Project

General

Profile

Actions
Copy link

Feature #289

closed

Improve DCERPC Big Endian support.

Added by Kirby Kuehl over 13 years ago. Updated over 13 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Kirby Kuehl
Target version:
1.1beta3
Effort:
Difficulty:
Label:

Description

See http://www.antievasion.com/principles/principles/part-3
Specifically the msrpc_big_endian.pcap

Also made the default byte packing for slow path little endian since that is the normal case. Perform byte swapping in slow path as needed for big endian. This is a readability change, not a functional change.

Files

0001-Improve-DCERPC-big-endian-support-when-parsing-BIND-.patch (17.7 KB) 0001-Improve-DCERPC-big-endian-support-when-parsing-BIND-.patch Kirby Kuehl, 06/06/2011 09:38 AM
Actions
Copy link

Also available in: Atom PDF