[cifs-protocol] RE: [Pfif] erroneous references to little-endian

[Bill Wesse]

Good morning Mr. French! I have created case SRX090428600004 for your question, and will begin my investigation shortly. I will keep you advised of progress!

Regards,
Bill Wesse
MCSE, MCTS / Senior Escalation Engineer, US-CSS DSC PROTOCOL TEAM
8055 Microsoft Way
Charlotte, NC 28273
TEL:  +1(980) 776-8200
CELL: +1(704) 661-5438
FAX:  +1(704) 665-9606


-----Original Message-----
From: Steve French [mailto:smfrench at gmail.com] 
Sent: Monday, April 27, 2009 9:14 PM
To: Interoperability Documentation Help
Cc: pfif at tridgell.net; cifs-protocol at samba.org
Subject: Re: [Pfif] erroneous references to little-endian

In implementing SMB2 Negotiate protocol support I noticed that the
structure definition is off by 2 bytes.

Section 2.2.4 of MS-SMB2.pdf shows the SMB2 negotiate response as an
SMB2 header followed by

	le16 StructureSize;	/* Must be 65 */
	le16 DialectCount;
	le16 SecurityMode;
	le16 DialectRevision; /* Should be 0x0202 */
        ... etc

when it actually has no "DialectCount" which is clear when decoding by
hand (or looking at it in Wireshark)

	le16 StructureSize;	/* Must be 65 */
	le16 SecurityMode;
	le16 DialectRevision; /* Should be 0x0202 */
        ... etc

The server in this case is Vista.  The dialect negotiated was 0x0202
in response to an SMB2 only (not SMB) negotiate protocol request.


-- 
Thanks,

Steve