MSRPCHeaders fail to be created with no data about impacket

[GoogleCodeExporter]

uhmm.. what was the context where you used it?...

Seems to be working for me:

>>> from impacket.dcerpc import dcerpc
>>> hh = dcerpc.MSRPCHeader()
>>> hh
<impacket.dcerpc.dcerpc.MSRPCHeader instance at 0x7fc0a8371440>
>>> hh.dump()

MSRPCHeader
ver_major: {5}
ver_minor: {0}
pduData: {''}
auth_data: {''}
flags: {3}
type: {0}
auth_len: {0}
>>> str(hh)
'\x05\x00\x00\x03\x10\x00\x00\x00\x10\x00\x00\x00\x01\x00\x00\x00'

Remember that 'no data' should be data = None.. not data = ''

bto

Original comment by [email protected] on 10 Sep 2012 at 6:25

[GoogleCodeExporter]

This happened when connecting with my windows 7 host. Data was indeed '' not 
None. Not sure how that happened exactly..

Original comment by [email protected] on 10 Sep 2012 at 6:58

[GoogleCodeExporter]

So the scenario is your Windows 7 connecting to the smbserver and asking for 
shares right?

If you have the traceback for the exception that'd be great.., plus wireshark 
dump (if possible)..

It's kind of weird.. that never happened to me.. and I usually connect against 
the smbserver from Windows 7 machines..

Traceback might give some clues...

In the meantime try this patch (just to test):
  Structure.__init__(self,data, alignment)
  if data is None or data is '':

But we should track the origin of why there's a cast to that structure with '' 
data.

thanks bryan..

Original comment by [email protected] on 10 Sep 2012 at 7:17

[GoogleCodeExporter]

The comments in simple_server suggest that you need to run srvsvc for windows 7 
to connect, but I have found the opposite, that my windows 7 box works better 
without srvsvc bound.

I'll try to get to the bottom of that data=='' issue.

Original comment by [email protected] on 10 Sep 2012 at 8:18

[GoogleCodeExporter]

Bryan:

I'm closing this one..as we saw.. you need to pass Data = None to the 
dcerpc.MSRPCHeader() constructor to work as expected.. otherwise it will think 
there's data and will try to parse it.

Original comment by [email protected] on 10 Sep 2012 at 11:07

• Changed state: Invalid