Class NDRFullPointerField

scapy/layers/dcerpc.py:1703–1795

A NDR Full/Unique pointer field encapsulation. :param EMBEDDED: This pointer is embedded. This means that it's representation will not appear after the pointer (pointer deferral applies). See [C706] 14.3.12.3 - Algorithm for Deferral of Referents

class NDRFullPointerField(_FieldContainer):
    """
    A NDR Full/Unique pointer field encapsulation.

    :param EMBEDDED: This pointer is embedded. This means that it's representation
                     will not appear after the pointer (pointer deferral applies).
                     See [C706] 14.3.12.3 - Algorithm for Deferral of Referents
    """

    EMBEDDED = False
    EMBEDDED_REF = False

    def __init__(self, fld, ref=False, fmt="I"):
        self.fld = fld
        self.ref = ref
        self.default = None

    def getfield(self, pkt, s):
        fmt = _e(pkt.ndrendian) + ["I", "Q"][pkt.ndr64]
        remain, referent_id = NDRAlign(Field("", 0, fmt=fmt), align=(4, 8)).getfield(
            pkt, s
        )

        # No value
        if referent_id == 0 and not self.EMBEDDED_REF:
            return remain, None

        # With value
        if self.EMBEDDED:
            # deferred
            ptr = NDRPointer(
                ndr64=pkt.ndr64, ndrendian=pkt.ndrendian, referent_id=referent_id
            )
            pkt.deferred_pointers.append((ptr, partial(self.fld.getfield, pkt)))
            return remain, ptr

        remain, val = self.fld.getfield(pkt, remain)
        return remain, NDRPointer(
            ndr64=pkt.ndr64, ndrendian=pkt.ndrendian, referent_id=referent_id, value=val
        )

    def addfield(self, pkt, s, val):
        if val is not None and not isinstance(val, NDRPointer):
            raise ValueError(
                "Expected NDRPointer in %s. You are using it wrong!" % self.name
            )
        fmt = _e(pkt.ndrendian) + ["I", "Q"][pkt.ndr64]
        fld = NDRAlign(Field("", 0, fmt=fmt), align=(4, 8))

        # No value
        if val is None and not self.EMBEDDED_REF:
            return fld.addfield(pkt, s, 0)

        # With value
        _set_ctx_on(val.value, pkt)
        s = fld.addfield(pkt, s, val.referent_id)
        if self.EMBEDDED:
            # deferred