| 4055 | |
| 4056 | |
| 4057 | class SMB2_Change_Notify_Response(_SMB2_Payload, _NTLMPayloadPacket): |
| 4058 | name = "SMB2 CHANGE NOTIFY Response" |
| 4059 | Command = 0x000F |
| 4060 | OFFSET = 8 + 64 |
| 4061 | _NTLM_PAYLOAD_FIELD_NAME = "Buffer" |
| 4062 | fields_desc = [ |
| 4063 | XLEShortField("StructureSize", 0x9), |
| 4064 | LEShortField("OutputBufferOffset", None), |
| 4065 | LEIntField("OutputLen", None), |
| 4066 | _NTLMPayloadField( |
| 4067 | "Buffer", |
| 4068 | OFFSET, |
| 4069 | [ |
| 4070 | _NextPacketListField( |
| 4071 | "Output", |
| 4072 | [], |
| 4073 | FILE_NOTIFY_INFORMATION, |
| 4074 | length_from=lambda pkt: pkt.OutputLen, |
| 4075 | max_count=1000, |
| 4076 | ) |
| 4077 | ], |
| 4078 | ), |
| 4079 | ] |
| 4080 | |
| 4081 | def post_build(self, pkt, pay): |
| 4082 | # type: (bytes, bytes) -> bytes |
| 4083 | return ( |
| 4084 | _SMB2_post_build( |
| 4085 | self, |
| 4086 | pkt, |
| 4087 | self.OFFSET, |
| 4088 | { |
| 4089 | "Output": 2, |
| 4090 | }, |
| 4091 | ) |
| 4092 | + pay |
| 4093 | ) |
| 4094 | |
| 4095 | |
| 4096 | bind_top_down( |
no test coverage detected
searching dependent graphs…