Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-14 12:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Fixes another optional part of an RDP unit.

Browse source
This commit is contained in:
Seth Hall 2015-03-05 03:02:19 -05:00
parent 374ac42814
commit 6909d0de87
1 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

9
src/analyzer/protocol/rdp/rdp-protocol.pac
View file

@ -106,8 +106,15 @@ type Connect_Confirm(cotp: COTP) = record {
destination_reference: uint16;
source_reference: uint16;
flags: uint8;
switch1: case (offsetof(switch1) + 2 - cotp.cotp_len - 1) of {
0 -> none1: empty;
default -> response: Connect_Confirm_Record;
};
};
type Connect_Confirm_Record = record {
response_type: uint8;
response_switch: case response_type of {
switch1: case response_type of {
0x02 -> neg_resp: RDP_Negotiation_Response;
0x03 -> neg_fail: RDP_Negotiation_Failure;
};