Project

General

Profile

Actions
Copy link

Feature #289

closed
KK KK

Improve DCERPC Big Endian support.

Feature #289: Improve DCERPC Big Endian support.

Added by Kirby Kuehl almost 15 years ago. Updated almost 15 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Kirby Kuehl
Target version:
1.1beta3
Effort:
Difficulty:
Label:

Description

See http://www.antievasion.com/principles/principles/part-3
Specifically the msrpc_big_endian.pcap

Also made the default byte packing for slow path little endian since that is the normal case. Perform byte swapping in slow path as needed for big endian. This is a readability change, not a functional change.

Files

0001-Improve-DCERPC-big-endian-support-when-parsing-BIND-.patch (17.7 KB) 0001-Improve-DCERPC-big-endian-support-when-parsing-BIND-.patch Kirby Kuehl, 06/06/2011 09:38 AM

VJ Updated by Victor Julien almost 15 years ago Actions
Copy link
 #1

  • Status changed from New to Closed
  • Target version set to 1.1beta3
  • % Done changed from 90 to 100

Applied, thanks Kirby.

Actions
Copy link

Also available in: PDF Atom