
|
|
dissect_CPMGetScopeStatistics(tvb, pinfo, tree, in, data);
|
|
break;
|
|
default:
|
|
return 0;
|
|
}
|
|
|
|
/* Return the amount of data this dissector was able to dissect */
|
|
return tvb_reported_length(tvb);
|
|
}
|
|
|
|
|
|
void
|
|
proto_register_mswsp(void)
|
|
{
|
|
expert_module_t* expert_mswsp = NULL;
|
|
static hf_register_info hf[] = {
|
|
{
|
|
&hf_mswsp_hdr,
|
|
{
|
|
"Header", "mswsp.hdr",
|
|
FT_NONE, BASE_NONE, NULL, 0,
|
|
"Message header", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_hdr_msg,
|
|
{
|
|
"Msg id", "mswsp.hdr.id",
|
|
FT_UINT32, BASE_HEX, VALS(msg_ids), 0,
|
|
"Message id", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_hdr_status,
|
|
{
|
|
"Status", "mswsp.hdr.status",
|
|
FT_UINT32, BASE_HEX, VALS(dcom_hresult_vals), 0,
|
|
"Message Status", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_hdr_checksum,
|
|
{
|
|
"checksum", "mswsp.hdr.checksum",
|
|
FT_UINT32, BASE_HEX, NULL, 0,
|
|
"Message Checksum", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_hdr_reserved,
|
|
{
|
|
"Reserved", "mswsp.hdr.reserved",
|
|
FT_UINT32, BASE_HEX, NULL, 0,
|
|
"Reserved bytes", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg,
|
|
{
|
|
"msg", "mswsp.msg",
|
|
FT_NONE, BASE_NONE, NULL, 0,
|
|
"Message", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_Connect_Version,
|
|
{
|
|
"Version", "mswsp.Connect.version",
|
|
FT_UINT32, BASE_HEX, VALS(version_vals), 0,
|
|
"OS Version", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_ConnectIn_ClientIsRemote,
|
|
{
|
|
"Remote", "mswsp.ConnectIn.isRemote",
|
|
FT_BOOLEAN, BASE_HEX, NULL, 0,
|
|
"Client is remote",HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_ConnectIn_Blob1,
|
|
{
|
|
"Size", "mswsp.ConnectIn.propset.size",
|
|
FT_UINT32, BASE_DEC, NULL, 0,
|
|
"Size of PropSet fields",HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_ConnectIn_MachineName,
|
|
{
|
|
"Remote machine", "mswsp.ConnectIn.machine",
|
|
FT_STRINGZ, BASE_NONE, NULL, 0,
|
|
"Name of remote machine",HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_ConnectIn_UserName,
|
|
{
|
|
"User", "mswsp.ConnectIn.user",
|
|
FT_STRINGZ, BASE_NONE, NULL, 0,
|
|
"Name of remote user",HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_ConnectIn_PropSets_num,
|
|
{
|
|
"Num", "mswsp.ConnectIn.propset.num",
|
|
FT_UINT32, BASE_DEC, NULL, 0,
|
|
"Number of Property Sets", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_bool_options,
|
|
{
|
|
"uBooleanOptions", "mswsp.CPMCreateQuery.RowSetProperties.uBooleanOptions",
|
|
FT_UINT32, BASE_HEX, NULL, 0, "Boolean options", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_bool_options_cursor,
|
|
{
|
|
"Cursor", "mswsp.CPMCreateQuery.RowSetProperties.uBooleanOptions.cursor", FT_UINT32,
|
|
BASE_HEX, VALS(cursor_vals), 0x00000007, "Cursor Type", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_bool_options_async,
|
|
{
|
|
"eAsynchronous", "mswsp.CPMCreateQuery.RowSetProperties.uBooleanOptions.eAsynchronous",
|
|
FT_BOOLEAN, 32, NULL, eAsynchronous, "The client will not wait for execution completion", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_bool_options_firstrows,
|
|
{
|
|
"eFirstRows", "mswsp.CPMCreateQuery.RowSetProperties.uBooleanOptions.eFirstRows",
|
|
FT_BOOLEAN, 32, NULL, eFirstRows, "Return the first rows encountered, not the best matches.", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_bool_options_holdrows,
|
|
{
|
|
"eHoldRows", "mswsp.CPMCreateQuery.RowSetProperties.uBooleanOptions.eHoldRows",
|
|
FT_BOOLEAN, 32, NULL, eHoldRows, "The server MUST NOT discard rows until the client is done with a query.", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_bool_options_chaptered,
|
|
{
|
|
"eChaptered", "mswsp.CPMCreateQuery.RowSetProperties.uBooleanOptions.eChaptered",
|
|
FT_BOOLEAN, 32, NULL, eChaptered, "The rowset supports chapters.", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_bool_options_useci,
|
|
{
|
|
"eUseCI", "mswsp.CPMCreateQuery.RowSetProperties.uBooleanOptions.eUseCI",
|
|
FT_BOOLEAN, 32, NULL, eUseCI, "Use the inverted index to evaluate content restrictions even if it is out of date.", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_bool_options_defertrim,
|
|
{
|
|
"eDeferTrimming", "mswsp.CPMCreateQuery.RowSetProperties.uBooleanOptions.eDeferTrimming",
|
|
FT_BOOLEAN, 32, NULL, eDeferTrimming, "Defer Non-indexed trimming operations like scoping or security checking which can be expensive.", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_bool_options_rowsetevents,
|
|
{
|
|
"eEnableRowsetEvents", "mswsp.RowSetProperties.CPMCreateQuery.uBooleanOptions.eEnableRowsetEvents",
|
|
FT_BOOLEAN, 32, NULL, eEnableRowsetEvents, "Enables storage of rowset events on the server side.", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_bool_options_dontcomputeexpensive,
|
|
{
|
|
"eDoNotComputeExpensiveProps", "mswsp.CPMCreateQuery.RowSetProperties.uBooleanOptions.eDoNotComputeExpensiveProps",
|
|
FT_BOOLEAN, 32, NULL, eDoNotComputeExpensiveProps, "Prevents computation of expensive properties.", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_guid_time_low,
|
|
{
|
|
"time-low", "mswsp.guid.time_low",
|
|
FT_UINT32, BASE_HEX, NULL, 0, "time low value", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_guid_time_mid,
|
|
{
|
|
"time-mid", "mswsp.guid.time_mid",
|
|
FT_UINT16, BASE_HEX, NULL, 0, "time mid value", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_guid_time_high,
|
|
{
|
|
"time-high", "mswsp.guid.time_high",
|
|
FT_UINT16, BASE_HEX, NULL, 0, "time high value", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_guid_time_clock_hi,
|
|
{
|
|
"clock_seq_hi_and_reserved", "mswsp.guid.time_clock_high",
|
|
FT_UINT8, BASE_HEX, NULL, 0, "time clock high value", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_guid_time_clock_low,
|
|
{
|
|
"clock_seq_low", "mswsp.guid.time_clock_low",
|
|
FT_UINT8, BASE_HEX, NULL, 0, "time clock high low", HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_guid_node,
|
|
{
|
|
"node", "mswsp.guid.node",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_lcid,
|
|
{
|
|
"lcid", "mswsp.lcid",
|
|
FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_lcid_sortid,
|
|
{
|
|
"Sort ID", "mswsp.lcid.sortid",
|
|
FT_UINT8, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_lcid_langid,
|
|
{
|
|
"Language ID", "mswsp.lcid.langid",
|
|
FT_UINT16, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cscort_column,
|
|
{
|
|
"column", "mswsp.csort.column",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cscort_order,
|
|
{
|
|
"order", "mswsp.csort.order",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cscort_individual,
|
|
{
|
|
"individual", "mswsp.csort.individual",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cscortset_count,
|
|
{
|
|
"count", "mswsp.csortset.count",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ctablecolumn_vtype,
|
|
{
|
|
"vType", "mswsp.ctablecolumn.vtype",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ctablecolumn_aggused,
|
|
{
|
|
"AggregateUsed", "mswsp.ctablecolumn.aggused",
|
|
FT_UINT8, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ctablecolumn_aggtype,
|
|
{
|
|
"AggregateType", "mswsp.ctablecolumn.aggtype",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ctablecolumn_valused,
|
|
{
|
|
"ValueUsed", "mswsp.ctablecolumn.valused",
|
|
FT_UINT8, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ctablecolumn_valoffset,
|
|
{
|
|
"ValueOffset", "mswsp.ctablecolumn.valoffset",
|
|
FT_UINT16, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ctablecolumn_valsize,
|
|
{
|
|
"ValueSize", "mswsp.ctablecolumn.valsize",
|
|
FT_UINT16, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ctablecolumn_statused,
|
|
{
|
|
"StatusUsed", "mswsp.ctablecolumn.statused",
|
|
FT_UINT8, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ctablecolumn_statoffset,
|
|
{
|
|
"StatusOffset", "mswsp.ctablecolumn.statoffset",
|
|
FT_UINT16, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ctablecolumn_lenused,
|
|
{
|
|
"LengthUsed", "mswsp.ctablecolumn.lenused",
|
|
FT_UINT8, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ctablecolumn_lenoffset,
|
|
{
|
|
"LengthOffset", "mswsp.ctablecolumn.lenoffset",
|
|
FT_UINT16, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cfullpropspec_kind,
|
|
{
|
|
"ulKind", "mswsp.cfullpropspec.kind",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cfullpropspec_propid,
|
|
{
|
|
"propid", "mswsp.cfullpropspec.propid",
|
|
FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cfullpropspec_propname,
|
|
{
|
|
"propname", "mswsp.cfullpropspec.propname",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cproprestrict_relop,
|
|
{
|
|
"relop", "mswsp.cproprestrict.relop",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ccoercerestrict_value,
|
|
{
|
|
"value", "mswsp.ccoercerestrict.value",
|
|
FT_FLOAT, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ccontentrestrict_cc,
|
|
{
|
|
"cc", "mswsp.ccontentrestrict.cc",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ccontentrestrict_phrase,
|
|
{
|
|
"phrase", "mswsp.ccontentrestrict.phrase",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ccontentrestrict_method,
|
|
{
|
|
"method", "mswsp.ccontentrestrict.method",
|
|
FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_natlangrestrict_cc,
|
|
{
|
|
"cc", "mswsp.ccontentrestrict.cc",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_natlangrestrict_phrase,
|
|
{
|
|
"phrase", "mswsp.ccontentrestrict.phrase",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crestrict_ultype,
|
|
{
|
|
"ulType", "mswsp.crestrict.ultype",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crestrict_weight,
|
|
{
|
|
"Weight", "mswsp.crestrict.weight",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crestrictarray_count,
|
|
{
|
|
"count", "mswsp.crestrictarray.count",
|
|
FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crestrictarray_present,
|
|
{
|
|
"present", "mswsp.crestrictarray.present",
|
|
FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cnoderestrict_cnode,
|
|
{
|
|
"Weight", "mswsp.cnoderestrict.cnode",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cbasestorvariant_vtype,
|
|
{
|
|
"vType", "mswsp.cbasestorvariant.vtype",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cbasestorvariant_vvalue,
|
|
{
|
|
"vValue", "mswsp.cbasestorvariant.vvalue",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cbasestorvariant_vdata1,
|
|
{
|
|
"vData1", "mswsp.cbasestorvariant.vdata1",
|
|
FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cbasestorvariant_vdata2,
|
|
{
|
|
"vData2", "mswsp.cbasestorvariant.vdata2",
|
|
FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cbasestorvariant_num,
|
|
{
|
|
"num", "mswsp.cbasestorvariant.num",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cbasestorvariant_cdims,
|
|
{
|
|
"cDims", "mswsp.cbasestorvariant.cdims",
|
|
FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cbasestorvariant_ffeatures,
|
|
{
|
|
"fFeatures", "mswsp.cbasestorvariant.ffeatures",
|
|
FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cbasestorvariant_cbelements,
|
|
{
|
|
"cbElements", "mswsp.cbasestorvariant.cbelements",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cbasestorvariant_rgsabound,
|
|
{
|
|
"Rgsabound", "mswsp.cbasestorvariant.rgsabound",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cdbcolid_ekind,
|
|
{
|
|
"eKind", "mswsp.cdbcolid.ekind",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cdbcolid_ulid,
|
|
{
|
|
"ulId", "mswsp.cdbcolid.ulid",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cdbcolid_vstring,
|
|
{
|
|
"vString", "mswsp.cdbcolid.vstring",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cdbprop_id,
|
|
{
|
|
"Id", "mswsp.cdbprop.id",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cdbprop_options,
|
|
{
|
|
"Options", "mswsp.cdbprop.options",
|
|
FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cdbprop_status,
|
|
{
|
|
"Status", "mswsp.cdbprop.status",
|
|
FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cdbpropset_cprops,
|
|
{
|
|
"cProperties", "mswsp.cdbpropset.cprops",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_rangeboundry_ultype,
|
|
{
|
|
"ulType", "mswsp.rangeboundry.ultype",
|
|
FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_rangeboundry_labelpresent,
|
|
{
|
|
"labelPresent", "mswsp.rangeboundry.labelpresent",
|
|
FT_BOOLEAN, 8, NULL, 0x01, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_rangeboundry_cclabel,
|
|
{
|
|
"ccLabel", "mswsp.rangeboundry.cclabel",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_rangeboundry_label,
|
|
{
|
|
"Label", "mswsp.rangeboundry.label",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crangecategspec_crange,
|
|
{
|
|
"cRange", "mswsp.crangecategspec.crange",
|
|
FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ccategspec_type,
|
|
{
|
|
"type", "mswsp.ccategspec.type",
|
|
FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_caggregspec_type,
|
|
{
|
|
"type", "mswsp.caggregspec.type",
|
|
FT_UINT8, BASE_DEC, VALS(DBAGGTTYPE), 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_caggregspec_ccalias,
|
|
{
|
|
"ccAlias", "mswsp.caggregspec.ccalias",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_caggregspec_alias,
|
|
{
|
|
"Alias", "mswsp.caggregspec.alias",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_caggregspec_idcolumn,
|
|
{
|
|
"idColumn", "mswsp.caggregspec.idcolumn",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_caggregspec_ulmaxnumtoreturn,
|
|
{
|
|
"ulMaxNumToReturn",
|
|
"mswsp.caggregspec.ulmaxnumtoreturn",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_caggregspec_idrepresentative,
|
|
{
|
|
"idRepresentative",
|
|
"mswsp.caggregspec.idrepresentative",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_caggregset_count,
|
|
{
|
|
"count", "mswsp.caggregset.count",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_caggregsortkey_order,
|
|
{
|
|
"order", "mswsp.caggregsortkey.order",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_csortaggregset_count,
|
|
{
|
|
"count", "mswsp.csortaggregset.count",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cingroupsortaggregset_type,
|
|
{
|
|
"Type", "mswsp.cingroupsortaggregset.type",
|
|
FT_UINT8, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cingroupsortaggregsets_count,
|
|
{
|
|
"count", "mswsp.cingroupsortaggregsets.count",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_categorizationspec_cmaxres,
|
|
{
|
|
"cMaxResults", "mswsp.categorizationspec.cmaxres",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crowsetprops_ulmaxopenrows,
|
|
{
|
|
"ulMaxOpenRows (ignored)", "mswsp.crowsetprops.ulmaxopenrows",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crowsetprops_ulmemusage,
|
|
{
|
|
"ulMemUsage (ignored)", "mswsp.crowsetprops.ulmemusage",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crowsetprops_cmaxresults,
|
|
{
|
|
"cMaxResults", "mswsp.crowsetprops.cmaxresults",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crowsetprops_ccmdtimeout,
|
|
{
|
|
"cCmdTimeout", "mswsp.crowsetprops.ccmdtimeout",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_cpidmapper_count,
|
|
{
|
|
"count", "mswsp.cpidmapper.count",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ccolumngroup_count,
|
|
{
|
|
"count", "mswsp.ccolumngroup.count",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ccolumngroup_grouppid,
|
|
{
|
|
"groupPid", "mswsp.ccolumngroup.grouppid",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ccolumngroup_pid,
|
|
{
|
|
"pid", "mswsp.ccolumngroup.pid",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ccolumngrouparray_count,
|
|
{
|
|
"count", "mswsp.ccolumngrouparray.count",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_int32array_value,
|
|
{
|
|
"value", "mswsp.int32array.value",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crowseeknext_cskip,
|
|
{
|
|
"cskip", "mswsp.crowseeknext.cskip",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crowseekat_bmkoffset,
|
|
{
|
|
"bmkoffset", "mswsp.crowseekat.bmkoffset",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crowseekat_skip,
|
|
{
|
|
"skip", "mswsp.crowseekat.skip",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crowseekat_hregion,
|
|
{
|
|
"hregion", "mswsp.crowseekat.hregion",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crowseekatratio_ulnumerator,
|
|
{
|
|
"ulnumerator", "mswsp.crowseekatratio.ulnumerator",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crowseekatratio_uldenominator,
|
|
{
|
|
"uldenominator", "mswsp.crowseekatratio.uldenominator",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crowseekatratio_hregion,
|
|
{
|
|
"hregion", "mswsp.crowseekatratio.hregion",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crowseekbybookmark_cbookmarks,
|
|
{
|
|
"cbookmarks", "mswsp.crowseekbybookmark.cbookmarks",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crowseekbybookmark_maxret,
|
|
{
|
|
"maxret", "mswsp.crowseekbybookmark.maxret",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crowvariantinfo_count64,
|
|
{
|
|
"count", "mswsp.crowvariantinfo.count64",
|
|
FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_arrayvector_address64,
|
|
{
|
|
"address of array", "mswsp.arrayvector.address64",
|
|
FT_UINT64, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_crowvariantinfo_count32,
|
|
{
|
|
"count", "mswsp.crowvariantinfo.count32",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_arrayvector_address32,
|
|
{
|
|
"address of array", "mswsp.arrayvector.address",
|
|
FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_rowvariant_item_address64,
|
|
{
|
|
"address", "mswsp.rowvariant.item.address64",
|
|
FT_UINT64, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_rowvariant_item_address32,
|
|
{
|
|
"address", "mswsp.rowvariant.item.address32",
|
|
FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_rowvariant_item_value,
|
|
{
|
|
"value", "mswsp.rowvariant.item.value",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_rowvariant_vtype,
|
|
{
|
|
"vtype", "mswsp.rowvariant.vtype",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_rowvariant_reserved1,
|
|
{
|
|
"reserved1", "mswsp.rowvariant.reserved1",
|
|
FT_UINT16, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_rowvariant_reserved2,
|
|
{
|
|
"reserved2", "mswsp.rowvariant.reserved2",
|
|
FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ctablecolumn_status,
|
|
{
|
|
"status", "mswsp.ctablecolumn.name",
|
|
FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_ctablecolumn_length,
|
|
{
|
|
"length", "mswsp.ctablecolumn.length",
|
|
FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcreatequery_size,
|
|
{
|
|
"size", "mswsp.cpmcreatequery.size",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcreatequery_ccolumnsetpresent,
|
|
{
|
|
"CColumnSetPresent", "mswsp.cpmcreatequery.ccolumnsetpresent",
|
|
FT_BOOLEAN, 8, NULL, 0x01, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcreatequery_crestrictionpresent,
|
|
{
|
|
"CRestrictionPresent", "mswsp.cpmcreatequery.crestrictionpresent",
|
|
FT_BOOLEAN, 8, NULL, 0x01, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcreatequery_csortpresent,
|
|
{
|
|
"CSortPresent", "mswsp.cpmcreatequery.csortpresent",
|
|
FT_BOOLEAN, 8, NULL, 0x01, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcreatequery_ccategpresent,
|
|
{
|
|
"CCategorizationSetPresent", "mswsp.cpmcreatequery.ccategpresent",
|
|
FT_BOOLEAN, 8, NULL, 0x01, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcreatequery_ccateg_count,
|
|
{
|
|
"count", "mswsp.cpmcreatequery.ccateg.count",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcreatequery_trueseq,
|
|
{
|
|
"TrueSequential", "mswsp.cpmcreatequery.trueseq",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcreatequery_workid,
|
|
{
|
|
"WorkId", "mswsp.cpmcreatequery.workid",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcreatequery_cursors,
|
|
{
|
|
"Cursors", "mswsp.cpmcreatequery.cursors",
|
|
FT_BYTES, SEP_SPACE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrows_hcursor,
|
|
{
|
|
"hCursor", "mswsp.msg.cpmgetrows.hcursor",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrows_rowstotransfer,
|
|
{
|
|
"cRowsToTransfer", "mswsp.msg.cpmgetrows.rowstotransfer",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrows_rowwidth,
|
|
{
|
|
"cbRowWidth", "mswsp.msg.cpmgetrows.rowswidth",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrows_cbseek,
|
|
{
|
|
"cbSeek", "mswsp.msg.cpmgetrows.cbseek",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrows_cbreserved,
|
|
{
|
|
"cbReserved", "mswsp.msg.cpmgetrows.cbreserved",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrows_cbreadbuffer,
|
|
{
|
|
"cbReadBuffer", "mswsp.msg.cpmgetrows.cbreadbuffer",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrows_ulclientbase,
|
|
{
|
|
"ulClientBase", "mswsp.msg.cpmgetrows.ulclientbase",
|
|
FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrows_fbwdfetch,
|
|
{
|
|
"fBwdFetch", "mswsp.msg.cpmgetrows.fbwdfetch",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrows_etype,
|
|
{
|
|
"eType", "mswsp.msg.cpmgetrows.etype",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrows_chapt,
|
|
{
|
|
"chapt", "mswsp.msg.cpmgetrows.chapt",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrows_crowsreturned,
|
|
{
|
|
"cRowsReturned", "mswsp.msg.cpmgetrows.crowsreturned",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmratiofinished_hcursor,
|
|
{
|
|
"hCursor", "mswsp.msg.cpmratiofinished_hcursor",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmratiofinished_fquick,
|
|
{
|
|
"fQuick", "mswsp.msg.cpmratiofinished_fquick",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmratiofinished_ulnumerator,
|
|
{
|
|
"ulNumerator", "mswsp.msg.cpmratiofinished_ulnumerator",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmratiofinished_uldenominator,
|
|
{
|
|
"ulDenominator", "mswsp.msg.cpmratiofinished_uldenominator",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmratiofinished_crows,
|
|
{
|
|
"cRows", "mswsp.msg.cpmratiofinished_crows",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmratiofinished_fnewrows,
|
|
{
|
|
"fNewRows", "mswsp.msg.cpmratiofinished_fnewrows",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcomparebmk_hcursor,
|
|
{
|
|
"hCursor", "mswsp.msg.cpmcomparebmk.hcursor",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcomparebmk_chapt,
|
|
{
|
|
"chapt", "mswsp.msg.cpmcomparebmk.chapt",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcomparebmk_bmkfirst,
|
|
{
|
|
"bmkFirst", "mswsp.msg.cpmcomparebmk.bmkfirst",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcomparebmk_bmksecond,
|
|
{
|
|
"bmkSecond", "mswsp.msg.cpmcomparebmk.bmksecond",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcomparebmk_dwcomparison,
|
|
{
|
|
"dwComparison", "mswsp.msg.cpmcomparebmk.dwcomparison",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetapproxpos_hcursor,
|
|
{
|
|
"hCursor", "mswsp.msg.cpmgetapproxpos.hcursor",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetapproxpos_chapt,
|
|
{
|
|
"chapt", "mswsp.msg.cpmgetapproxpos.chapt",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetapproxpos_bmk,
|
|
{
|
|
"bmk", "mswsp.msg.cpmgetapproxpos.bmk",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetapproxpos_numerator,
|
|
{
|
|
"numerator", "mswsp.msg.cpmgetapproxpos.numerator",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetapproxpos_denominator,
|
|
{
|
|
"denominator", "mswsp.msg.cpmgetapproxpos.denominator",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmsetbinding_hcursor,
|
|
{
|
|
"hCursor", "mswsp.msg.cpmsetbinding.hcursor",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmsetbinding_cbrow,
|
|
{
|
|
"cBrow", "mswsp.msg.cpmsetbinding.cbrow",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmsetbinding_desc,
|
|
{
|
|
"cbBindingDesc", "mswsp.msg.cpmsetbinding.desc",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmsetbinding_dummy,
|
|
{
|
|
"dummy", "mswsp.msg.cpmsetbinding.dummy",
|
|
FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmsetbinding_ccolumns,
|
|
{
|
|
"cColumns", "mswsp.msg.cpmsetbinding.ccolumns",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmsetbinding_acolumns,
|
|
{
|
|
"aColumns", "mswsp.msg.cpmsetbinding.acolumns",
|
|
FT_BYTES, SEP_DOT, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmsendnotify_watchnotify,
|
|
{
|
|
"watchNotify", "mswsp.msg.cpmsendnotify.watchnotify",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetquerystatus_hcursor,
|
|
{
|
|
"hCursor", "mswsp.msg.cpmquerystatus.hcursor",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetquerystatus_qstatus,
|
|
{
|
|
"QStatus", "mswsp.msg.cpmquerystatus.qstatus",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcistate_cbstruct,
|
|
{
|
|
"cbStruct", "mswsp.msg.cpmcistate.cbstruct",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcistate_cwordlist,
|
|
{
|
|
"cbWordList", "mswsp.msg.cpmcistate.cbwordlist",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcistate_cpersistindex,
|
|
{
|
|
"cbPersistentIndex", "mswsp.msg.cpmcistate.cbpersistindex",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcistate_cqueries,
|
|
{
|
|
"cQueries", "mswsp.msg.cpmcistate.cqueries",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcistate_cfreshtest,
|
|
{
|
|
"cFreshTest", "mswsp.msg.cpmcistate.cfreshtest",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcistate_dwmergeprogress,
|
|
{
|
|
"dwMergeProgress", "mswsp.msg.cpmcistate.dwmergeprogress",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcistate_estate,
|
|
{
|
|
"eState", "mswsp.msg.cpmcistate.estate",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcistate_cfiltereddocs,
|
|
{
|
|
"cFilteredDocuments", "mswsp.msg.cpmcistate.cfiltereddocs",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcistate_ctotaldocs,
|
|
{
|
|
"cTotalDocuments", "mswsp.msg.cpmcistate.ctotaldocs",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcistate_cpendingscans,
|
|
{
|
|
"cPendingScans", "mswsp.msg.cpmcistate.cpendingscans",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcistate_dwindexsize,
|
|
{
|
|
"dwIndexSize", "mswsp.msg.cpmcistate.dwindexsize",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcistate_cuniquekeys,
|
|
{
|
|
"cUniqueKeys", "mswsp.msg.cpmcistate.cuniquekeys",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcistate_csecqdocuments,
|
|
{
|
|
"cSecQDocuments", "mswsp.msg.cpmcistate.csecqdocuments",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmcistate_dwpropcachesize,
|
|
{
|
|
"dwPropCacheSize", "mswsp.msg.cpmcistate.dwpropcachesize",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmfetchvalue_wid,
|
|
{
|
|
"wid", "mswsp.msg.cpmfetchvalue.wid",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmfetchvalue_cbsofar,
|
|
{
|
|
"cbSoFar", "mswsp.msg.cpmfetchvalue.cbsofar",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmfetchvalue_cbpropspec,
|
|
{
|
|
"cbPropSpec", "mswsp.msg.cpmfetchvalue.cbpropspec",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmfetchvalue_cbchunk,
|
|
{
|
|
"cbChunk", "mswsp.msg.cpmfetchvalue.chunk",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmfetchvalue_cbvalue,
|
|
{
|
|
"cbValue", "mswsp.msg.cpmfetchvalue.cbvalue",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmfetchvalue_fmoreexists,
|
|
{
|
|
"fMoreExists", "mswsp.msg.cpmfetchvalue.fmoreexists",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmfetchvalue_fvalueexists,
|
|
{
|
|
"fValueExists", "mswsp.msg.cpmfetchvalue.fvalueexists",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmfetchvalue_vvalue,
|
|
{
|
|
"vvalue", "mswsp.msg.cpmfetchvalue.vvalue",
|
|
FT_BYTES, SEP_SPACE, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmquerystatusex_qstatus,
|
|
{
|
|
"qStatus", "mswsp.msg.cpmquerystatusex.qstatus",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmquerystatusex_hcursor,
|
|
{
|
|
"hCursor", "mswsp.msg.cpmquerystatusex.hcursor",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmquerystatusex_bmk,
|
|
{
|
|
"bmk", "mswsp.msg.cpmquerystatusex.bmk",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmquerystatusex_cfiltereddocs,
|
|
{
|
|
"cFilteredDocuments", "mswsp.msg.cpmquerystatusex.cfiltereddocs",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmquerystatusex_cdocstofilter,
|
|
{
|
|
"cDocumentsToFilter", "mswsp.msg.cpmquerystatusex.cdocstofilter",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmquerystatusex_dwratiodenom,
|
|
{
|
|
"dwRatioFinishedDenominator", "mswsp.msg.cpmquerystatusex.dwratiodenom",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmquerystatusex_dwrationumer,
|
|
{
|
|
"dwRatioFinishedNumerator", "mswsp.msg.cpmquerystatusex.dwrationumer",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmquerystatusex_irowbmk,
|
|
{
|
|
"iRowBmk", "mswsp.msg.cpmquerystatusex.irowbmk",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmquerystatusex_crowstotal,
|
|
{
|
|
"cRowsTotal", "mswsp.msg.cpmquerystatusex.crowstotal",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmquerystatusex_maxrank,
|
|
{
|
|
"maxRank", "mswsp.msg.cpmquerystatusex.maxrank",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmquerystatusex_cresultsfound,
|
|
{
|
|
"cResultsFound", "mswsp.msg.cpmquerystatusex.cresultsfound",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmquerystatusex_whereid,
|
|
{
|
|
"whereId", "mswsp.msg.cpmquerystatusex.whereid",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmrestartposition_hcursor,
|
|
{
|
|
"hCursor", "mswsp.msg.cpmrestartposition.hcursor",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmrestartposition_chapt,
|
|
{
|
|
"chapt", "mswsp.msg.cpmrestartposition.chapt",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrowsetnotify_wid,
|
|
{
|
|
"wid", "mswsp.msg.cpmgetrowsetnotify.wid",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrowsetnotify_moreevents,
|
|
{
|
|
"moreEvents", "mswsp.msg.cpmgetrowsetnotify.moreevents",
|
|
FT_BOOLEAN, 8, NULL, 0x01, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrowsetnotify_eventtype,
|
|
{
|
|
"eventType", "mswsp.msg.cpmgetrowsetnotify.eventType",
|
|
FT_UINT8, BASE_DEC, NULL, 0xFE, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrowsetnotify_rowsetitemstate,
|
|
{
|
|
"rowSetItemState", "mswsp.msg.cpmgetrowsetnotify.rowsetitemstate",
|
|
FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrowsetnotify_changeditemstate,
|
|
{
|
|
"changedItemState", "mswsp.msg.cpmgetrowsetnotify.changeditemState",
|
|
FT_UINT8, BASE_DEC, NULL, 0, 0, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrowsetnotify_rowsetevent,
|
|
{
|
|
"rowSetEvent", "mswsp.msg.cpmgetrowsetnotify.rowsetevent",
|
|
FT_UINT8, BASE_DEC, NULL, 0, 0, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrowsetnotify_rowseteventdata1,
|
|
{
|
|
"rowSetEventdata1", "mswsp.msg.cpmgetrowsetnotify.rowseteventdata1",
|
|
FT_UINT64, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmgetrowsetnotify_rowseteventdata2,
|
|
{
|
|
"rowSetEventdata2", "mswsp.msg.cpmgetrowsetnotify.rowseteventdata2",
|
|
FT_UINT64, BASE_HEX, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmfindindices_cwids,
|
|
{
|
|
"cWids", "mswsp.msg.cpmfindindices.cwids",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmfindindices_cdepthprev,
|
|
{
|
|
"cDepthPrev", "mswsp.msg.cpmfindindices.cdepthprev",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmfindindices_cdepthnext,
|
|
{
|
|
"cDepthNext", "mswsp.msg.cpmfindindices.cdepthnext",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmsetscopeprioritization_priority,
|
|
{
|
|
"priority", "mswsp.msg.cpmsetscopeprioritization.priority",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmsetscopeprioritization_eventfreq,
|
|
{
|
|
"eventFrequency", "mswsp.msg.cpmsetscopeprioritization.eventfreq",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmsetscopestatisics_dwindexitems,
|
|
{
|
|
"dwIndexedItems", "mswsp.msg.cpmsetscopestatistics.dwindexitems",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmsetscopestatisics_dwoutstandingadds,
|
|
{
|
|
"dwOutstandingAdds", "mswsp.msg.cpmsetscopestatistics.dwoutstandingadds",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
},
|
|
{
|
|
&hf_mswsp_msg_cpmsetscopestatisics_dwoutstandingmodifies,
|
|
{
|
|
"dwOutstandingModifies", "mswsp.msg.cpmsetscopestatistics.dwoutstandingmodifies",
|
|
FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL
|
|
}
|
|
}
|
|
};
|
|
|
|
static gint *ett[] = {
|
|
&ett_mswsp,
|
|
&ett_mswsp_hdr,
|
|
&ett_mswsp_msg,
|
|
&ett_mswsp_pad,
|
|
&ett_mswsp_property_restriction,
|
|
&ett_CRestrictionArray,
|
|
&ett_CBaseStorageVariant,
|
|
&ett_CBaseStorageVariant_Vector,
|
|
&ett_CBaseStorageVariant_Array,
|
|
&ett_CDbColId,
|
|
&ett_GUID,
|
|
&ett_CDbProp,
|
|
&ett_CDbPropSet,
|
|
&ett_CDbPropSet_Array,
|
|
&ett_CRestriction,
|
|
&ett_CNodeRestriction,
|
|
&ett_CPropertyRestriction,
|
|
&ett_CCoercionRestriction,
|
|
&ett_CContentRestriction,
|
|
&ett_RANGEBOUNDARY,
|
|
&ett_CRangeCategSpec,
|
|
&ett_CCategSpec,
|
|
&ett_CAggregSpec,
|
|
&ett_CAggregSet,
|
|
&ett_CCategorizationSpec,
|
|
&ett_CAggregSortKey,
|
|
&ett_CSortAggregSet,
|
|
&ett_CInGroupSortAggregSet,
|
|
&ett_CInGroupSortAggregSets,
|
|
&ett_CRowsetProperties,
|
|
&ett_CFullPropSpec,
|
|
&ett_CPidMapper,
|
|
&ett_CSort,
|
|
&ett_CSortSet,
|
|
&ett_CNatLanguageRestriction,
|
|
&ett_CColumnGroup,
|
|
&ett_CColumnGroupArray,
|
|
&ett_LCID,
|
|
&ett_CTableColumn,
|
|
&ett_Array,
|
|
&ett_SeekDescription,
|
|
&ett_CRowsSeekNext,
|
|
&ett_CRowsSeekAt,
|
|
&ett_CRowsSeekAtRatio,
|
|
&ett_CRowsSeekByBookmark,
|
|
&ett_GetRowsRow,
|
|
&ett_GetRowsColumn,
|
|
&ett_CRowVariant,
|
|
&ett_CRowVariant_Vector,
|
|
&ett_mswsp_bool_options,
|
|
&ett_mswsp_uin32_array,
|
|
&ett_mswsp_msg_padding,
|
|
&ett_mswsp_msg_creusewhere
|
|
};
|
|
|
|
static ei_register_info ei[] = {
|
|
{ &ei_mswsp_invalid_variant_type, { "mswsp.invalid_variant_type", PI_PROTOCOL, PI_ERROR, "Invalid variant type", EXPFILL }},
|
|
{ &ei_missing_msg_context, { "mswsp.msg.cpmgetrows.missing_msg_context", PI_SEQUENCE, PI_WARN, "previous messages needed for context not captured", EXPFILL }},
|
|
{ &ei_mswsp_msg_cpmsetbinding_ccolumns, { "mswsp.msg.cpmsetbinding.ccolumns.invalude", PI_PROTOCOL, PI_WARN, "Invalid number of cColumns for packet", EXPFILL }}
|
|
};
|
|
int i;
|
|
|
|
proto_mswsp = proto_register_protocol("Windows Search Protocol",
|
|
"MS-WSP", "mswsp");
|
|
|
|
proto_register_field_array(proto_mswsp, hf, array_length(hf));
|
|
proto_register_subtree_array(ett, array_length(ett));
|
|
expert_mswsp = expert_register_protocol(proto_mswsp);
|
|
expert_register_field_array(expert_mswsp, ei, array_length(ei));
|
|
for (i=0; i<(int)array_length(GuidPropertySet); i++) {
|
|
guids_add_guid(&GuidPropertySet[i].guid, GuidPropertySet[i].def);
|
|
}
|
|
}
|
|
|
|
static int dissect_mswsp_smb(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data)
|
|
{
|
|
smb_info_t *si = (smb_info_t*)data;
|
|
gboolean in = si->request;
|
|
|
|
smb_fid_info_t *fid_info = NULL;
|
|
fid_info = find_fid_info(si);
|
|
|
|
if (!fid_info || !fid_info->fsi || !fid_info->fsi->filename) {
|
|
return 0;
|
|
}
|
|
|
|
|
|
if (g_ascii_strcasecmp(fid_info->fsi->filename, "\\MsFteWds") != 0) {
|
|
return 0;
|
|
}
|
|
p_add_proto_data(wmem_file_scope(), pinfo, proto_mswsp, 0, (void*)&SMB1);
|
|
return dissect_mswsp(tvb, pinfo, tree, in, data);
|
|
}
|
|
|
|
|
|
static int dissect_mswsp_smb2(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data)
|
|
{
|
|
smb2_info_t *si = (smb2_info_t*)data;
|
|
gboolean in;
|
|
char* fid_name = NULL;
|
|
guint32 open_frame = 0, close_frame = 0;
|
|
|
|
if (!si) {
|
|
return 0;
|
|
}
|
|
|
|
if (si->saved) {
|
|
dcerpc_fetch_polhnd_data(&si->saved->policy_hnd, &fid_name, NULL, &open_frame, &close_frame, pinfo->num);
|
|
}
|
|
|
|
if (!fid_name || g_ascii_strcasecmp(fid_name, "File: MsFteWds") != 0) {
|
|
return 0;
|
|
}
|
|
|
|
in = !(si->flags & SMB2_FLAGS_RESPONSE);
|
|
p_add_proto_data(wmem_file_scope(), pinfo, proto_mswsp, 0, (void*)&SMB2);
|
|
return dissect_mswsp(tvb, pinfo, tree, in, data);
|
|
}
|
|
|
|
void
|
|
proto_reg_handoff_mswsp(void)
|
|
{
|
|
heur_dissector_add("smb_transact", dissect_mswsp_smb, "WSP over SMB1", "smb1_wsp", proto_mswsp, HEURISTIC_ENABLE);
|
|
heur_dissector_add("smb2_pipe_subdissectors", dissect_mswsp_smb2, "WSP over SMB2", "smb2_wsp", proto_mswsp, HEURISTIC_ENABLE);
|
|
}
|
|
|
|
|
|
/*
|
|
* Editor modelines - https://www.wireshark.org/tools/modelines.html
|
|
*
|
|
* Local variables:
|
|
* c-basic-offset: 4
|
|
* tab-width: 8
|
|
* indent-tabs-mode: t
|
|
* End:
|
|
*
|
|
* vi: set shiftwidth=4 tabstop=8 noexpandtab:
|
|
* :indentSize=4:tabSize=8:noTabs=false:
|
|
*/
|