[prev in list] [next in list] [prev in thread] [next in thread] 

List:       full-disclosure
Subject:    [Full-disclosure] rpc NetrDfsGetVersion bug
From:       yuange <yuange1975 () hotmail ! com>
Date:       2010-01-30 1:40:12
Message-ID: SNT104-W4698E85377C9532D3AF3B8C45A0 () phx ! gbl
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


http://hi.baidu.com/yuange1975/blog/item/a8195e1bc775afd2ad6e75f5.html#comment

 

 

 

 

 NetrDfsGetVersion(... )

    {

   ......

   Dfsctl(DFS_GET_VERSION, &ver, sizeof( ver ), NULL, 0 );

......

}



Dfsctl(
    IN ULONG FsCode,
    IN PVOID Input,
    IN ULONG InputLength,
    OUT PVOID Output,
    IN ULONG OutputLength
)

{

......

NtFsControlFile(
                Handle,
                NULL,     
                NULL,      
                NULL,      
                &Status,
                FsCode,
                Input,
                InputLength,
                Output,
                OutputLength
            );

......

}

  

 

    

Should be so:
       

 

NetrDfsGetVersion(... )

    {

   ......

   Dfsctl(DFS_GET_VERSION,NULL,0, &ver, sizeof( ver ));

......

}

 

 

 

   
 		 	   		  
_________________________________________________________________
SkyDriveµç×Ó»­²á£¬´øÄãÁì Ô¾«²ÊÕÕƬ£¬·ÖÏí¡°ÃÀ¡±Ê±¡°ÃÀ¡±¿Ì!
http://www.windowslive.cn/campaigns/e-magazine/ngmchina/?a=c
[Attachment #5 (text/html)]

<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
--></style>
</head>
<body class='hmmessage'>
<A href="http://hi.baidu.com/yuange1975/blog/item/a8195e1bc775afd2ad6e75f5.html#comment">http://hi.baidu.com/yuange1975/blog/item/a8195e1bc775afd2ad6e75f5.html#comment</A><BR>
 &nbsp;<BR>
&nbsp;<BR>
&nbsp;<BR>
&nbsp;<BR>
&nbsp;NetrDfsGetVersion(... )<BR>
&nbsp;&nbsp;&nbsp; {<BR>
&nbsp;&nbsp; ......<BR>
&nbsp;&nbsp; Dfsctl(DFS_GET_VERSION, &amp;ver, sizeof( ver ), NULL, 0 );<BR>
......<BR>
}<BR>
<BR>
Dfsctl(<BR>&nbsp;&nbsp;&nbsp; IN ULONG FsCode,<BR>&nbsp;&nbsp;&nbsp; IN PVOID \
Input,<BR>&nbsp;&nbsp;&nbsp; IN ULONG InputLength,<BR>&nbsp;&nbsp;&nbsp; OUT PVOID \
Output,<BR>&nbsp;&nbsp;&nbsp; IN ULONG OutputLength<BR>)<BR> {<BR>
......<BR>
NtFsControlFile(<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
Handle,<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
NULL,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
NULL,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
NULL,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
&amp;Status,<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
FsCode,<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
Input,<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
InputLength,<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&  \
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
Output,<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
                OutputLength<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
                );<BR>
......<BR>
}<BR>
&nbsp;&nbsp;<BR>
&nbsp;<BR>
&nbsp;&nbsp;&nbsp;&nbsp;<BR>
<DIV style="HEIGHT: auto" id=dict_content class=dict_inner>Should be so:</DIV>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<BR>
&nbsp;<BR>
NetrDfsGetVersion(... )<BR>
&nbsp;&nbsp;&nbsp; {<BR>
&nbsp;&nbsp; ......<BR>
&nbsp;&nbsp; Dfsctl(DFS_GET_VERSION,NULL,0, &amp;ver, sizeof( ver ));<BR>
......<BR>
}<BR>
&nbsp;<BR>
&nbsp;<BR>
&nbsp;<BR>
&nbsp;&nbsp; <BR> 		 	   		  <br /><hr />ÁÄÌì+ËÑË÷+ÓÊÏä ÏëÒªÇáËɳöÓÎ,ÊÖ»úMSN°ïÄã¸ã¶¨! <a \
href='http://3g.msn.cn/' target='_new'>Á¢¿ÌÏ ÔØ£¡</a></body> </html>



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic