diff options
| -rw-r--r-- | docbook/release-notes.asciidoc | 1 | ||||
| -rw-r--r-- | epan/CMakeLists.txt | 1 | ||||
| -rw-r--r-- | epan/dissectors/Makefile.common | 1 | ||||
| -rw-r--r-- | epan/dissectors/packet-mswsp.c | 8211 | ||||
| -rw-r--r-- | epan/dissectors/packet-smb-pipe.c | 16 | ||||
| -rw-r--r-- | epan/dissectors/packet-smb-pipe.h | 2 | ||||
| -rw-r--r-- | epan/dissectors/packet-smb.c | 11 | ||||
| -rw-r--r-- | epan/dissectors/packet-smb2.c | 47 | ||||
| -rw-r--r-- | epan/dissectors/packet-smb2.h | 2 |
9 files changed, 8256 insertions, 36 deletions
diff --git a/docbook/release-notes.asciidoc b/docbook/release-notes.asciidoc index d71bac77f6..3c7771b10a 100644 --- a/docbook/release-notes.asciidoc +++ b/docbook/release-notes.asciidoc @@ -215,6 +215,7 @@ Performance Co-Pilot Proxy Aeron Network File System over Remote Direct Memory Access (NFSoRDMA) eXpressive Internet Protocol (XIP) +Windows Search Protocol (MS-WSP) --sort-and-group-- === Updated Protocol Support diff --git a/epan/CMakeLists.txt b/epan/CMakeLists.txt index cf0a2d9c62..50c02b83d7 100644 --- a/epan/CMakeLists.txt +++ b/epan/CMakeLists.txt @@ -1026,6 +1026,7 @@ set(DISSECTOR_SRC dissectors/packet-msproxy.c dissectors/packet-msrp.c dissectors/packet-mstp.c + dissectors/packet-mswsp.c dissectors/packet-mtp2.c dissectors/packet-mtp3.c dissectors/packet-mtp3mg.c diff --git a/epan/dissectors/Makefile.common b/epan/dissectors/Makefile.common index b641c07f9a..f6d199354d 100644 --- a/epan/dissectors/Makefile.common +++ b/epan/dissectors/Makefile.common @@ -940,6 +940,7 @@ DISSECTOR_SRC = \ packet-msproxy.c \ packet-msrp.c \ packet-mstp.c \ + packet-mswsp.c \ packet-mtp2.c \ packet-mtp3.c \ packet-mtp3mg.c \ diff --git a/epan/dissectors/packet-mswsp.c b/epan/dissectors/packet-mswsp.c new file mode 100644 index 0000000000..faa1375ee6 --- /dev/null +++ b/epan/dissectors/packet-mswsp.c @@ -0,0 +1,8211 @@ +/* packet-mswsp.c + * Routines for Windows Search Protocol dissection + * Copyright 2012, Gregor Beck <gregor.beck@sernet.de> + * Copyright 2015, Noel Power <noel.power@suse.com> + * + * Wireshark - Network traffic analyzer + * By Gerald Combs <gerald@wireshark.org> + * Copyright 1998 Gerald Combs + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License along + * with this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + */ + +# include "config.h" + +/* Include only as needed */ +#include <stdlib.h> +#include <string.h> +#include <stdbool.h> + +#include <epan/packet.h> +#include <epan/prefs.h> + +#include "packet-smb.h" +#include "packet-smb2.h" +#include "packet-dcom.h" /* HRESULT */ +#include "to_str.h" +#include "packet-dcerpc-nt.h" + +void proto_register_mswsp(void); + +#define ZERO_STRUCT(x) memset((char *)&(x), 0, sizeof(x)) + +enum vType { + VT_EMPTY = 0x00, + VT_NULL = 0x01, + VT_I2 = 0x02, + VT_I4 = 0x03, + VT_R4 = 0x04, + VT_R8 = 0x05, + VT_CY = 0x06, + VT_DATE = 0x07, + VT_BSTR = 0x08, + VT_ERROR = 0x0a, + VT_BOOL = 0x0b, + VT_VARIANT = 0x0c, + VT_DECIMAL = 0x0e, + VT_I1 = 0x10, + VT_UI1 = 0x11, + VT_UI2 = 0x12, + VT_UI4 = 0x13, + VT_I8 = 0x14, + VT_UI8 = 0x15, + VT_INT = 0x16, + VT_UINT = 0x17, + VT_LPSTR = 0x1e, + VT_LPWSTR = 0x1f, + VT_COMPRESSED_LPWSTR = 0x23, + VT_FILETIME = 0x40, + VT_BLOB = 0x41, + VT_BLOB_OBJECT = 0x46, + VT_CLSID = 0x48, + VT_VECTOR = 0x1000, + VT_ARRAY = 0x2000 +}; + +struct data_blob { + guint8 *data; + guint32 size; +}; + +struct data_str { + const char *str; + guint32 len; +}; + +struct vt_decimal { + guint32 hi, lo, mid; +}; + + +struct vt_vector { + guint32 len; + union { + gint8 *vt_i1; + guint8 *vt_ui1; + gint16 *vt_i2; + guint16 *vt_ui2, *vt_bool; + gint32 *vt_i4; + guint32 *vt_ui4, *vt_error; + gint64 *vt_i8, *vt_cy, *vt_filetime; + guint64 *vt_ui8; + float *vt_r4; + double *vt_r8, *vt_date; + e_guid_t *vt_clsid; + struct data_blob *vt_blob, *vt_blob_object; + struct data_str *vt_lpstr, *vt_lpwstr, *vt_compressed_lpwstr, *vt_bstr; + } u; +}; + +struct SAFEARRAYBOUNDS { + guint32 cElements, lLbound; +}; + +struct vt_array { + struct vt_vector vData; + guint16 cDims, fFeature; + guint32 cbElements; + + struct SAFEARRAYBOUNDS *Rgsabound; +}; + +union vt_single +{ + gint8 vt_i1; + guint8 vt_ui1; + gint16 vt_i2; + guint16 vt_ui2, vt_bool; + gint32 vt_i4, vt_int; + guint32 vt_ui4, vt_uint, vt_error; + gint64 vt_i8, vt_cy, vt_filetime; + guint64 vt_ui8; + double vt_r8, vt_date; + e_guid_t vt_clsid; + float vt_r4; + struct vt_decimal vt_decimal; + struct data_blob vt_blob, vt_blob_object; + struct data_str vt_lpstr, vt_lpwstr, vt_compressed_lpwstr, vt_bstr; +}; + +union vValue { + union vt_single vt_single; + struct vt_vector vt_vector; + struct vt_array vt_array; +}; + +struct vtype_data { + enum vType tag; /* base type, high bits cleared */ + const char *str; /* string rep of base type */ + int size; /* -1 for variable length */ + int (*tvb_get)(tvbuff_t*, int, void*);/* read StorageVariant */ + int (*tvb_get_value_only)(tvbuff_t*, int, int, void*);/*read StorageVariant value*/ + void (*strbuf_append)(wmem_strbuf_t*, void*); +}; + +/* 2.2.1.1 */ +struct CBaseStorageVariant { + guint16 vType; /* value enum vType */ + guint16 vData1; + guint16 vData2; + union vValue vValue; + + struct vtype_data *type; +}; + +/*****************************************************/ + + +enum rType { + RTNone = 0, + RTAnd, + RTOr, + RTNot, + RTContent, + RTProperty, + RTProximity, + RTVector, + RTNatLanguage, + RTScope, + RTCoerce_Add, + RTCoerce_Multiply, + RTCoerce_Absolute, + RTProb, + RTFeedback, + RTReldoc, + RTReuseWhere = 0x11, + RTInternalProp = 0x00fffffa, + RTPhrase = 0x00fffffd +}; + + +struct CRestriction; + +enum relop { + PRLT = 0, + PRLE, + PRGT, + PRGE, + PREQ, + PRNE, + PRRE, + PRAllBits, + PRSomeBits, + PRAll = 0x100, + PRAny = 0x200 +}; + +enum PRSPEC_Kind { + PRSPEC_LPWSTR = 0, + PRSPEC_PROPID +}; + +/* 2.2.1.2 */ +struct CFullPropSpec { + e_guid_t guid; + enum PRSPEC_Kind kind; + union { + guint32 propid; + char *name; + } u; +}; + +/* 2.2.1.7 */ +struct CPropertyRestriction { + guint32 relop; /*with value enum relop*/ + struct CFullPropSpec property; + struct CBaseStorageVariant prval; + guint32 lcid; +}; + +/* 2.2.1.6 */ +struct CNodeRestriction { + guint32 cNode; + struct CRestriction *paNode; +}; + +/* 2.2.1.17 */ +struct CRestriction { + enum rType ulType; + guint32 Weight; + union { + struct CNodeRestriction *RTAnd, *RTOr, *RTProximity, *RTPhrase; + struct CRestriction *RTNot; + struct CContentRestriction *RTContent; + struct CPropertyRestriction *RTProperty; + struct CVectorRestriction *RTVector; + struct CNatLanguageRestriction *RTNatLanguage; + struct CScopeRestriction *RTScope; + struct CReuseWhere *RTReuseWhere; + struct CInternalPropertyRestriction *RTInternalProp; + struct CCoercionRestriction *RTCoerce_Add, *RTCoerce_Multiply, *RTCoerce_Absolute; + } u; +}; + + +/* 2.2.1.12 */ +struct CCoercionRestriction { + float value; + struct CRestriction child; +}; + +/* 2.2.1.3 */ +struct CContentRestriction { + struct CFullPropSpec property; + const char *phrase; + guint32 lcid; + guint32 method; +}; + +/* 2.2.1.8 */ +struct CReuseWhere /*Restriction*/ { + guint32 whereId; +}; + +/* 2.2.1.5 */ +struct CNatLanguageRestriction { + struct CFullPropSpec property; + const char *phrase; + guint32 lcid; +}; + +#define PROP_LENGTH 255 + +/* 2.2.1.44 */ +struct CTableColumn { + /*struct CFullPropSpec propspec;*/ + guint32 vtype; + guint8 aggregateused; + guint8 aggregatetype; + guint8 valueused; + guint16 valueoffset; + guint16 valuesize; + guint8 statusused; + guint16 statusoffset; + guint8 lengthused; + guint16 lengthoffset; + char name[PROP_LENGTH]; +}; + +/* 2.2.3.10 */ + +struct CPMSetBindingsIn { + guint32 hcursor; + guint32 brow; + guint32 bbindingdesc; + guint32 dummy; + guint32 ccolumns; + struct CTableColumn *acolumns; +}; + +struct vector_or_array_64 { + guint64 count; + guint64 array_address; +}; + +struct vector_or_array_32 { + guint32 count; + guint32 array_address; +}; + +/* 2.2.1.42 */ +struct CRowVariant { + guint16 vtype; + guint16 reserved1; + guint32 reserved2; + union { + guint8 byte; + guint16 shortw; + guint32 longw; + guint64 hyperw; + union { + struct vector_or_array_64 i64; + struct vector_or_array_32 i32; + } array_vector; + } content; +}; + +static int SMB1 = 1; +static int SMB2 = 2; + +/* Forward declaration we need below (if using proto_reg_handoff... + as a prefs callback) */ +void proto_reg_handoff_mswsp(void); + +/* Initialize the protocol and registered fields */ +static int proto_mswsp = -1; +static int hf_mswsp_msg = -1; +static int hf_mswsp_hdr = -1; +static int hf_mswsp_hdr_msg = -1; +static int hf_mswsp_hdr_status = -1; +static int hf_mswsp_hdr_checksum = -1; +static int hf_mswsp_hdr_reserved = -1; +static int hf_mswsp_msg_Connect_Version = -1; +static int hf_mswsp_msg_ConnectIn_ClientIsRemote = -1; +static int hf_mswsp_msg_ConnectIn_Blob1 = -1; +static int hf_mswsp_msg_ConnectIn_MachineName = -1; +static int hf_mswsp_msg_ConnectIn_UserName = -1; +static int hf_mswsp_msg_ConnectIn_PropSets_num = -1; +static int hf_mswsp_bool_options = -1; +static int hf_mswsp_bool_options_cursor = -1; +static int hf_mswsp_bool_options_async = -1; +static int hf_mswsp_bool_options_firstrows = -1; +static int hf_mswsp_bool_options_holdrows = -1; +static int hf_mswsp_bool_options_chaptered = -1; +static int hf_mswsp_bool_options_useci = -1; +static int hf_mswsp_bool_options_defertrim = -1; +static int hf_mswsp_bool_options_rowsetevents = -1; +static int hf_mswsp_bool_options_dontcomputeexpensive = -1; +static int hf_mswsp_guid_time_low = -1; +static int hf_mswsp_guid_time_mid = -1; +static int hf_mswsp_guid_time_high = -1; +static int hf_mswsp_guid_time_clock_hi = -1; +static int hf_mswsp_guid_time_clock_low = -1; +static int hf_mswsp_guid_node = -1; +static int hf_mswsp_lcid = -1; +static int hf_mswsp_lcid_sortid = -1; +static int hf_mswsp_lcid_langid = -1; +static int hf_mswsp_cscort_column = -1; +static int hf_mswsp_cscort_order = -1; +static int hf_mswsp_cscort_individual = -1; +static int hf_mswsp_cscortset_count = -1; +static int hf_mswsp_ctablecolumn_vtype = -1; +static int hf_mswsp_ctablecolumn_aggused = -1; +static int hf_mswsp_ctablecolumn_aggtype = -1; +static int hf_mswsp_ctablecolumn_valused = -1; +static int hf_mswsp_ctablecolumn_valoffset = -1; +static int hf_mswsp_ctablecolumn_valsize = -1; +static int hf_mswsp_ctablecolumn_statused = -1; +static int hf_mswsp_ctablecolumn_statoffset = -1; +static int hf_mswsp_ctablecolumn_lenused = -1; +static int hf_mswsp_ctablecolumn_lenoffset = -1; +static int hf_mswsp_cfullpropspec_kind = -1; +static int hf_mswsp_cfullpropspec_propid = -1; +static int hf_mswsp_cfullpropspec_propname = -1; +static int hf_mswsp_cproprestrict_relop = -1; +static int hf_mswsp_ccoercerestrict_value = -1; +static int hf_mswsp_ccontentrestrict_cc = -1; +static int hf_mswsp_ccontentrestrict_phrase = -1; +static int hf_mswsp_ccontentrestrict_method = -1; +static int hf_mswsp_natlangrestrict_cc = -1; +static int hf_mswsp_natlangrestrict_phrase = -1; +static int hf_mswsp_crestrict_ultype = -1; +static int hf_mswsp_crestrict_weight = -1; +static int hf_mswsp_crestrictarray_count = -1; +static int hf_mswsp_crestrictarray_present = -1; +static int hf_mswsp_cnoderestrict_cnode = -1; +static int hf_mswsp_cbasestorvariant_vtype = -1; +static int hf_mswsp_cbasestorvariant_vvalue = -1; +static int hf_mswsp_cbasestorvariant_vdata1 = -1; +static int hf_mswsp_cbasestorvariant_vdata2 = -1; +static int hf_mswsp_cbasestorvariant_num = -1; +static int hf_mswsp_cbasestorvariant_cdims = -1; +static int hf_mswsp_cbasestorvariant_ffeatures = -1; +static int hf_mswsp_cbasestorvariant_cbelements = -1; +static int hf_mswsp_cbasestorvariant_rgsabound = -1; +static int hf_mswsp_cdbcolid_ekind = -1; +static int hf_mswsp_cdbcolid_ulid = -1; +static int hf_mswsp_cdbcolid_vstring = -1; +static int hf_mswsp_cdbprop_id = -1; +static int hf_mswsp_cdbprop_options = -1; +static int hf_mswsp_cdbprop_status = -1; +static int hf_mswsp_cdbpropset_cprops = -1; +static int hf_mswsp_rangeboundry_ultype = -1; +static int hf_mswsp_rangeboundry_labelpresent = -1; +static int hf_mswsp_rangeboundry_cclabel = -1; +static int hf_mswsp_rangeboundry_label = -1; +static int hf_mswsp_crangecategspec_crange = -1; +static int hf_mswsp_ccategspec_type = -1; +static int hf_mswsp_caggregspec_type = -1; +static int hf_mswsp_caggregspec_ccalias = -1; +static int hf_mswsp_caggregspec_alias = -1; +static int hf_mswsp_caggregspec_idcolumn = -1; +static int hf_mswsp_caggregset_count = -1; +static int hf_mswsp_caggregsortkey_order = -1; +static int hf_mswsp_csortaggregset_count = -1; +static int hf_mswsp_cingroupsortaggregset_type = -1; +static int hf_mswsp_cingroupsortaggregsets_count = -1; +static int hf_mswsp_categorizationspec_cmaxres= -1; +static int hf_mswsp_crowsetprops_ulmaxopenrows = -1; +static int hf_mswsp_crowsetprops_ulmemusage = -1; +static int hf_mswsp_crowsetprops_cmaxresults = -1; +static int hf_mswsp_crowsetprops_ccmdtimeout = -1; +static int hf_mswsp_cpidmapper_count = -1; +static int hf_mswsp_ccolumngroup_count = -1; +static int hf_mswsp_ccolumngroup_grouppid = -1; +static int hf_mswsp_ccolumngroup_pid = -1; +static int hf_mswsp_ccolumngrouparray_count = -1; +static int hf_mswsp_int32array_value = -1; +static int hf_mswsp_crowseeknext_cskip = -1; +static int hf_mswsp_crowseekat_bmkoffset = -1; +static int hf_mswsp_crowseekat_skip = -1; +static int hf_mswsp_crowseekat_hregion = -1; +static int hf_mswsp_crowseekatratio_ulnumerator = -1; +static int hf_mswsp_crowseekatratio_uldenominator = -1; +static int hf_mswsp_crowseekatratio_hregion = -1; +static int hf_mswsp_crowseekbybookmark_cbookmarks = -1; +static int hf_mswsp_crowseekbybookmark_maxret = -1; +static int hf_mswsp_crowvariantinfo_count64 = -1; +static int hf_mswsp_arrayvector_address64 = -1; +static int hf_mswsp_crowvariantinfo_count32 = -1; +static int hf_mswsp_arrayvector_address32 = -1; +static int hf_mswsp_rowvariant_item_address64 = -1; +static int hf_mswsp_rowvariant_item_address32 = -1; +static int hf_mswsp_rowvariant_item_value = -1; +static int hf_mswsp_rowvariant_vtype = -1; +static int hf_mswsp_rowvariant_reserved1 = -1; +static int hf_mswsp_rowvariant_reserved2 = -1; +static int hf_mswsp_ctablecolumn_status = -1; +static int hf_mswsp_ctablecolumn_length = -1; +static int hf_mswsp_msg_cpmcreatequery_size = -1; +static int hf_mswsp_msg_cpmcreatequery_ccolumnsetpresent = -1; +static int hf_mswsp_msg_cpmcreatequery_crestrictionpresent = -1; +static int hf_mswsp_msg_cpmcreatequery_csortpresent = -1; +static int hf_mswsp_msg_cpmcreatequery_csortset_xxx = -1; +static int hf_mswsp_msg_cpmcreatequery_ccategpresent = -1; +static int hf_mswsp_msg_cpmcreatequery_ccateg_count = -1; +static int hf_mswsp_msg_cpmcreatequery_trueseq = -1; +static int hf_mswsp_msg_cpmcreatequery_workid = -1; +static int hf_mswsp_msg_cpmcreatequery_cursors = -1; +static int hf_mswsp_msg_cpmgetrows_hcursor = -1; +static int hf_mswsp_msg_cpmgetrows_rowstotransfer = -1; +static int hf_mswsp_msg_cpmgetrows_rowwidth = -1; +static int hf_mswsp_msg_cpmgetrows_cbseek = -1; +static int hf_mswsp_msg_cpmgetrows_cbreserved = -1; +static int hf_mswsp_msg_cpmgetrows_cbreadbuffer = -1; +static int hf_mswsp_msg_cpmgetrows_ulclientbase = -1; +static int hf_mswsp_msg_cpmgetrows_fbwdfetch = -1; +static int hf_mswsp_msg_cpmgetrows_etype = -1; +static int hf_mswsp_msg_cpmgetrows_chapt = -1; +static int hf_mswsp_msg_cpmgetrows_crowsreturned = -1; +static int hf_mswsp_msg_cpmratiofinished_hcursor = -1; +static int hf_mswsp_msg_cpmratiofinished_fquick = -1; +static int hf_mswsp_msg_cpmratiofinished_ulnumerator = -1; +static int hf_mswsp_msg_cpmratiofinished_uldenominator = -1; +static int hf_mswsp_msg_cpmratiofinished_crows = -1; +static int hf_mswsp_msg_cpmratiofinished_fnewrows = -1; +static int hf_mswsp_msg_cpmcomparebmk_hcursor = -1; +static int hf_mswsp_msg_cpmcomparebmk_chapt = -1; +static int hf_mswsp_msg_cpmcomparebmk_bmkfirst = -1; +static int hf_mswsp_msg_cpmcomparebmk_bmksecond = -1; +static int hf_mswsp_msg_cpmcomparebmk_dwcomparison = -1; +static int hf_mswsp_msg_cpmgetapproxpos_hcursor = -1; +static int hf_mswsp_msg_cpmgetapproxpos_chapt = -1; +static int hf_mswsp_msg_cpmgetapproxpos_bmk = -1; +static int hf_mswsp_msg_cpmgetapproxpos_numerator = -1; +static int hf_mswsp_msg_cpmgetapproxpos_denominator = -1; +static int hf_mswsp_msg_cpmsetbinding_hcursor = -1; +static int hf_mswsp_msg_cpmsetbinding_cbrow = -1; +static int hf_mswsp_msg_cpmsetbinding_desc = -1; +static int hf_mswsp_msg_cpmsetbinding_dummy = -1; +static int hf_mswsp_msg_cpmsetbinding_ccolumns = -1; +static int hf_mswsp_msg_cpmsetbinding_acolumns = -1; +static int hf_mswsp_msg_cpmsendnotify_watchnotify = -1; +static int hf_mswsp_msg_cpmgetquerystatus_hcursor = -1; +static int hf_mswsp_msg_cpmgetquerystatus_qstatus = -1; +static int hf_mswsp_msg_cpmcistate_cbstruct = -1; +static int hf_mswsp_msg_cpmcistate_cwordlist = -1; +static int hf_mswsp_msg_cpmcistate_cpersistindex = -1; +static int hf_mswsp_msg_cpmcistate_cqueries = -1; +static int hf_mswsp_msg_cpmcistate_cfreshtest = -1; +static int hf_mswsp_msg_cpmcistate_dwmergeprogress = -1; +static int hf_mswsp_msg_cpmcistate_estate = -1; +static int hf_mswsp_msg_cpmcistate_cfiltereddocs = -1; +static int hf_mswsp_msg_cpmcistate_ctotaldocs = -1; +static int hf_mswsp_msg_cpmcistate_cpendingscans = -1; +static int hf_mswsp_msg_cpmcistate_dwindexsize = -1; +static int hf_mswsp_msg_cpmcistate_cuniquekeys = -1; +static int hf_mswsp_msg_cpmcistate_csecqdocuments = -1; +static int hf_mswsp_msg_cpmcistate_dwpropcachesize = -1; +static int hf_mswsp_msg_cpmfetchvalue_wid = -1; +static int hf_mswsp_msg_cpmfetchvalue_cbsofar = -1; +static int hf_mswsp_msg_cpmfetchvalue_cbpropspec = -1; +static int hf_mswsp_msg_cpmfetchvalue_cbchunk = -1; +static int hf_mswsp_msg_cpmfetchvalue_cbvalue = -1; +static int hf_mswsp_msg_cpmfetchvalue_fmoreexists = -1; +static int hf_mswsp_msg_cpmfetchvalue_fvalueexists = -1; +static int hf_mswsp_msg_cpmfetchvalue_vvalue = -1; +static int hf_mswsp_msg_cpmquerystatusex_hcursor = -1; +static int hf_mswsp_msg_cpmquerystatusex_bmk = -1; +static int hf_mswsp_msg_cpmquerystatusex_qstatus = -1; +static int hf_mswsp_msg_cpmquerystatusex_cfiltereddocs = -1; +static int hf_mswsp_msg_cpmquerystatusex_cdocstofilter = -1; +static int hf_mswsp_msg_cpmquerystatusex_dwratiodenom = -1; +static int hf_mswsp_msg_cpmquerystatusex_dwrationumer = -1; +static int hf_mswsp_msg_cpmquerystatusex_irowbmk = -1; +static int hf_mswsp_msg_cpmquerystatusex_crowstotal = -1; +static int hf_mswsp_msg_cpmquerystatusex_maxrank = -1; +static int hf_mswsp_msg_cpmquerystatusex_cresultsfound = -1; +static int hf_mswsp_msg_cpmquerystatusex_whereid = -1; +static int hf_mswsp_msg_cpmrestartposition_hcursor = -1; +static int hf_mswsp_msg_cpmrestartposition_chapt = -1; +static int hf_mswsp_msg_cpmgetrowsetnotify_wid = -1; +static int hf_mswsp_msg_cpmgetrowsetnotify_moreevents = -1; +static int hf_mswsp_msg_cpmgetrowsetnotify_eventtype = -1; +static int hf_mswsp_msg_cpmgetrowsetnotify_rowsetitemstate = -1; +static int hf_mswsp_msg_cpmgetrowsetnotify_changeditemstate = -1; +static int hf_mswsp_msg_cpmgetrowsetnotify_rowsetevent = -1; +static int hf_mswsp_msg_cpmgetrowsetnotify_rowseteventdata1 = -1; +static int hf_mswsp_msg_cpmgetrowsetnotify_rowseteventdata2 = -1; +static int hf_mswsp_msg_cpmfindindices_cwids = -1; +static int hf_mswsp_msg_cpmfindindices_cdepthprev = -1; +static int hf_mswsp_msg_cpmfindindices_cdepthnext = -1; +static int hf_mswsp_msg_cpmsetscopeprioritization_priority = -1; +static int hf_mswsp_msg_cpmsetscopeprioritization_eventfreq = -1; +static int hf_mswsp_msg_cpmsetscopestatisics_dwindexitems = -1; +static int hf_mswsp_msg_cpmsetscopestatisics_dwoutstandingadds = -1; +static int hf_mswsp_msg_cpmsetscopestatisics_dwoutstandingmodifies = -1; +/* Global sample preference ("controls" display of numbers) */ +static gboolean gPREF_HEX = FALSE; +/* Global sample port pref */ +static guint gPORT_PREF = 1234; + +/* Initialize the subtree pointers */ +static gint ett_mswsp = -1; +static gint ett_mswsp_hdr = -1; +static gint ett_mswsp_msg = -1; +static gint ett_mswsp_pad = -1; + +static gint ett_mswsp_property_restriction = -1; +static gint ett_CRestrictionArray = -1; +static gint ett_CBaseStorageVariant = -1; +static gint ett_CBaseStorageVariant_Vector = -1; +static gint ett_CBaseStorageVariant_Array = -1; +static gint ett_CDbColId = -1; +static gint ett_GUID = -1; +static gint ett_CDbProp = -1; +static gint ett_CDbPropSet = -1; +static gint ett_CDbPropSet_Array = -1; +static gint ett_CRestriction = -1; +static gint ett_CNodeRestriction = -1; +static gint ett_CPropertyRestriction = -1; +static gint ett_CCoercionRestriction = -1; +static gint ett_CContentRestriction = -1; +static gint ett_RANGEBOUNDARY = -1; +static gint ett_CRangeCategSpec = -1; +static gint ett_CCategSpec = -1; +static gint ett_CAggregSpec = -1; +static gint ett_CAggregSet = -1; +static gint ett_CCategorizationSpec = -1; +static gint ett_CAggregSortKey = -1; +static gint ett_CSortAggregSet = -1; +static gint ett_CInGroupSortAggregSet = -1; +static gint ett_CInGroupSortAggregSets = -1; +static gint ett_CRowsetProperties = -1; +static gint ett_CFullPropSpec = -1; +static gint ett_CPidMapper = -1; +static gint ett_CSort = -1; +static gint ett_CSortSet = -1; +static gint ett_CNatLanguageRestriction = -1; +static gint ett_CColumnGroup = -1; +static gint ett_CColumnGroupArray = -1; +static gint ett_LCID = -1; +static gint ett_CTableColumn = -1; +static gint ett_Array = -1; +static gint ett_SeekDescription = -1; +static gint ett_CRowsSeekNext = -1; +static gint ett_CRowsSeekAt = -1; +static gint ett_CRowsSeekAtRatio = -1; +static gint ett_CRowsSeekByBookmark = -1; +static gint ett_GetRowsRow = -1; +static gint ett_GetRowsColumn = -1; +static gint ett_CRowVariant = -1; +static gint ett_CRowVariant_Vector = -1; +static gint ett_mswsp_bool_options = -1; +static gint ett_mswsp_uin32_array = -1; +static gint ett_mswsp_msg_padding = -1; +static gint ett_mswsp_msg_creusewhere = -1; + +static struct vtype_data *vType_get_type(guint16 t); + +/* converstation related data */ +struct rows_data { + guint32 ulclientbase; + guint32 cbreserved; +}; + + +struct message_data { + guint32 fid; + guint frame; + guint16 msg_id; + gboolean is_request; + int smb_level; + union { + struct CPMSetBindingsIn bindingsin;/* CPMBindingIn request */ + struct rows_data rowsin; /*CPMGetRowsIn request*/ + guint32 version; /*CPMConnectIn requst/respose */ + } content; +}; + +struct mswsp_ct { + GSList *GSL_message_data; +}; + +static gint msg_data_find(struct message_data *a, struct message_data *b) +{ + if (a->fid == b->fid + && a->frame == b->frame + && a->msg_id == b->msg_id + && a->smb_level == b->smb_level + && a->is_request == b->is_request) { + return 0; + } + return 1; +} +static smb_fid_info_t *find_fid_info(smb_info_t *si) +{ + smb_fid_info_t *fid_info = NULL; + smb_transact_info_t *tri = (smb_transact_info_t *)((si->sip->extra_info_type == SMB_EI_TRI) ? si->sip->extra_info : NULL); + GSList *iter; + guint32 fid = 0; + + if (tri == NULL) { + /* fallback to try search visited RWINFO (for AndX request/response) */ + if (si->sip && (si->sip->extra_info_type == SMB_EI_RWINFO)) { + fid = si->sip->fid; + } + } else { + fid = tri->fid; + } + + + if (!fid) { + return NULL; + } + for (iter = si->ct->GSL_fid_info; iter; iter = g_slist_next(iter)) { + smb_fid_info_t *info = (smb_fid_info_t *)iter->data; + if ((info->tid == si->tid) && (info->fid == fid)) { + fid_info = info; + break; + } + } + return fid_info; +} + +static bool get_fid_and_frame(packet_info *pinfo, guint32 *fid, guint *frame, + void *data) +{ + bool result = true; + int *p_smb_level = (int*)p_get_proto_data(wmem_file_scope(), pinfo, proto_mswsp, 0); + if (!p_smb_level) { + return false; + } + *frame = pinfo->fd->num; + if (*p_smb_level == SMB1) { + smb_info_t *si = (smb_info_t*)data; + smb_fid_info_t *info; + info = find_fid_info(si); + if (!info) { + return false; + } + *fid = info->fid; + } else { + smb2_info_t *si2 = (smb2_info_t*)data; + guint32 open_frame = 0, close_frame = 0; + char *fid_name = NULL; + if (si2->saved) { + dcerpc_fetch_polhnd_data(&si2->saved->policy_hnd, &fid_name, NULL, &open_frame, &close_frame, pinfo->fd->num); + *fid = open_frame; + } else { + result = false; + } + } + return result; +} + +static GSList *conv_tables = NULL; + +static void +mswsp_init_protocol(void) +{ + GSList *table_iter; + if (conv_tables) { + for(table_iter = conv_tables; table_iter; + table_iter = g_slist_next(table_iter)) { + struct mswsp_ct *ct = (struct mswsp_ct *)table_iter->data; + /* should we free the elements the GSL_message_data */ + g_slist_free(ct->GSL_message_data); + g_free(ct); + } + g_slist_free(conv_tables); + conv_tables = NULL; + } +} + +static struct message_data *find_or_create_message_data(struct mswsp_ct *conv_data, packet_info *pinfo, guint16 msg_id, gboolean is_request, void *data) +{ + struct message_data to_find; + GSList *result = NULL; + int *p_smb_level = (int*)p_get_proto_data(wmem_file_scope(), pinfo, proto_mswsp, 0); + to_find.is_request = is_request; + to_find.msg_id = msg_id; + to_find.smb_level = *p_smb_level; + if (!get_fid_and_frame(pinfo, &to_find.fid, &to_find.frame, data)) { + return NULL; + } + result = g_slist_find_custom(conv_data->GSL_message_data, + &to_find, (GCompareFunc)msg_data_find); + if (!result) { + struct message_data *pdata = (struct message_data *)wmem_alloc(wmem_file_scope(), sizeof(struct message_data)); + *pdata = to_find; + conv_data->GSL_message_data = g_slist_prepend(conv_data->GSL_message_data, pdata); + return pdata; + } + return (struct message_data*)result->data; +} + +static struct mswsp_ct *get_create_converstation_data(packet_info *pinfo) +{ + struct mswsp_ct *ct = NULL; + conversation_t *conversation; + + + conversation = find_or_create_conversation(pinfo); + if (!conversation) { + goto out; + } + ct = (struct mswsp_ct*)conversation_get_proto_data(conversation, proto_mswsp); + if (!ct) { + ct = (struct mswsp_ct *)g_malloc(sizeof(struct mswsp_ct)); + ct->GSL_message_data = NULL; + /* store ct so it can be deallocated later */ + conv_tables = g_slist_prepend(conv_tables, ct); + conversation_add_proto_data(conversation, proto_mswsp, ct); + } +out: + return ct; +} + +static struct message_data * +find_matching_request_by_fid(struct mswsp_ct *ct, packet_info *pinfo, guint32 msg, gboolean in, void *private_data) +{ + guint32 fid; + guint frame; + GSList *iter; + int *p_smb_level = (int*)p_get_proto_data(wmem_file_scope(), pinfo, proto_mswsp, 0); + + struct message_data *result = NULL; + get_fid_and_frame(pinfo, &fid, &frame, private_data); + for (iter = ct->GSL_message_data; iter; iter = g_slist_next(iter)) { + struct message_data* data = (struct message_data*)iter->data; + if (data->frame < frame && data->fid == fid && data->is_request == in + && data->msg_id == msg && data->smb_level == *p_smb_level) { + result = data; + break; + } + } + return result; +} + +static struct CPMSetBindingsIn * +find_binding_msg_data(struct mswsp_ct *ct, packet_info *pinfo, void *private_data) +{ + struct CPMSetBindingsIn *result = NULL; + struct message_data *data = find_matching_request_by_fid(ct, pinfo, 0xD0, true, private_data); + if (data) { + result = &data->content.bindingsin; + } + return result; +} + +static struct rows_data * +find_rowsin_msg_data(struct mswsp_ct *ct, packet_info *pinfo, void *private_data) +{ + struct rows_data *result = NULL; + struct message_data *data = find_matching_request_by_fid(ct, pinfo, 0xCC, true, private_data); + if (data) { + result = &data->content.rowsin; + } + return result; +} + +static gboolean is_64bit_mode(struct mswsp_ct *ct, packet_info *pinfo, void *private_data) +{ + gboolean result = false; /* default to 32 bit */ + guint32 client_ver = 0; + guint32 server_ver = 0; + struct message_data *data = find_matching_request_by_fid(ct, pinfo, 0xC8, + true, private_data); + if (data) { + client_ver = data->content.version; + data = find_matching_request_by_fid(ct, pinfo, 0xC8, false, private_data); + if (data) { + server_ver = data->content.version; + result = (server_ver & 0xffff0000) && (client_ver & 0xffff0000); + } + } + return result; +} + +#define eSequential 0x00000001 +#define eLocateable 0x00000003 +#define eScrollable 0x00000007 +#define eAsynchronous 0x00000008 +#define eFirstRows 0x00000080 +#define eHoldRows 0x00000200 +#define eChaptered 0x00000800 +#define eUseCI 0x00001000 +#define eDeferTrimming 0x00002000 +#define eEnableRowsetEvents 0x00800000 +#define eDoNotComputeExpensiveProps 0x00400000 + +static const value_string cursor_vals[] = { + { eSequential, "eSequential" }, + { eLocateable, "eLocateable" }, + { eScrollable, "eScrollable" }, + { 0, NULL } +}; + + + +/******************************************************************************/ +struct GuidPropertySet { + e_guid_t guid; + const char *def; + const char *desc; + const value_string *id_map; +}; + +/* 2.2.1.31.1 */ +static const value_string DBPROPSET_FSCIFRMWRK_EXT_IDS[] = { + {0x02, "DBPROP_CI_CATALOG_NAME"}, + {0x03, "DBPROP_CI_INCLUDE_SCOPES"}, + {0x04, "DBPROP_CI_SCOPE_FLAGS"}, + {0x07, "DBPROP_CI_QUERY_TYPE"}, + {0, NULL} +}; + +static const value_string DBPROPSET_QUERYEXT_IDS[] = { + {0x02, "DBPROP_USECONTENTINDEX"}, + {0x03, "DBPROP_DEFERNONINDEXEDTRIMMING"}, + {0x04, "DBPROP_USEEXTENDEDDBTYPES"}, + {0x05, "DBPROP_IGNORENOISEONLYCLAUSES"}, + {0x06, "DBPROP_GENERICOPTIONS_STRING"}, + {0x07, "DBPROP_FIRSTROWS"}, + {0x08, "DBPROP_DEFERCATALOGVERIFICATION"}, + {0x0a, "DBPROP_GENERATEPARSETREE"}, + {0x0c, "DBPROP_FREETEXTANYTERM"}, + {0x0d, "DBPROP_FREETEXTUSESTEMMING"}, + {0x0e, "DBPROP_IGNORESBRI"}, + {0x10, "DBPROP_ENABLEROWSETEVENTS"}, + {0, NULL} +}; + +static const value_string DBPROPSET_CIFRMWRKCORE_EXT_IDS[] = { + {0x02, "DBPROP_MACHINE"}, + {0x03, "DBPROP_CLIENT_CLSID"}, + {0, NULL} +}; + +static const value_string DBPROPSET_MSIDXS_ROWSETEXT_IDS[] = { + {0x02, "MSIDXSPROP_ROWSETQUERYSTATUS"}, + {0x03, "MSIDXSPROP_COMMAND_LOCALE_STRING"}, + {0x04, "MSIDXSPROP_QUERY_RESTRICTION"}, + {0x05, "MSIDXSPROP_PARSE_TREE"}, + {0x06, "MSIDXSPROP_MAX_RANK"}, + {0x07, "MSIDXSPROP_RESULTS_FOUND"}, + {0, NULL} +}; + +/* 2.2.5.1 */ +static const value_string QueryGuid_IDS[] = { + {0x02, "RankVector"}, + {0x03, "System.Search.Rank"}, + {0x04, "System.Search.HitCount"}, + {0x05, "System.Search.EntryID"}, + {0x06, "All"}, + {0x8, "System.Search.ReverseFileName"}, + {0x09, "System.ItemURL"}, + {0xa, "System.ContentUrl"}, + {0, NULL} +}; + +/* 2.2.5.2 */ +static const value_string StorageGuid_IDS[] = { + {0x02, "System.ItemFolderNameDisplay"}, + {0x03, "ClassId"}, + {0x04, "System.ItemTypeText"}, + {0x08, "FileIndex"}, + {0x09, "USN"}, + {0x0a, "System.ItemNameDisplay"}, + {0x0b, "Path"}, + {0x0c, "System.Size"}, + {0x0d, "System.FileAttributes"}, + {0x0e, "System.DateModified"}, + {0x0f, "System.DateCreated"}, + {0x10, "System.DateAccessed"}, + {0x12, "AllocSize"}, + {0x13, "System.Search.Contents"}, + {0x14, "ShortFilename"}, + {0x15, "System.FileFRN"}, + {0x16, "Scope"}, + {0, NULL} +}; + +static const value_string DocPropSetGuid_IDS[] = { + {0x02, "System.Title"}, + {0x03, "System.Subject"}, + {0x04, "System.Author"}, + {0x05, "System.Keywords"}, + {0x06, "System.Comment"}, + {0x07, "DocTemplate"}, + {0x08, "System.Document.LastAuthor"}, + {0x09, "System.Document.RevisionNumber"}, + {0x0a, "System.Document.TotalEditTime"}, + {0x0b, "System.Document.DatePrinted"}, + {0x0c, "System.Document.DateCreated"}, + {0x0d, "System.Document.DateSaved"}, + {0x0e, "System.Document.PageCount"}, + {0x0f, "System.Document.WordCount"}, + {0x10, "System.Document.CharacterCount"}, + {0x11, "DocThumbnail"}, + {0x12, "System.ApplicationName"}, + {0, NULL} +}; + +static const value_string ShellDetails_IDS[] = { + { 5, "System.ComputerName"}, + { 8, "System.ItemPathDisplayNarrow"}, + { 9, "PercivedType"}, + {11, "System.ItemType"}, + {12, "FileCount"}, + {14, "TotalFileSize"}, + {24, "System.ParsingName"}, + {25, "System.SFGAOFlags"}, + {0, NULL} +}; + +static const value_string PropSet1_IDS[] = { + {100, "System.ThumbnailCacheId"}, + {0, NULL} +}; + +static const value_string PropSet2_IDS[] = { + {3, "System.Kind"}, + {0, NULL} +}; + +static const value_string MusicGuid_IDS[] = { + {0x2, "System.Music.Artist"}, + {0x4, "System.Music.AlbumTitle"}, + {0x5, "System.Media.Year"}, + {0x7, "System.Music.TrackNumber"}, + {0xb, "System.Music.Genre"}, + {0xc, "System.Music.Lyrics"}, + {0xd, "System.Music.AlbumArtist"}, + {0x21, "System.Music.ContentGroupDescription"}, + {0x22, "System.Music.InitialKey"}, + {0x23, "System.Music.BeatsPerMinute"}, + {0x24, "System.Music.Conductor"}, + {0x25, "System.Music.PartOfSet"}, + {0x26, "System.Media.SubTitle"}, + {0x27, "System.Music.Mood"}, + {0x64, "System.Music.AlbumID"}, + {0, NULL} +}; + +static const value_string PropSet3_IDS[] = { + { 2, "System.Message.BccAddress"}, + { 3, "System.Message.BccName"}, + { 4, "System.Message.CcAddress"}, + { 5, "System.Message.CcName"}, + { 6, "System.ItemFolderPathDisplay"}, + { 7, "System.ItemPathDisplay"}, + { 9, "System.Communication.AccountName"}, + {10, "System.IsRead"}, + {11, "System.Importance"}, + {12, "System.FlagStatus"}, + {13, "System.Message.FromAddress"}, + {14, "System.Message.FromName"}, + {15, "System.Message.Store"}, + {16, "System.Message.ToAddress"}, + {17, "System.Message.ToName"}, + {18, "System.Contact.WebPage"}, + {19, "System.Message.DateSent"}, + {20, "System.Message.DateReceived"}, + {21, "System.Message.AttachmentNames"}, + {0, NULL} +}; + +static const value_string PropSet4_IDS[] = { + {100, "System.ItemFolderPathDisplayNarrow"}, + {0, NULL} +}; + +static const value_string PropSet5_IDS[] = { + {100, "System.Contact.FullName"}, + {0, NULL} +}; + +static const value_string PropSet6_IDS[] = { + {100, "System.ItemAuthors"}, + {0, NULL} +}; + +static const value_string PropSet7_IDS[] = { + {2, "System.Shell.OmitFromView"}, + {0, NULL} +}; + +static const value_string PropSet8_IDS[] = { + {2, "System.Shell.SFGAOFlagsStrings"}, + {3, "System.Link.TargetSFGAOFlagsStrings"}, + {0, NULL} +}; + +static const value_string PropSet9_IDS[] = { + {100, "System.ItemDate"}, + {0, NULL} +}; + +static const value_string PropSet10_IDS[] = { + { 5, "System.MIMEType"}, + { 8, "System.Search.GatherTime"}, + { 9, "System.Search.AccessCount"}, + {11, "System.Search.LastIndexedTotalTime"}, + {0, NULL} +}; + +static const value_string PropSet11_IDS[] = { + {5, "System.Priority"}, + {8, "System.Message.HasAttachments"}, + {0, NULL} +}; + +static const value_string DocCharacter_IDS[] = { + {2, "System.Search.Autosummary"}, + {0, NULL} +}; + +static const value_string PropSet12_IDS[] = { + {100, "System.IsDeleted"}, + {0, NULL} +}; + +static const value_string PropSet13_IDS[] = { + {100, "System.IsAttachment"}, + {0, NULL} +}; + +static const value_string PropSet14_IDS[] = { + {100, "System.Message.ConversationID"}, + {101, "System.Message.ConversationIndex"}, + {0, NULL} +}; + +static const value_string DocPropSetGuid2_IDS[] = { + {0x02, "System.Category"}, + {0x03, "System.Document.PresentationFormat"}, + {0x04, "System.Document.ByteCount"}, + {0x05, "System.Document.LineCount"}, + {0x06, "System.Document.ParagraphCount"}, + {0x07, "System.Document.SlideCount"}, + {0x08, "DocNoteCount"}, + {0x09, "System.Document.HiddenSlideCount"}, + {0x0D, "DocPartTitles"}, + {0x0E, "System.Document.Manager"}, + {0x0F, "System.Company"}, + {0x1A, "System.ContentType"}, + {0x1B, "System.ContentStatus"}, + {0x1C, "System.Language"}, + {0x1D, "System.Document.Version"}, + {0, NULL} +}; + +static const value_string SystemContact_IDS[] = { + { 6, "System.Contact.JobTitle"}, + { 7, "System.Contact.OfficeLocation"}, + {20, "System.Contact.HomeTelephone"}, + {25, "System.Contact.PrimaryTelephone"}, + {35, "System.Contact.MobileTelephone"}, + {47, "System.Contact.Birthday"}, + {48, "System.Contact.PrimaryEmailAddress"}, + {65, "System.Contact.HomeAddressCity"}, + {69, "System.Contact.PersonalTitle"}, + {71, "System.Contact.MiddleName"}, + {73, "System.Contact.Suffix"}, + {74, "System.Contact.NickName"}, + {0, NULL} +}; + +static const value_string PropSet15_IDS[] = { + {0x64, "System.Calendar.IsOnline"}, + {0,NULL} +}; + +static const value_string PropSet16_IDS[] = { + {0x64, "System.Contact.OtherAddressStreet"}, + {0,NULL} +}; + +static const value_string PropSet17_IDS[] = { + {0x2, "System.DRM.IsProtected"}, + {0,NULL} +}; + +static const value_string PropSet18_IDS[] = { + {0x64, "System.Calendar.OptionalAttendeeNames"}, + {0,NULL} +}; + +static const value_string PropSet19_IDS[] = { + {0x64, "System.Calendar.ShowTimeAs"}, + {0,NULL} +}; + +static const value_string PropSet20_IDS[] = { + {0x64, "System.ParentalRatingReason"}, + {0,NULL} +}; + +static const value_string PropSet21_IDS[] = { + {0x64, "System.Project"}, + {0,NULL} +}; + +static const value_string PropSet22_IDS[] = { + {0x64, "System.Contact.OtherAddressCountry"}, + {0,NULL} +}; + +static const value_string PropSet23_IDS[] = { + {0x9, "System.Status"}, + {0,NULL} +}; + +static const value_string PropSet24_IDS[] = { + {0x64, "System.DateArchived"}, + {0,NULL} +}; + +static const value_string PropSet25_IDS[] = { + {0x64, "System.Contact.CarTelephone"}, + {0,NULL} +}; + +static const value_string PropSet26_IDS[] = { + {0x64, "System.Calendar.ResponseStatus"}, + {0,NULL} +}; + +static const value_string PropSet27_IDS[] = { + {0x64, "System.Task.BillingInformation"}, + {0,NULL} +}; + +static const value_string PropSet28_IDS[] = { + {0x64, "System.Media.AverageLevel"}, + {0,NULL} +}; + +static const value_string PropSet29_IDS[] = { + {0x64, "System.Contact.SpouseName"}, + {0,NULL} +}; + +static const value_string PropSet30_IDS[] = { + {0x64, "System.Document.DocumentID"}, + {0,NULL} +}; + +static const value_string PropSet31_IDS[] = { + {0x64, "System.RecordedTV.NetworkAffiliation"}, + {0,NULL} +}; + +static const value_string PropSet32_IDS[] = { + {0x64, "System.PriorityText"}, + {0,NULL} +}; + +static const value_string PropSet33_IDS[] = { + {0x64, "System.Contact.Children"}, + {0,NULL} +}; + +static const value_string PropSet34_IDS[] = { + {0x64, "System.RecordedTV.RecordingTime"}, + {0,NULL} +}; + +static const value_string PropSet35_IDS[] = { + {0x64, "System.FlagColorText"}, + {0,NULL} +}; + +static const value_string PropSet36_IDS[] = { + {0x64, "System.Contact.OtherAddressPostalCode"}, + {0,NULL} +}; + +static const value_string PropSet37_IDS[] = { + {0x64, "System.Photo.SharpnessText"}, + {0,NULL} +}; + +static const value_string PropSet38_IDS[] = { + {0x64, "System.Contact.OtherAddress"}, + {0,NULL} +}; + +static const value_string PropSet40_IDS[] = { + {0x64, "System.Contact.BusinessAddress"}, + {0,NULL} +}; + +static const value_string PropSet41_IDS[] = { + {0x64, "System.IsIncomplete"}, + {0,NULL} +}; + +static const value_string PropSet42_IDS[] = { + {0x64, "System.Contact.EmailAddress2"}, + {0,NULL} +}; + +static const value_string PropSet43_IDS[] = { + {0x64, "System.Contact.BusinessTelephone"}, + {0,NULL} +}; + +static const value_string PropSet45_IDS[] = { + {0x64, "System.Image.CompressionText"}, + {0,NULL} +}; + +static const value_string PropSet46_IDS[] = { + {0x64, "System.Contact.HomeAddressState"}, + {0,NULL} +}; + +static const value_string PropSet47_IDS[] = { + {0x64, "System.Contact.EmailAddress3"}, + {0,NULL} +}; + +static const value_string PropSet48_IDS[] = { + {0x64, "System.Communication.FollowupIconIndex"}, + {0,NULL} +}; + +static const value_string PropSet49_IDS[] = { + {0x64, "System.Photo.TagViewAggregate"}, + {0,NULL} +}; + +static const value_string PropSet50_IDS[] = { + {0x64, "System.Search.Store"}, + {0,NULL} +}; + +static const value_string PropSet51_IDS[] = { + {0x64, "System.FileName"}, + {0,NULL} +}; + +static const value_string PropSet52_IDS[] = { + {0x64, "System.Contact.HomeAddressStreet"}, + {0,NULL} +}; + +static const value_string PropSet53_IDS[] = { + {0x64, "System.Contact.HomeAddressPostalCode"}, + {0,NULL} +}; + +static const value_string PropSet54_IDS[] = { + {0x64, "System.Contact.BusinessHomePage"}, + {0,NULL} +}; + +static const value_string PropSet55_IDS[] = { + {0x64, "System.Calendar.RequiredAttendeeNames"}, + {0,NULL} +}; + +static const value_string PropSet56_IDS[] = { + {0x64, "System.FlagColor"}, + {0,NULL} +}; + +static const value_string PropSet57_IDS[] = { + {0x64, "System.Message.ProofInProgress"}, + {0,NULL} +}; + +static const value_string PropSet58_IDS[] = { + {0x64, "System.Contact.PrimaryAddressPostOfficeBox"}, + {0,NULL} +}; + +static const value_string PropSet59_IDS[] = { + {0x64, "System.Calendar.IsRecurring"}, + {0,NULL} +}; + +static const value_string PropSet60_IDS[] = { + {0x64, "System.Contact.HomeAddress"}, + {0,NULL} +}; + +static const value_string PropSet61_IDS[] = { + {0x64, "System.Photo.MaxAperture"}, + {0,NULL} +}; + +static const value_string PropSet62_IDS[] = { + {0x64, "System.ItemParticipants"}, + {0,NULL} +}; + +static const value_string PropSet63_IDS[] = { + {0x64, "System.Media.DateReleased"}, + {0,NULL} +}; + +static const value_string PropSet64_IDS[] = { + {0x64, "System.Journal.Contacts"}, + {0,NULL} +}; + +static const value_string PropSet65_IDS[] = { + {0x64, "System.Calendar.Resources"}, + {0,NULL} +}; + +static const value_string PropSet66_IDS[] = { + {0x67, "System.Message.MessageClass"}, + {0,NULL} +}; + +static const value_string PropSet67_IDS[] = { + {0x9, "System.Rating"}, + {0xb, "System.Copyright"}, + {0xd, "System.Media.ClassPrimaryID"}, + {0xe, "System.Media.ClassSecondaryID"}, + {0xf, "System.Media.DVDID"}, + {0x10, "System.Media.MCDI"}, + {0x11, "System.Media.MetadataContentProvider"}, + {0x12, "System.Media.ContentDistributor"}, + {0x13, "System.Music.Composer"}, + {0x14, "System.Video.Director"}, + {0x15, "System.ParentalRating"}, + {0x16, "System.Media.Producer"}, + {0x17, "System.Media.Writer"}, + {0x18, "System.Media.CollectionGroupID"}, + {0x19, "System.Media.CollectionID"}, + {0x1a, "System.Media.ContentID"}, + {0x1b, "System.Media.CreatorApplication"}, + {0x1c, "System.Media.CreatorApplicationVersion"}, + {0x1e, "System.Media.Publisher"}, + {0x1f, "System.Music.Period"}, + {0x22, "System.Media.UserWebUrl"}, + {0x23, "System.Media.UniqueFileIdentifier"}, + {0x24, "System.Media.EncodedBy"}, + {0x26, "System.Media.ProtectionType"}, + {0x27, "System.Media.ProviderRating"}, + {0x28, "System.Media.ProviderStyle"}, + {0x29, "System.Media.UserNoAutoInfo"}, + {0,NULL} +}; + +static const value_string PropSet68_IDS[] = { + {0x64, "System.Calendar.OrganizerName"}, + {0,NULL} +}; + +static const value_string PropSet69_IDS[] = { + {0x64, "System.Photo.PeopleNames"}, + {0,NULL} +}; + +static const value_string PropSet70_IDS[] = { + {0x3, "System.Media.Duration"}, + {0x4, "System.Audio.EncodingBitrate"}, + {0x5, "System.Audio.SampleRate"}, + {0x6, "System.Audio.SampleSize"}, + {0x7, "System.Audio.ChannelCount"}, + {0,NULL} +}; + +static const value_string PropSet71_IDS[] = { + {0x64, "System.FileExtension"}, + {0,NULL} +}; + +static const value_string PropSet72_IDS[] = { + {0x103, "System.Image.Compression"}, + {0x10f, "System.Photo.CameraManufacturer"}, + {0x110, "System.Photo.CameraModel"}, + {0x112, "System.Photo.Orientation"}, + {0x131, "System.SoftwareUsed"}, + {0x4748, "System.Photo.Event"}, + {0x4752, "System.DateImported"}, + {0x829a, "System.Photo.ExposureTime"}, + {0x829d, "System.Photo.FNumber"}, + {0x8822, "System.Photo.ExposureProgram"}, + {0x8827, "System.Photo.ISOSpeed"}, + {0x9003, "System.Photo.DateTaken"}, + {0x9201, "System.Photo.ShutterSpeed"}, + {0x9202, "System.Photo.Aperture"}, + {0x9204, "System.Photo.ExposureBias"}, + {0x9206, "System.Photo.SubjectDistance"}, + {0x9207, "System.Photo.MeteringMode"}, + {0x9208, "System.Photo.LightSource"}, + {0x9209, "System.Photo.Flash"}, + {0x920a, "System.Photo.FocalLength"}, + {0,NULL} +}; + +static const value_string PropSet73_IDS[] = { + {0x64, "System.Contact.TTYTDDTelephone"}, + {0,NULL} +}; + +static const value_string PropSet74_IDS[] = { + {0x64, "System.Photo.PhotometricInterpretationText"}, + {0,NULL} +}; + +static const value_string PropSet75_IDS[] = { + {0x64, "System.Calendar.OptionalAttendeeAddresses"}, + {0,NULL} +}; + +static const value_string PropSet76_IDS[] = { + {0x64, "System.Calendar.ReminderTime"}, + {0,NULL} +}; + +static const value_string PropSet77_IDS[] = { + {0x64, "System.Calendar.RequiredAttendeeAddresses"}, + {0,NULL} +}; + +static const value_string PropSet78_IDS[] = { + {0x64, "System.Calendar.OrganizerAddress"}, + {0,NULL} +}; + +static const value_string PropSet79_IDS[] = { + {0x2, "System.Link.TargetParsingPath"}, + {0x8, "System.Link.TargetSFGAOFlags"}, + {0,NULL} +}; + +static const value_string PropSet80_IDS[] = { + {0x64, "System.Contact.Hobbies"}, + {0,NULL} +}; + +static const value_string PropSet81_IDS[] = { + {0x64, "System.Contact.HomeAddressPostOfficeBox"}, + {0,NULL} +}; + +static const value_string PropSet82_IDS[] = { + {0x64, "System.Contact.CompanyMainTelephone"}, + {0,NULL} +}; + +static const value_string PropSet83_IDS[] = { + {0x64, "System.IsFlagged"}, + {0,NULL} +}; + +static const value_string PropSet84_IDS[] = { + {0x64, "System.Contact.FirstName"}, + {0,NULL} +}; + +static const value_string PropSet85_IDS[] = { + {0xa, "System.IsEncrypted"}, + {0,NULL} +}; + +static const value_string PropSet86_IDS[] = { + {0x64, "System.Calendar.Duration"}, + {0,NULL} +}; + +static const value_string PropSet87_IDS[] = { + {0x64, "System.Contact.PrimaryAddressCity"}, + {0,NULL} +}; + +static const value_string PropSet88_IDS[] = { + {0x64, "System.Contact.OtherAddressPostOfficeBox"}, + {0,NULL} +}; + +static const value_string PropSet89_IDS[] = { + {0x64, "System.ProviderItemID"}, + {0,NULL} +}; + +static const value_string PropSet90_IDS[] = { + {0x64, "System.Contact.BusinessAddressCountry"}, + {0,NULL} +}; + +static const value_string PropSet91_IDS[] = { + {0x64, "System.Contact.EmailName"}, + {0,NULL} +}; + +static const value_string PropSet92_IDS[] = { + {0x64, "System.Photo.FocalLengthInFilm"}, + {0,NULL} +}; + +static const value_string PropSet93_IDS[] = { + {0x64, "System.Contact.IMAddress"}, + {0,NULL} +}; + +static const value_string PropSet94_IDS[] = { + {0x64, "System.DateAcquired"}, + {0,NULL} +}; + +static const value_string PropSet95_IDS[] = { + {0x64, "System.DateCompleted"}, + {0,NULL} +}; + +static const value_string PropSet96_IDS[] = { + {0x64, "System.ItemName"}, + {0,NULL} +}; + +static const value_string PropSet97_IDS[] = { + {0x64, "System.Contact.PrimaryAddressPostalCode"}, + {0,NULL} +}; + +static const value_string PropSet99_IDS[] = { + {0x64, "System.Document.ClientID"}, + {0,NULL} +}; + +static const value_string PropSet100_IDS[] = { + {0x64, "System.Photo.ExposureProgramText"}, + {0,NULL} +}; + +static const value_string PropSet101_IDS[] = { + {0x64, "System.Note.ColorText"}, + {0,NULL} +}; + +static const value_string PropSet102_IDS[] = { + {0x64, "System.Photo.MeteringModeText"}, + {0,NULL} +}; + +static const value_string PropSet103_IDS[] = { + {0x2, "System.Link.TargetExtension"}, + {0,NULL} +}; + +static const value_string PropSet104_IDS[] = { + {0x64, "System.Contact.BusinessAddressState"}, + {0,NULL} +}; + +static const value_string PropSet105_IDS[] = { + {0x64, "System.Photo.OrientationText"}, + {0,NULL} +}; + +static const value_string PropSet106_IDS[] = { + {0x64, "System.Contact.Label"}, + {0,NULL} +}; + +static const value_string PropSet107_IDS[] = { + {0x64, "System.Calendar.Location"}, + {0,NULL} +}; + +static const value_string PropSet108_IDS[] = { + {0x64, "System.Photo.SaturationText"}, + {0,NULL} +}; + +static const value_string PropSet109_IDS[] = { + {0x64, "System.Message.ToDoTitle"}, + {0,NULL} +}; + +static const value_string PropSet110_IDS[] = { + {0x64, "System.Contact.Anniversary"}, + {0,NULL} +}; + +static const value_string PropSet111_IDS[] = { + {0x64, "System.Contact.FileAsName"}, + {0,NULL} +}; + +static const value_string PropSet112_IDS[] = { + {0x64, "System.GPS.Date"}, + {0,NULL} +}; + +static const value_string PropSet113_IDS[] = { + {0x64, "System.IsFlaggedComplete"}, + {0,NULL} +}; + +static const value_string PropSet114_IDS[] = { + {0x2, "System.Contact.JA.CompanyNamePhonetic"}, + {0x3, "System.Contact.JA.FirstNamePhonetic"}, + {0x4, "System.Contact.JA.LastNamePhonetic"}, + {0,NULL} +}; + +static const value_string PropSet115_IDS[] = { + {0x64, "System.Communication.SecurityFlags"}, + {0,NULL} +}; + +static const value_string PropSet116_IDS[] = { + {0x64, "System.Identity"}, + {0,NULL} +}; + +static const value_string PropSet117_IDS[] = { + {0x64, "System.Contact.BusinessAddressPostOfficeBox"}, + {0,NULL} +}; + +static const value_string PropSet118_IDS[] = { + {0x64, "System.AcquisitionID"}, + {0,NULL} +}; + +static const value_string PropSet119_IDS[] = { + {0x64, "System.Contact.EmailAddresses"}, + {0,NULL} +}; + +static const value_string PropSet120_IDS[] = { + {0x64, "System.Communication.TaskStatus"}, + {0,NULL} +}; + +static const value_string PropSet121_IDS[] = { + {0x64, "System.Contact.LastName"}, + {0,NULL} +}; + +static const value_string PropSet122_IDS[] = { + {0x64, "System.Communication.DateItemExpires"}, + {0,NULL} +}; + +static const value_string PropSet123_IDS[] = { + {0x64, "System.ImportanceText"}, + {0,NULL} +}; + +static const value_string PropSet124_IDS[] = { + {0x64, "System.Search.ContainerHash"}, + {0,NULL} +}; + +static const value_string PropSet125_IDS[] = { + {0x64, "System.Contact.BusinessFaxNumber"}, + {0,NULL} +}; + +static const value_string PropSet126_IDS[] = { + {0x2, "System.Link.TargetUrl"}, + {0x1a, "System.IconIndex"}, + {0,NULL} +}; + +static const value_string PropSet127_IDS[] = { + {0x64, "System.RecordedTV.StationName"}, + {0,NULL} +}; + +static const value_string PropSet128_IDS[] = { + {0x64, "System.Task.Owner"}, + {0,NULL} +}; + +static const value_string PropSet129_IDS[] = { + {0x64, "System.Photo.ProgramModeText"}, + {0,NULL} +}; + +static const value_string PropSet130_IDS[] = { + {0x64, "System.Contact.PrimaryAddressCountry"}, + {0,NULL} +}; + +static const value_string PropSet131_IDS[] = { + {0x64, "System.Note.Color"}, + {0,NULL} +}; + +static const value_string PropSet132_IDS[] = { + {0x64, "System.Contact.OtherAddressState"}, + {0,NULL} +}; + +static const value_string PropSet133_IDS[] = { + {0x64, "System.Message.AttachmentContents"}, + {0,NULL} +}; + +static const value_string PropSet134_IDS[] = { + {0x64, "System.Communication.TaskStatusText"}, + {0,NULL} +}; + +static const value_string PropSet135_IDS[] = { + {0x64, "System.Communication.HeaderItem"}, + {0,NULL} +}; + +static const value_string PropSet136_IDS[] = { + {0x64, "System.Contact.EmailAddress"}, + {0,NULL} +}; + +static const value_string PropSet137_IDS[] = { + {0x64, "System.Contact.Profession"}, + {0,NULL} +}; + +static const value_string PropSet138_IDS[] = { + {0x64, "System.Contact.BusinessAddressPostalCode"}, + {0,NULL} +}; + +static const value_string PropSet139_IDS[] = { + {0x64, "System.ItemNamePrefix"}, + {0,NULL} +}; + +static const value_string PropSet140_IDS[] = { + {0x64, "System.Photo.DigitalZoom"}, + {0,NULL} +}; + +static const value_string PropSet141_IDS[] = { + {0x64, "System.SourceItem"}, + {0,NULL} +}; + +static const value_string PropSet142_IDS[] = { + {0x64, "System.Photo.WhiteBalance"}, + {0,NULL} +}; + +static const value_string PropSet143_IDS[] = { + {0x64, "System.SensitivityText"}, + {0,NULL} +}; + +static const value_string PropSet144_IDS[] = { + {0x64, "System.Contact.Gender"}, + {0x65, "System.Contact.GenderValue"}, + {0,NULL} +}; + +static const value_string PropSet145_IDS[] = { + {0x64, "System.Contact.OtherAddressCity"}, + {0,NULL} +}; + +static const value_string PropSet146_IDS[] = { + {0x64, "System.Music.DisplayArtist"}, + {0,NULL} +}; + +static const value_string PropSet147_IDS[] = { + {0x64, "System.Message.SenderAddress"}, + {0,NULL} +}; + +static const value_string PropSet148_IDS[] = { + {0x64, "System.Contact.PrimaryAddressState"}, + {0,NULL} +}; + +static const value_string PropSet149_IDS[] = { + {0x64, "System.Journal.EntryType"}, + {0,NULL} +}; + +static const value_string PropSet150_IDS[] = { + {0x64, "System.Contact.BusinessAddressStreet"}, + {0,NULL} +}; + +static const value_string PropSet151_IDS[] = { + {0x4, "System.FileOwner"}, + {0,NULL} +}; + +static const value_string PropSet152_IDS[] = { + {0x64, "System.Contact.HomeAddressCountry"}, + {0,NULL} +}; + +static const value_string PropSet153_IDS[] = { + {0x64, "System.Task.CompletionStatus"}, + {0,NULL} +}; + +static const value_string PropSet154_IDS[] = { + {0x10, "System.Software.DateLastUsed"}, + {0,NULL} +}; + +static const value_string PropSet155_IDS[] = { + {0x64, "System.Contact.Department"}, + {0,NULL} +}; + +static const value_string PropSet156_IDS[] = { + {0x64, "System.Calendar.ShowTimeAsText"}, + {0,NULL} +}; + +static const value_string PropSet157_IDS[] = { + {0x64, "System.Sensitivity"}, + {0,NULL} +}; + +static const value_string PropSet158_IDS[] = { + {0x64, "System.RecordedTV.OriginalBroadcastDate"}, + {0,NULL} +}; + +static const value_string PropSet159_IDS[] = { + {0x64, "System.Music.IsCompilation"}, + {0,NULL} +}; + +static const value_string PropSet160_IDS[] = { + {0x64, "System.DueDate"}, + {0,NULL} +}; + +static const value_string PropSet161_IDS[] = { + {0x3, "System.FileDescription"}, + {0x6, "System.OriginalFileName"}, + {0x7, "System.Software.ProductName"}, + {0x8, "System.Software.ProductVersion"}, + {0,NULL} +}; + +static const value_string PropSet162_IDS[] = { + {0x64, "System.MileageInformation"}, + {0,NULL} +}; + +static const value_string PropSet163_IDS[] = { + {0x2, "System.RecordedTV.EpisodeName"}, + {0x3, "System.RecordedTV.ProgramDescription"}, + {0x5, "System.RecordedTV.StationCallSign"}, + {0x7, "System.RecordedTV.ChannelNumber"}, + {0xc, "System.RecordedTV.IsClosedCaptioningAvailable"}, + {0xd, "System.RecordedTV.IsRepeatBroadcast"}, + {0xe, "System.RecordedTV.IsSAP"}, + {0xf, "System.RecordedTV.DateContentExpires"}, + {0x10, "System.RecordedTV.IsATSCContent"}, + {0x11, "System.RecordedTV.IsDTVContent"}, + {0x12, "System.RecordedTV.IsHDContent"}, + {0,NULL} +}; + +static const value_string PropSet164_IDS[] = { + {0x64, "System.Audio.PeakValue"}, + {0,NULL} +}; + +static const value_string PropSet165_IDS[] = { + {0x64, "System.Contact.TelexNumber"}, + {0,NULL} +}; + +static const value_string PropSet166_IDS[] = { + {0x64, "System.Message.SenderName"}, + {0,NULL} +}; + +static const value_string PropSet167_IDS[] = { + {0x64, "System.Message.Flags"}, + {0,NULL} +}; + +static const value_string PropSet168_IDS[] = { + {0x64, "System.IsFolder"}, + {0,NULL} +}; + +static const value_string PropSet169_IDS[] = { + {0x64, "System.Contact.AssistantTelephone"}, + {0,NULL} +}; + +static const value_string PropSet170_IDS[] = { + {0x64, "System.KindText"}, + {0,NULL} +}; + +static const value_string PropSet171_IDS[] = { + {0x64, "System.Photo.ContrastText"}, + {0,NULL} +}; + +static const value_string PropSet172_IDS[] = { + {0x3, "System.Image.HorizontalSize"}, + {0x4, "System.Image.VerticalSize"}, + {0x5, "System.Image.HorizontalResolution"}, + {0x6, "System.Image.VerticalResolution"}, + {0x7, "System.Image.BitDepth"}, + {0xc, "System.Media.FrameCount"}, + {0xd, "System.Image.Dimensions"}, + {0,NULL} +}; + +static const value_string PropSet173_IDS[] = { + {0x64, "System.Message.IsFwdOrReply"}, + {0,NULL} +}; + +static const value_string PropSet174_IDS[] = { + {0x64, "System.Photo.WhiteBalanceText"}, + {0,NULL} +}; + +static const value_string PropSet175_IDS[] = { + {0x64, "System.Photo.GainControlText"}, + {0,NULL} +}; + +static const value_string PropSet176_IDS[] = { + {0x64, "System.Communication.PolicyTag"}, + {0,NULL} +}; + +static const value_string PropSet177_IDS[] = { + {0x64, "System.Contact.HomeFaxNumber"}, + {0,NULL} +}; + +static const value_string PropSet178_IDS[] = { + {0x64, "System.FlagStatusText"}, + {0,NULL} +}; + +static const value_string PropSet179_IDS[] = { + {0x64, "System.Contact.AssistantName"}, + {0,NULL} +}; + +static const value_string PropSet180_IDS[] = { + {0x64, "System.Message.ToDoFlags"}, + {0,NULL} +}; + +static const value_string PropSet181_IDS[] = { + {0x64, "System.RatingText"}, + {0,NULL} +}; + +static const value_string PropSet182_IDS[] = { + {0x64, "System.Document.Contributor"}, + {0,NULL} +}; + +static const value_string PropSet183_IDS[] = { + {0x64, "System.Contact.CallbackTelephone"}, + {0,NULL} +}; + +static const value_string PropSet184_IDS[] = { + {0x64, "System.EndDate"}, + {0,NULL} +}; + +static const value_string PropSet185_IDS[] = { + {0x64, "System.Media.DateEncoded"}, + {0,NULL} +}; + +static const value_string PropSet186_IDS[] = { + {0x64, "System.Photo.FlashText"}, + {0,NULL} +}; + +static const value_string PropSet187_IDS[] = { + {0x64, "System.Photo.FlashFired"}, + {0,NULL} +}; + +static const value_string PropSet188_IDS[] = { + {0x64, "System.Document.Division"}, + {0,NULL} +}; + +static const value_string PropSet189_IDS[] = { + {0x64, "System.Contact.PagerTelephone"}, + {0,NULL} +}; + +static const value_string PropSet190_IDS[] = { + {0x64, "System.Contact.BusinessAddressCity"}, + {0,NULL} +}; + +static const value_string PropSet191_IDS[] = { + {0x64, "System.Media.SubscriptionContentId"}, + {0,NULL} +}; + +static const value_string PropSet192_IDS[] = { + {0x64, "System.Contact.PrimaryAddressStreet"}, + {0,NULL} +}; + +static const value_string PropSet193_IDS[] = { + {0x64, "System.StartDate"}, + {0,NULL} +}; + +static const value_string PropSet194_IDS[] = { + {0x2, "System.Video.StreamName"}, + {0x3, "System.Video.FrameWidth"}, + {0x4, "System.Video.FrameHeight"}, + {0x6, "System.Video.FrameRate"}, + {0x8, "System.Video.EncodingBitrate"}, + {0x9, "System.Video.SampleSize"}, + {0xa, "System.Video.Compression"}, + {0x2a, "System.Video.HorizontalAspectRatio"}, + {0x2b, "System.Video.TotalBitrate"}, + {0x2c, "System.Video.FourCC"}, + {0x2d, "System.Video.VerticalAspectRatio"}, + {0,NULL} +}; + +static const value_string PropSet195_IDS[] = { + {0x64, "System.Contact.MailingAddress"}, + {0,NULL} +}; + +static struct GuidPropertySet GuidPropertySet[] = { + { {0xa9bd1526, 0x6a80, 0x11d0, {0x8c, 0x9d, 0x00, 0x20, 0xaf, 0x1d, 0x74, 0x0e}}, + "DBPROPSET_FSCIFRMWRK_EXT", "File system content index framework", + DBPROPSET_FSCIFRMWRK_EXT_IDS + }, + { {0xa7ac77ed, 0xf8d7, 0x11ce, {0xa7, 0x98, 0x00, 0x20, 0xf8, 0x00, 0x80, 0x25}}, + "DBPROPSET_QUERYEXT", "Query extension", + DBPROPSET_QUERYEXT_IDS + }, + { {0xafafaca5, 0xb5d1, 0x11d0, {0x8c, 0x62, 0x00, 0xc0, 0x4f, 0xc2, 0xdb, 0x8d}}, + "DBPROPSET_CIFRMWRKCORE_EXT", "Content index framework core", + DBPROPSET_CIFRMWRKCORE_EXT_IDS + }, + { {0xAA6EE6B0, 0xE828, 0x11D0, {0xB2, 0x3E, 0x00, 0xAA, 0x00, 0x47, 0xFC, 0x01}}, + "DBPROPSET_MSIDXS_ROWSETEXT", "???", + DBPROPSET_MSIDXS_ROWSETEXT_IDS + }, + { {0xB725F130, 0x47ef, 0x101a, {0xA5, 0xF1, 0x02, 0x60, 0x8C, 0x9E, 0xEB, 0xAC}}, + "Storage", "Storage Property Set", + StorageGuid_IDS + }, + { {0xF29F85E0, 0x4FF9, 0x1068, {0xAB, 0x91, 0x08, 0x00, 0x2B, 0x27, 0xB3, 0xD9}}, + "Document", "Document Property Set", + DocPropSetGuid_IDS + }, + { {0x49691C90, 0x7E17, 0x101A, {0xA9, 0x1C, 0x08, 0x00, 0x2B, 0x2E, 0xCD, 0xA9}}, + "Query", "Query Property Set", + QueryGuid_IDS + }, + { {0x28636AA6, 0x953D, 0x11D2, {0xB5, 0xD6, 0x00, 0xC0, 0x4F, 0xD9, 0x18, 0xD0}}, + "ShellDetails", "Shell Details Property Set", + ShellDetails_IDS + }, + { {0x446D16B1, 0x8DAD, 0x4870, {0xA7, 0x48, 0x40, 0x2E, 0xA4, 0x3D, 0x78, 0x8C}}, + "???", "Unspecified Property Set", + PropSet1_IDS + }, + { {0x1E3EE840, 0xBC2B, 0x476C, {0x82, 0x37, 0x2A, 0xCD, 0x1A, 0x83, 0x9B, 0x22}}, + "???", "Unspecified Property Set", + PropSet2_IDS + }, + { {0x56A3372E, 0xCE9C, 0x11d2, {0x9F, 0x0E, 0x00, 0x60, 0x97, 0xC6, 0x86, 0xF6}}, + "Music", "Music Property Set", + MusicGuid_IDS + }, + { {0xE3E0584C, 0xB788, 0x4A5A, {0xBB, 0x20, 0x7F, 0x5A, 0x44, 0xC9, 0xAC, 0xDD}}, + "???", "Unspecified Property Set", + PropSet3_IDS + }, + { {0xDABD30ED, 0x0043, 0x4789, {0xA7, 0xF8, 0xD0, 0x13, 0xA4, 0x73, 0x66, 0x22}}, + "???", "Unspecified Property Set", + PropSet4_IDS + }, + { {0x635E9051, 0x50A5, 0x4BA2, {0xB9, 0xDB, 0x4E, 0xD0, 0x56, 0xC7, 0x72, 0x96}}, + "???", "Unspecified Property Set", + PropSet5_IDS + }, + { {0xD0A04F0A, 0x462A, 0x48A4, {0xBB, 0x2F, 0x37, 0x06, 0xE8, 0x8D, 0xBD, 0x7D}}, + "???", "Unspecified Property Set", + PropSet6_IDS + }, + { {0xDE35258C, 0xC695, 0x4CBC, {0xB9, 0x82, 0x38, 0xB0, 0xAD, 0x24, 0xCE, 0xD0}}, + "???", "Unspecified Property Set", + PropSet7_IDS + }, + { {0xD6942081, 0xD53B, 0x443D, {0xAD, 0x47, 0x5E, 0x05, 0x9D, 0x9C, 0xD2, 0x7A}}, + "???", "Unspecified Property Set", + PropSet8_IDS + }, + { {0xF7DB74B4, 0x4287, 0x4103, {0xAF, 0xBA, 0xF1, 0xB1, 0x3D, 0xCD, 0x75, 0xCF}}, + "???", "Unspecified Property Set", + PropSet9_IDS + }, + { {0x0B63E350, 0x9CCC, 0x11d0, {0xBC, 0xDB, 0x00, 0x80, 0x5F, 0xCC, 0xCE, 0x04}}, + "???", "Unspecified Property Set", + PropSet10_IDS + }, + { {0x9C1FCF74, 0x2D97, 0x41BA, {0xB4, 0xAE, 0xCB, 0x2E, 0x36, 0x61, 0xA6, 0xE4}}, + "???", "Unspecified Property Set", + PropSet11_IDS + }, + { {0x560C36C0, 0x503A, 0x11CF, {0xBA, 0xA1, 0x00, 0x00, 0x4C, 0x75, 0x2A, 0x9A}}, + "DocCharacter", "Document characterization Property Set", + DocCharacter_IDS + }, + { {0x5CDA5FC8, 0x33EE, 0x4FF3, {0x90, 0x94, 0xAE, 0x7B, 0xD8, 0x86, 0x8C, 0x4D}}, + "???", "Unspecified Property Set", + PropSet12_IDS + }, + { {0xF23F425C, 0x71A1, 0x4FA8, {0x92, 0x2F, 0x67, 0x8E, 0xA4, 0xA6, 0x04, 0x08}}, + "???", "Unspecified Property Set", + PropSet13_IDS + }, + { {0xDC8F80BD, 0xAF1E, 0x4289, {0x85, 0xB6, 0x3D, 0xFC, 0x1B, 0x49, 0x39, 0x92}}, + "???", "Unspecified Property Set", + PropSet14_IDS + }, + { {0xD5CDD502, 0x2E9C, 0x101B, {0x93, 0x97, 0x08, 0x00, 0x2B, 0x2C, 0xF9, 0xAE}}, + "DocPropSet2", "Document Property Set 2", + DocPropSetGuid2_IDS + }, + { {0x176DC63C, 0x2688, 0x4E89, {0x81, 0x43, 0xA3, 0x47, 0x80, 0x0F, 0x25, 0xE9}}, + "System.Contact", "System Contact Property Set", + SystemContact_IDS + }, + { {0xBFEE9149, 0xE3E2, 0x49A7, {0xA8, 0x62, 0xC0, 0x59, 0x88, 0x14, 0x5C, 0xEC}}, + "???","Unspecified Property Set", + PropSet15_IDS + }, + { {0xFF962609, 0xB7D6, 0x4999, {0x86, 0x2D, 0x95, 0x18, 0x0D, 0x52, 0x9A, 0xEA}}, + "???","Unspecified Property Set", + PropSet16_IDS + }, + { {0xAEAC19E4, 0x89AE, 0x4508, {0xB9, 0xB7, 0xBB, 0x86, 0x7A, 0xBE, 0xE2, 0xED}}, + "???","Unspecified Property Set", + PropSet17_IDS + }, + { {0x09429607, 0x582D, 0x437F, {0x84, 0xC3, 0xDE, 0x93, 0xA2, 0xB2, 0x4C, 0x3C}}, + "???","Unspecified Property Set", + PropSet18_IDS + }, + { {0x5BF396D4, 0x5EB2, 0x466F, {0xBD, 0xE9, 0x2F, 0xB3, 0xF2, 0x36, 0x1D, 0x6E}}, + "???","Unspecified Property Set", + PropSet19_IDS + }, + { {0x10984E0A, 0xF9F2, 0x4321, {0xB7, 0xEF, 0xBA, 0xF1, 0x95, 0xAF, 0x43, 0x19}}, + "???","Unspecified Property Set", + PropSet20_IDS + }, + { {0x39A7F922, 0x477C, 0x48DE, {0x8B, 0xC8, 0xB2, 0x84, 0x41, 0xE3, 0x42, 0xE3}}, + "???","Unspecified Property Set", + PropSet21_IDS + }, + { {0x8F167568, 0x0AAE, 0x4322, {0x8E, 0xD9, 0x60, 0x55, 0xB7, 0xB0, 0xE3, 0x98}}, + "???","Unspecified Property Set", + PropSet22_IDS + }, + { {0x000214A1, 0x0000, 0x0000, {0xC0, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x46}}, + "???","Unspecified Property Set", + PropSet23_IDS + }, + { {0x43F8D7B7, 0xA444, 0x4F87, {0x93, 0x83, 0x52, 0x27, 0x1C, 0x9B, 0x91, 0x5C}}, + "???","Unspecified Property Set", + PropSet24_IDS + }, + { {0x8FDC6DEA, 0xB929, 0x412B, {0xBA, 0x90, 0x39, 0x7A, 0x25, 0x74, 0x65, 0xFE}}, + "???","Unspecified Property Set", + PropSet25_IDS + }, + { {0x188C1F91, 0x3C40, 0x4132, {0x9E, 0xC5, 0xD8, 0xB0, 0x3B, 0x72, 0xA8, 0xA2}}, + "???","Unspecified Property Set", + PropSet26_IDS + }, + { {0xD37D52C6, 0x261C, 0x4303, {0x82, 0xB3, 0x08, 0xB9, 0x26, 0xAC, 0x6F, 0x12}}, + "???","Unspecified Property Set", + PropSet27_IDS + }, + { {0x09EDD5B6, 0xB301, 0x43C5, {0x99, 0x90, 0xD0, 0x03, 0x02, 0xEF, 0xFD, 0x46}}, + "???","Unspecified Property Set", + PropSet28_IDS + }, + { {0x9D2408B6, 0x3167, 0x422B, {0x82, 0xB0, 0xF5, 0x83, 0xB7, 0xA7, 0xCF, 0xE3}}, + "???","Unspecified Property Set", + PropSet29_IDS + }, + { {0xE08805C8, 0xE395, 0x40DF, {0x80, 0xD2, 0x54, 0xF0, 0xD6, 0xC4, 0x31, 0x54}}, + "???","Unspecified Property Set", + PropSet30_IDS + }, + { {0x2C53C813, 0xFB63, 0x4E22, {0xA1, 0xAB, 0x0B, 0x33, 0x1C, 0xA1, 0xE2, 0x73}}, + "???","Unspecified Property Set", + PropSet31_IDS + }, + { {0xD98BE98B, 0xB86B, 0x4095, {0xBF, 0x52, 0x9D, 0x23, 0xB2, 0xE0, 0xA7, 0x52}}, + "???","Unspecified Property Set", + PropSet32_IDS + }, + { {0xD4729704, 0x8EF1, 0x43EF, {0x90, 0x24, 0x2B, 0xD3, 0x81, 0x18, 0x7F, 0xD5}}, + "???","Unspecified Property Set", + PropSet33_IDS + }, + { {0xA5477F61, 0x7A82, 0x4ECA, {0x9D, 0xDE, 0x98, 0xB6, 0x9B, 0x24, 0x79, 0xB3}}, + "???","Unspecified Property Set", + PropSet34_IDS + }, + { {0x45EAE747, 0x8E2A, 0x40AE, {0x8C, 0xBF, 0xCA, 0x52, 0xAB, 0xA6, 0x15, 0x2A}}, + "???","Unspecified Property Set", + PropSet35_IDS + }, + { {0x95C656C1, 0x2ABF, 0x4148, {0x9E, 0xD3, 0x9E, 0xC6, 0x02, 0xE3, 0xB7, 0xCD}}, + "???","Unspecified Property Set", + PropSet36_IDS + }, + { {0x51EC3F47, 0xDD50, 0x421D, {0x87, 0x69, 0x33, 0x4F, 0x50, 0x42, 0x4B, 0x1E}}, + "???","Unspecified Property Set", + PropSet37_IDS + }, + { {0x508161FA, 0x313B, 0x43D5, {0x83, 0xA1, 0xC1, 0xAC, 0xCF, 0x68, 0x62, 0x2C}}, + "???","Unspecified Property Set", + PropSet38_IDS + }, + { {0x730FB6DD, 0xCF7C, 0x426B, {0xA0, 0x3F, 0xBD, 0x16, 0x6C, 0xC9, 0xEE, 0x24}}, + "???","Unspecified Property Set", + PropSet40_IDS + }, + { {0x346C8BD1, 0x2E6A, 0x4C45, {0x89, 0xA4, 0x61, 0xB7, 0x8E, 0x8E, 0x70, 0x0F}}, + "???","Unspecified Property Set", + PropSet41_IDS + }, + { {0x38965063, 0xEDC8, 0x4268, {0x84, 0x91, 0xB7, 0x72, 0x31, 0x72, 0xCF, 0x29}}, + "???","Unspecified Property Set", + PropSet42_IDS + }, + { {0x6A15E5A0, 0x0A1E, 0x4CD7, {0xBB, 0x8C, 0xD2, 0xF1, 0xB0, 0xC9, 0x29, 0xBC}}, + "???","Unspecified Property Set", + PropSet43_IDS + }, + { {0x3F08E66F, 0x2F44, 0x4BB9, {0xA6, 0x82, 0xAC, 0x35, 0xD2, 0x56, 0x23, 0x22}}, + "???","Unspecified Property Set", + PropSet45_IDS + }, + { {0xC89A23D0, 0x7D6D, 0x4EB8, {0x87, 0xD4, 0x77, 0x6A, 0x82, 0xD4, 0x93, 0xE5}}, + "???","Unspecified Property Set", + PropSet46_IDS + }, + { {0x644D37B4, 0xE1B3, 0x4BAD, {0xB0, 0x99, 0x7E, 0x7C, 0x04, 0x96, 0x6A, 0xCA}}, + "???","Unspecified Property Set", + PropSet47_IDS + }, + { {0x83A6347E, 0x6FE4, 0x4F40, {0xBA, 0x9C, 0xC4, 0x86, 0x52, 0x40, 0xD1, 0xF4}}, + "???","Unspecified Property Set", + PropSet48_IDS + }, + { {0xB812F15D, 0xC2D8, 0x4BBF, {0xBA, 0xCD, 0x79, 0x74, 0x43, 0x46, 0x11, 0x3F}}, + "???","Unspecified Property Set", + PropSet49_IDS + }, + { {0xA06992B3, 0x8CAF, 0x4ED7, {0xA5, 0x47, 0xB2, 0x59, 0xE3, 0x2A, 0xC9, 0xFC}}, + "???","Unspecified Property Set", + PropSet50_IDS + }, + { {0x41CF5AE0, 0xF75A, 0x4806, {0xBD, 0x87, 0x59, 0xC7, 0xD9, 0x24, 0x8E, 0xB9}}, + "???","Unspecified Property Set", + PropSet51_IDS + }, + { {0x0ADEF160, 0xDB3F, 0x4308, {0x9A, 0x21, 0x06, 0x23, 0x7B, 0x16, 0xFA, 0x2A}}, + "???","Unspecified Property Set", + PropSet52_IDS + }, + { {0x8AFCC170, 0x8A46, 0x4B53, {0x9E, 0xEE, 0x90, 0xBA, 0xE7, 0x15, 0x1E, 0x62}}, + "???","Unspecified Property Set", + PropSet53_IDS + }, + { {0x56310920, 0x2491, 0x4919, {0x99, 0xCE, 0xEA, 0xDB, 0x06, 0xFA, 0xFD, 0xB2}}, + "???","Unspecified Property Set", + PropSet54_IDS + }, + { {0xB33AF30B, 0xF552, 0x4584, {0x93, 0x6C, 0xCB, 0x93, 0xE5, 0xCD, 0xA2, 0x9F}}, + "???","Unspecified Property Set", + PropSet55_IDS + }, + { {0x67DF94DE, 0x0CA7, 0x4D6F, {0xB7, 0x92, 0x05, 0x3A, 0x3E, 0x4F, 0x03, 0xCF}}, + "???","Unspecified Property Set", + PropSet56_IDS + }, + { {0x9098F33C, 0x9A7D, 0x48A8, {0x8D, 0xE5, 0x2E, 0x12, 0x27, 0xA6, 0x4E, 0x91}}, + "???","Unspecified Property Set", + PropSet57_IDS + }, + { {0xDE5EF3C7, 0x46E1, 0x484E, {0x99, 0x99, 0x62, 0xC5, 0x30, 0x83, 0x94, 0xC1}}, + "???","Unspecified Property Set", + PropSet58_IDS + }, + { {0x315B9C8D, 0x80A9, 0x4EF9, {0xAE, 0x16, 0x8E, 0x74, 0x6D, 0xA5, 0x1D, 0x70}}, + "???","Unspecified Property Set", + PropSet59_IDS + }, + { {0x98F98354, 0x617A, 0x46B8, {0x85, 0x60, 0x5B, 0x1B, 0x64, 0xBF, 0x1F, 0x89}}, + "???","Unspecified Property Set", + PropSet60_IDS + }, + { {0x08F6D7C2, 0xE3F2, 0x44FC, {0xAF, 0x1E, 0x5A, 0xA5, 0xC8, 0x1A, 0x2D, 0x3E}}, + "???","Unspecified Property Set", + PropSet61_IDS + }, + { {0xD4D0AA16, 0x9948, 0x41A4, {0xAA, 0x85, 0xD9, 0x7F, 0xF9, 0x64, 0x69, 0x93}}, + "???","Unspecified Property Set", + PropSet62_IDS + }, + { {0xDE41CC29, 0x6971, 0x4290, {0xB4, 0x72, 0xF5, 0x9F, 0x2E, 0x2F, 0x31, 0xE2}}, + "???","Unspecified Property Set", + PropSet63_IDS + }, + { {0xDEA7C82C, 0x1D89, 0x4A66, {0x94, 0x27, 0xA4, 0xE3, 0xDE, 0xBA, 0xBC, 0xB1}}, + "???","Unspecified Property Set", + PropSet64_IDS + }, + { {0x00F58A38, 0xC54B, 0x4C40, {0x86, 0x96, 0x97, 0x23, 0x59, 0x80, 0xEA, 0xE1}}, + "???","Unspecified Property Set", + PropSet65_IDS + }, + { {0xCD9ED458, 0x08CE, 0x418F, {0xA7, 0x0E, 0xF9, 0x12, 0xC7, 0xBB, 0x9C, 0x5C}}, + "???","Unspecified Property Set", + PropSet66_IDS + }, + { {0x64440492, 0x4C8B, 0x11D1, {0x8B, 0x70, 0x08, 0x00, 0x36, 0xB1, 0x1A, 0x03}}, + "???","Unspecified Property Set", + PropSet67_IDS + }, + { {0xAAA660F9, 0x9865, 0x458E, {0xB4, 0x84, 0x01, 0xBC, 0x7F, 0xE3, 0x97, 0x3E}}, + "???","Unspecified Property Set", + PropSet68_IDS + }, + { {0xE8309B6E, 0x084C, 0x49B4, {0xB1, 0xFC, 0x90, 0xA8, 0x03, 0x31, 0xB6, 0x38}}, + "???","Unspecified Property Set", + PropSet69_IDS + }, + { {0x64440490, 0x4C8B, 0x11D1, {0x8B, 0x70, 0x08, 0x00, 0x36, 0xB1, 0x1A, 0x03}}, + "???","Unspecified Property Set", + PropSet70_IDS + }, + { {0xE4F10A3C, 0x49E6, 0x405D, {0x82, 0x88, 0xA2, 0x3B, 0xD4, 0xEE, 0xAA, 0x6C}}, + "???","Unspecified Property Set", + PropSet71_IDS + }, + { {0x14B81DA1, 0x0135, 0x4D31, {0x96, 0xD9, 0x6C, 0xBF, 0xC9, 0x67, 0x1A, 0x99}}, + "???","Unspecified Property Set", + PropSet72_IDS + }, + { {0xAAF16BAC, 0x2B55, 0x45E6, {0x9F, 0x6D, 0x41, 0x5E, 0xB9, 0x49, 0x10, 0xDF}}, + "???","Unspecified Property Set", + PropSet73_IDS + }, + { {0x821437D6, 0x9EAB, 0x4765, {0xA5, 0x89, 0x3B, 0x1C, 0xBB, 0xD2, 0x2A, 0x61}}, + "???","Unspecified Property Set", + PropSet74_IDS + }, + { {0xD55BAE5A, 0x3892, 0x417A, {0xA6, 0x49, 0xC6, 0xAC, 0x5A, 0xAA, 0xEA, 0xB3}}, + "???","Unspecified Property Set", + PropSet75_IDS + }, + { {0x72FC5BA4, 0x24F9, 0x4011, {0x9F, 0x3F, 0xAD, 0xD2, 0x7A, 0xFA, 0xD8, 0x18}}, + "???","Unspecified Property Set", + PropSet76_IDS + }, + { {0x0BA7D6C3, 0x568D, 0x4159, {0xAB, 0x91, 0x78, 0x1A, 0x91, 0xFB, 0x71, 0xE5}}, + "???","Unspecified Property Set", + PropSet77_IDS + }, + { {0x744C8242, 0x4DF5, 0x456C, {0xAB, 0x9E, 0x01, 0x4E, 0xFB, 0x90, 0x21, 0xE3}}, + "???","Unspecified Property Set", + PropSet78_IDS + }, + { {0xB9B4B3FC, 0x2B51, 0x4A42, {0xB5, 0xD8, 0x32, 0x41, 0x46, 0xAF, 0xCF, 0x25}}, + "???","Unspecified Property Set", + PropSet79_IDS + }, + { {0x5DC2253F, 0x5E11, 0x4ADF, {0x9C, 0xFE, 0x91, 0x0D, 0xD0, 0x1E, 0x3E, 0x70}}, + "???","Unspecified Property Set", + PropSet80_IDS + }, + { {0x7B9F6399, 0x0A3F, 0x4B12, {0x89, 0xBD, 0x4A, 0xDC, 0x51, 0xC9, 0x18, 0xAF}}, + "???","Unspecified Property Set", + PropSet81_IDS + }, + { {0x8589E481, 0x6040, 0x473D, {0xB1, 0x71, 0x7F, 0xA8, 0x9C, 0x27, 0x08, 0xED}}, + "???","Unspecified Property Set", + PropSet82_IDS + }, + { {0x5DA84765, 0xE3FF, 0x4278, {0x86, 0xB0, 0xA2, 0x79, 0x67, 0xFB, 0xDD, 0x03}}, + "???","Unspecified Property Set", + PropSet83_IDS + }, + { {0x14977844, 0x6B49, 0x4AAD, {0xA7, 0x14, 0xA4, 0x51, 0x3B, 0xF6, 0x04, 0x60}}, + "???","Unspecified Property Set", + PropSet84_IDS + }, + { {0x90E5E14E, 0x648B, 0x4826, {0xB2, 0xAA, 0xAC, 0xAF, 0x79, 0x0E, 0x35, 0x13}}, + "???","Unspecified Property Set", + PropSet85_IDS + }, + { {0x293CA35A, 0x09AA, 0x4DD2, {0xB1, 0x80, 0x1F, 0xE2, 0x45, 0x72, 0x8A, 0x52}}, + "???","Unspecified Property Set", + PropSet86_IDS + }, + { {0xC8EA94F0, 0xA9E3, 0x4969, {0xA9, 0x4B, 0x9C, 0x62, 0xA9, 0x53, 0x24, 0xE0}}, + "???","Unspecified Property Set", + PropSet87_IDS + }, + { {0x8B26EA41, 0x058F, 0x43F6, {0xAE, 0xCC, 0x40, 0x35, 0x68, 0x1C, 0xE9, 0x77}}, + "???","Unspecified Property Set", + PropSet88_IDS + }, + { {0xF21D9941, 0x81F0, 0x471A, {0xAD, 0xEE, 0x4E, 0x74, 0xB4, 0x92, 0x17, 0xED}}, + "???","Unspecified Property Set", + PropSet89_IDS + }, + { {0xB0B87314, 0xFCF6, 0x4FEB, {0x8D, 0xFF, 0xA5, 0x0D, 0xA6, 0xAF, 0x56, 0x1C}}, + "???","Unspecified Property Set", + PropSet90_IDS + }, + { {0xCC6F4F24, 0x6083, 0x4BD4, {0x87, 0x54, 0x67, 0x4D, 0x0D, 0xE8, 0x7A, 0xB8}}, + "???","Unspecified Property Set", + PropSet91_IDS + }, + { {0xA0E74609, 0xB84D, 0x4F49, {0xB8, 0x60, 0x46, 0x2B, 0xD9, 0x97, 0x1F, 0x98}}, + "???","Unspecified Property Set", + PropSet92_IDS + }, + { {0xD68DBD8A, 0x3374, 0x4B81, {0x99, 0x72, 0x3E, 0xC3, 0x06, 0x82, 0xDB, 0x3D}}, + "???","Unspecified Property Set", + PropSet93_IDS + }, + { {0x2CBAA8F5, 0xD81F, 0x47CA, {0xB1, 0x7A, 0xF8, 0xD8, 0x22, 0x30, 0x01, 0x31}}, + "???","Unspecified Property Set", + PropSet94_IDS + }, + { {0x72FAB781, 0xACDA, 0x43E5, {0xB1, 0x55, 0xB2, 0x43, 0x4F, 0x85, 0xE6, 0x78}}, + "???","Unspecified Property Set", + PropSet95_IDS + }, + { {0x6B8DA074, 0x3B5C, 0x43BC, {0x88, 0x6F, 0x0A, 0x2C, 0xDC, 0xE0, 0x0B, 0x6F}}, + "???","Unspecified Property Set", + PropSet96_IDS + }, + { {0x18BBD425, 0xECFD, 0x46EF, {0xB6, 0x12, 0x7B, 0x4A, 0x60, 0x34, 0xED, 0xA0}}, + "???","Unspecified Property Set", + PropSet97_IDS + }, + { {0x276D7BB0, 0x5B34, 0x4FB0, {0xAA, 0x4B, 0x15, 0x8E, 0xD1, 0x2A, 0x18, 0x09}}, + "???","Unspecified Property Set", + PropSet99_IDS + }, + { {0xFEC690B7, 0x5F30, 0x4646, {0xAE, 0x47, 0x4C, 0xAA, 0xFB, 0xA8, 0x84, 0xA3}}, + "???","Unspecified Property Set", + PropSet100_IDS + }, + { {0x46B4E8DE, 0xCDB2, 0x440D, {0x88, 0x5C, 0x16, 0x58, 0xEB, 0x65, 0xB9, 0x14}}, + "???","Unspecified Property Set", + PropSet101_IDS + }, + { {0xF628FD8C, 0x7BA8, 0x465A, {0xA6, 0x5B, 0xC5, 0xAA, 0x79, 0x26, 0x3A, 0x9E}}, + "???","Unspecified Property Set", + PropSet102_IDS + }, + { {0x7A7D76F4, 0xB630, 0x4BD7, {0x95, 0xFF, 0x37, 0xCC, 0x51, 0xA9, 0x75, 0xC9}}, + "???","Unspecified Property Set", + PropSet103_IDS + }, + { {0x446F787F, 0x10C4, 0x41CB, {0xA6, 0xC4, 0x4D, 0x03, 0x43, 0x55, 0x15, 0x97}}, + "???","Unspecified Property Set", + PropSet104_IDS + }, + { {0xA9EA193C, 0xC511, 0x498A, {0xA0, 0x6B, 0x58, 0xE2, 0x77, 0x6D, 0xCC, 0x28}}, + "???","Unspecified Property Set", + PropSet105_IDS + }, + { {0x97B0AD89, 0xDF49, 0x49CC, {0x83, 0x4E, 0x66, 0x09, 0x74, 0xFD, 0x75, 0x5B}}, + "???","Unspecified Property Set", + PropSet106_IDS + }, + { {0xF6272D18, 0xCECC, 0x40B1, {0xB2, 0x6A, 0x39, 0x11, 0x71, 0x7A, 0xA7, 0xBD}}, + "???","Unspecified Property Set", + PropSet107_IDS + }, + { {0x61478C08, 0xB600, 0x4A84, {0xBB, 0xE4, 0xE9, 0x9C, 0x45, 0xF0, 0xA0, 0x72}}, + "???","Unspecified Property Set", + PropSet108_IDS + }, + { {0xBCCC8A3C, 0x8CEF, 0x42E5, {0x9B, 0x1C, 0xC6, 0x90, 0x79, 0x39, 0x8B, 0xC7}}, + "???","Unspecified Property Set", + PropSet109_IDS + }, + { {0x9AD5BADB, 0xCEA7, 0x4470, {0xA0, 0x3D, 0xB8, 0x4E, 0x51, 0xB9, 0x94, 0x9E}}, + "???","Unspecified Property Set", + PropSet110_IDS + }, + { {0xF1A24AA7, 0x9CA7, 0x40F6, {0x89, 0xEC, 0x97, 0xDE, 0xF9, 0xFF, 0xE8, 0xDB}}, + "???","Unspecified Property Set", + PropSet111_IDS + }, + { {0x3602C812, 0x0F3B, 0x45F0, {0x85, 0xAD, 0x60, 0x34, 0x68, 0xD6, 0x94, 0x23}}, + "???","Unspecified Property Set", + PropSet112_IDS + }, + { {0xA6F360D2, 0x55F9, 0x48DE, {0xB9, 0x09, 0x62, 0x0E, 0x09, 0x0A, 0x64, 0x7C}}, + "???","Unspecified Property Set", + PropSet113_IDS + }, + { {0x897B3694, 0xFE9E, 0x43E6, {0x80, 0x66, 0x26, 0x0F, 0x59, 0x0C, 0x01, 0x00}}, + "???","Unspecified Property Set", + PropSet114_IDS + }, + { {0x8619A4B6, 0x9F4D, 0x4429, {0x8C, 0x0F, 0xB9, 0x96, 0xCA, 0x59, 0xE3, 0x35}}, + "???","Unspecified Property Set", + PropSet115_IDS + }, + { {0xA26F4AFC, 0x7346, 0x4299, {0xBE, 0x47, 0xEB, 0x1A, 0xE6, 0x13, 0x13, 0x9F}}, + "???","Unspecified Property Set", + PropSet116_IDS + }, + { {0xBC4E71CE, 0x17F9, 0x48D5, {0xBE, 0xE9, 0x02, 0x1D, 0xF0, 0xEA, 0x54, 0x09}}, + "???","Unspecified Property Set", + PropSet117_IDS + }, + { {0x65A98875, 0x3C80, 0x40AB, {0xAB, 0xBC, 0xEF, 0xDA, 0xF7, 0x7D, 0xBE, 0xE2}}, + "???","Unspecified Property Set", + PropSet118_IDS + }, + { {0x84D8F337, 0x981D, 0x44B3, {0x96, 0x15, 0xC7, 0x59, 0x6D, 0xBA, 0x17, 0xE3}}, + "???","Unspecified Property Set", + PropSet119_IDS + }, + { {0xBE1A72C6, 0x9A1D, 0x46B7, {0xAF, 0xE7, 0xAF, 0xAF, 0x8C, 0xEF, 0x49, 0x99}}, + "???","Unspecified Property Set", + PropSet120_IDS + }, + { {0x8F367200, 0xC270, 0x457C, {0xB1, 0xD4, 0xE0, 0x7C, 0x5B, 0xCD, 0x90, 0xC7}}, + "???","Unspecified Property Set", + PropSet121_IDS + }, + { {0x428040AC, 0xA177, 0x4C8A, {0x97, 0x60, 0xF6, 0xF7, 0x61, 0x22, 0x7F, 0x9A}}, + "???","Unspecified Property Set", + PropSet122_IDS + }, + { {0xA3B29791, 0x7713, 0x4E1D, {0xBB, 0x40, 0x17, 0xDB, 0x85, 0xF0, 0x18, 0x31}}, + "???","Unspecified Property Set", + PropSet123_IDS + }, + { {0xBCEEE283, 0x35DF, 0x4D53, {0x82, 0x6A, 0xF3, 0x6A, 0x3E, 0xEF, 0xC6, 0xBE}}, + "???","Unspecified Property Set", + PropSet124_IDS + }, + { {0x91EFF6F3, 0x2E27, 0x42CA, {0x93, 0x3E, 0x7C, 0x99, 0x9F, 0xBE, 0x31, 0x0B}}, + "???","Unspecified Property Set", + PropSet125_IDS + }, + { {0x5CBF2787, 0x48CF, 0x4208, {0xB9, 0x0E, 0xEE, 0x5E, 0x5D, 0x42, 0x02, 0x94}}, + "???","Unspecified Property Set", + PropSet126_IDS + }, + { {0x1B5439E7, 0xEBA1, 0x4AF8, {0xBD, 0xD7, 0x7A, 0xF1, 0xD4, 0x54, 0x94, 0x93}}, + "???","Unspecified Property Set", + PropSet127_IDS + }, + { {0x08C7CC5F, 0x60F2, 0x4494, {0xAD, 0x75, 0x55, 0xE3, 0xE0, 0xB5, 0xAD, 0xD0}}, + "???","Unspecified Property Set", + PropSet128_IDS + }, + { {0x7FE3AA27, 0x2648, 0x42F3, {0x89, 0xB0, 0x45, 0x4E, 0x5C, 0xB1, 0x50, 0xC3}}, + "???","Unspecified Property Set", + PropSet129_IDS + }, + { {0xE53D799D, 0x0F3F, 0x466E, {0xB2, 0xFF, 0x74, 0x63, 0x4A, 0x3C, 0xB7, 0xA4}}, + "???","Unspecified Property Set", + PropSet130_IDS + }, + { {0x4776CAFA, 0xBCE4, 0x4CB1, {0xA2, 0x3E, 0x26, 0x5E, 0x76, 0xD8, 0xEB, 0x11}}, + "???","Unspecified Property Set", + PropSet131_IDS + }, + { {0x71B377D6, 0xE570, 0x425F, {0xA1, 0x70, 0x80, 0x9F, 0xAE, 0x73, 0xE5, 0x4E}}, + "???","Unspecified Property Set", + PropSet132_IDS + }, + { {0x3143BF7C, 0x80A8, 0x4854, {0x88, 0x80, 0xE2, 0xE4, 0x01, 0x89, 0xBD, 0xD0}}, + "???","Unspecified Property Set", + PropSet133_IDS + }, + { {0xA6744477, 0xC237, 0x475B, {0xA0, 0x75, 0x54, 0xF3, 0x44, 0x98, 0x29, 0x2A}}, + "???","Unspecified Property Set", + PropSet134_IDS + }, + { {0xC9C34F84, 0x2241, 0x4401, {0xB6, 0x07, 0xBD, 0x20, 0xED, 0x75, 0xAE, 0x7F}}, + "???","Unspecified Property Set", + PropSet135_IDS + }, + { {0xF8FA7FA3, 0xD12B, 0x4785, {0x8A, 0x4E, 0x69, 0x1A, 0x94, 0xF7, 0xA3, 0xE7}}, + "???","Unspecified Property Set", + PropSet136_IDS + }, + { {0x7268AF55, 0x1CE4, 0x4F6E, {0xA4, 0x1F, 0xB6, 0xE4, 0xEF, 0x10, 0xE4, 0xA9}}, + "???","Unspecified Property Set", + PropSet137_IDS + }, + { {0xE1D4A09E, 0xD758, 0x4CD1, {0xB6, 0xEC, 0x34, 0xA8, 0xB5, 0xA7, 0x3F, 0x80}}, + "???","Unspecified Property Set", + PropSet138_IDS + }, + { {0xD7313FF1, 0xA77A, 0x401C, {0x8C, 0x99, 0x3D, 0xBD, 0xD6, 0x8A, 0xDD, 0x36}}, + "???","Unspecified Property Set", + PropSet139_IDS + }, + { {0xF85BF840, 0xA925, 0x4BC2, {0xB0, 0xC4, 0x8E, 0x36, 0xB5, 0x98, 0x67, 0x9E}}, + "???","Unspecified Property Set", + PropSet140_IDS + }, + { {0x668CDFA5, 0x7A1B, 0x4323, {0xAE, 0x4B, 0xE5, 0x27, 0x39, 0x3A, 0x1D, 0x81}}, + "???","Unspecified Property Set", + PropSet141_IDS + }, + { {0xEE3D3D8A, 0x5381, 0x4CFA, {0xB1, 0x3B, 0xAA, 0xF6, 0x6B, 0x5F, 0x4E, 0xC9}}, + "???","Unspecified Property Set", + PropSet142_IDS + }, + { {0xD0C7F054, 0x3F72, 0x4725, {0x85, 0x27, 0x12, 0x9A, 0x57, 0x7C, 0xB2, 0x69}}, + "???","Unspecified Property Set", + PropSet143_IDS + }, + { {0x3C8CEE58, 0xD4F0, 0x4CF9, {0xB7, 0x56, 0x4E, 0x5D, 0x24, 0x44, 0x7B, 0xCD}}, + "???","Unspecified Property Set", + PropSet144_IDS + }, + { {0x6E682923, 0x7F7B, 0x4F0C, {0xA3, 0x37, 0xCF, 0xCA, 0x29, 0x66, 0x87, 0xBF}}, + "???","Unspecified Property Set", + PropSet145_IDS + }, + { {0xFD122953, 0xFA93, 0x4EF7, {0x92, 0xC3, 0x04, 0xC9, 0x46, 0xB2, 0xF7, 0xC8}}, + "???","Unspecified Property Set", + PropSet146_IDS + }, + { {0x0BE1C8E7, 0x1981, 0x4676, {0xAE, 0x14, 0xFD, 0xD7, 0x8F, 0x05, 0xA6, 0xE7}}, + "???","Unspecified Property Set", + PropSet147_IDS + }, + { {0xF1176DFE, 0x7138, 0x4640, {0x8B, 0x4C, 0xAE, 0x37, 0x5D, 0xC7, 0x0A, 0x6D}}, + "???","Unspecified Property Set", + PropSet148_IDS + }, + { {0x95BEB1FC, 0x326D, 0x4644, {0xB3, 0x96, 0xCD, 0x3E, 0xD9, 0x0E, 0x6D, 0xDF}}, + "???","Unspecified Property Set", + PropSet149_IDS + }, + { {0xDDD1460F, 0xC0BF, 0x4553, {0x8C, 0xE4, 0x10, 0x43, 0x3C, 0x90, 0x8F, 0xB0}}, + "???","Unspecified Property Set", + PropSet150_IDS + }, + { {0x9B174B34, 0x40FF, 0x11D2, {0xA2, 0x7E, 0x00, 0xC0, 0x4F, 0xC3, 0x08, 0x71}}, + "???","Unspecified Property Set", + PropSet151_IDS + }, + { {0x08A65AA1, 0xF4C9, 0x43DD, {0x9D, 0xDF, 0xA3, 0x3D, 0x8E, 0x7E, 0xAD, 0x85}}, + "???","Unspecified Property Set", + PropSet152_IDS + }, + { {0x084D8A0A, 0xE6D5, 0x40DE, {0xBF, 0x1F, 0xC8, 0x82, 0x0E, 0x7C, 0x87, 0x7C}}, + "???","Unspecified Property Set", + PropSet153_IDS + }, + { {0x841E4F90, 0xFF59, 0x4D16, {0x89, 0x47, 0xE8, 0x1B, 0xBF, 0xFA, 0xB3, 0x6D}}, + "???","Unspecified Property Set", + PropSet154_IDS + }, + { {0xFC9F7306, 0xFF8F, 0x4D49, {0x9F, 0xB6, 0x3F, 0xFE, 0x5C, 0x09, 0x51, 0xEC}}, + "???","Unspecified Property Set", + PropSet155_IDS + }, + { {0x53DA57CF, 0x62C0, 0x45C4, {0x81, 0xDE, 0x76, 0x10, 0xBC, 0xEF, 0xD7, 0xF5}}, + "???","Unspecified Property Set", + PropSet156_IDS + }, + { {0xF8D3F6AC, 0x4874, 0x42CB, {0xBE, 0x59, 0xAB, 0x45, 0x4B, 0x30, 0x71, 0x6A}}, + "???","Unspecified Property Set", + PropSet157_IDS + }, + { {0x4684FE97, 0x8765, 0x4842, {0x9C, 0x13, 0xF0, 0x06, 0x44, 0x7B, 0x17, 0x8C}}, + "???","Unspecified Property Set", + PropSet158_IDS + }, + { {0xC449D5CB, 0x9EA4, 0x4809, {0x82, 0xE8, 0xAF, 0x9D, 0x59, 0xDE, 0xD6, 0xD1}}, + "???","Unspecified Property Set", + PropSet159_IDS + }, + { {0x3F8472B5, 0xE0AF, 0x4DB2, {0x80, 0x71, 0xC5, 0x3F, 0xE7, 0x6A, 0xE7, 0xCE}}, + "???","Unspecified Property Set", + PropSet160_IDS + }, + { {0x0CEF7D53, 0xFA64, 0x11D1, {0xA2, 0x03, 0x00, 0x00, 0xF8, 0x1F, 0xED, 0xEE}}, + "???","Unspecified Property Set", + PropSet161_IDS + }, + { {0xFDF84370, 0x031A, 0x4ADD, {0x9E, 0x91, 0x0D, 0x77, 0x5F, 0x1C, 0x66, 0x05}}, + "???","Unspecified Property Set", + PropSet162_IDS + }, + { {0x6D748DE2, 0x8D38, 0x4CC3, {0xAC, 0x60, 0xF0, 0x09, 0xB0, 0x57, 0xC5, 0x57}}, + "???","Unspecified Property Set", + PropSet163_IDS + }, + { {0x2579E5D0, 0x1116, 0x4084, {0xBD, 0x9A, 0x9B, 0x4F, 0x7C, 0xB4, 0xDF, 0x5E}}, + "???","Unspecified Property Set", + PropSet164_IDS + }, + { {0xC554493C, 0xC1F7, 0x40C1, {0xA7, 0x6C, 0xEF, 0x8C, 0x06, 0x14, 0x00, 0x3E}}, + "???","Unspecified Property Set", + PropSet165_IDS + }, + { {0x0DA41CFA, 0xD224, 0x4A18, {0xAE, 0x2F, 0x59, 0x61, 0x58, 0xDB, 0x4B, 0x3A}}, + "???","Unspecified Property Set", + PropSet166_IDS + }, + { {0xA82D9EE7, 0xCA67, 0x4312, {0x96, 0x5E, 0x22, 0x6B, 0xCE, 0xA8, 0x50, 0x23}}, + "???","Unspecified Property Set", + PropSet167_IDS + }, + { {0x09329B74, 0x40A3, 0x4C68, {0xBF, 0x07, 0xAF, 0x9A, 0x57, 0x2F, 0x60, 0x7C}}, + "???","Unspecified Property Set", + PropSet168_IDS + }, + { {0x9A93244D, 0xA7AD, 0x4FF8, {0x9B, 0x99, 0x45, 0xEE, 0x4C, 0xC0, 0x9A, 0xF6}}, + "???","Unspecified Property Set", + PropSet169_IDS + }, + { {0xF04BEF95, 0xC585, 0x4197, {0xA2, 0xB7, 0xDF, 0x46, 0xFD, 0xC9, 0xEE, 0x6D}}, + "???","Unspecified Property Set", + PropSet170_IDS + }, + { {0x59DDE9F2, 0x5253, 0x40EA, {0x9A, 0x8B, 0x47, 0x9E, 0x96, 0xC6, 0x24, 0x9A}}, + "???","Unspecified Property Set", + PropSet171_IDS + }, + { {0x6444048F, 0x4C8B, 0x11D1, {0x8B, 0x70, 0x08, 0x00, 0x36, 0xB1, 0x1A, 0x03}}, + "???","Unspecified Property Set", + PropSet172_IDS + }, + { {0x9A9BC088, 0x4F6D, 0x469E, {0x99, 0x19, 0xE7, 0x05, 0x41, 0x20, 0x40, 0xF9}}, + "???","Unspecified Property Set", + PropSet173_IDS + }, + { {0x6336B95E, 0xC7A7, 0x426D, {0x86, 0xFD, 0x7A, 0xE3, 0xD3, 0x9C, 0x84, 0xB4}}, + "???","Unspecified Property Set", + PropSet174_IDS + }, + { {0xC06238B2, 0x0BF9, 0x4279, {0xA7, 0x23, 0x25, 0x85, 0x67, 0x15, 0xCB, 0x9D}}, + "???","Unspecified Property Set", + PropSet175_IDS + }, + { {0xEC0B4191, 0xAB0B, 0x4C66, {0x90, 0xB6, 0xC6, 0x63, 0x7C, 0xDE, 0xBB, 0xAB}}, + "???","Unspecified Property Set", + PropSet176_IDS + }, + { {0x660E04D6, 0x81AB, 0x4977, {0xA0, 0x9F, 0x82, 0x31, 0x31, 0x13, 0xAB, 0x26}}, + "???","Unspecified Property Set", + PropSet177_IDS + }, + { {0xDC54FD2E, 0x189D, 0x4871, {0xAA, 0x01, 0x08, 0xC2, 0xF5, 0x7A, 0x4A, 0xBC}}, + "???","Unspecified Property Set", + PropSet178_IDS + }, + { {0xCD102C9C, 0x5540, 0x4A88, {0xA6, 0xF6, 0x64, 0xE4, 0x98, 0x1C, 0x8C, 0xD1}}, + "???","Unspecified Property Set", + PropSet179_IDS + }, + { {0x1F856A9F, 0x6900, 0x4ABA, {0x95, 0x05, 0x2D, 0x5F, 0x1B, 0x4D, 0x66, 0xCB}}, + "???","Unspecified Property Set", + PropSet180_IDS + }, + { {0x90197CA7, 0xFD8F, 0x4E8C, {0x9D, 0xA3, 0xB5, 0x7E, 0x1E, 0x60, 0x92, 0x95}}, + "???","Unspecified Property Set", + PropSet181_IDS + }, + { {0xF334115E, 0xDA1B, 0x4509, {0x9B, 0x3D, 0x11, 0x95, 0x04, 0xDC, 0x7A, 0xBB}}, + "???","Unspecified Property Set", + PropSet182_IDS + }, + { {0xBF53D1C3, 0x49E0, 0x4F7F, {0x85, 0x67, 0x5A, 0x82, 0x1D, 0x8A, 0xC5, 0x42}}, + "???","Unspecified Property Set", + PropSet183_IDS + }, + { {0xC75FAA05, 0x96FD, 0x49E7, {0x9C, 0xB4, 0x9F, 0x60, 0x10, 0x82, 0xD5, 0x53}}, + "???","Unspecified Property Set", + PropSet184_IDS + }, + { {0x2E4B640D, 0x5019, 0x46D8, {0x88, 0x81, 0x55, 0x41, 0x4C, 0xC5, 0xCA, 0xA0}}, + "???","Unspecified Property Set", + PropSet185_IDS + }, + { {0x6B8B68F6, 0x200B, 0x47EA, {0x8D, 0x25, 0xD8, 0x05, 0x0F, 0x57, 0x33, 0x9F}}, + "???","Unspecified Property Set", + PropSet186_IDS + }, + { {0x2D152B40, 0xCA39, 0x40DB, {0xB2, 0xCC, 0x57, 0x37, 0x25, 0xB2, 0xFE, 0xC5}}, + "???","Unspecified Property Set", + PropSet187_IDS + }, + { {0x1E005EE6, 0xBF27, 0x428B, {0xB0, 0x1C, 0x79, 0x67, 0x6A, 0xCD, 0x28, 0x70}}, + "???","Unspecified Property Set", + PropSet188_IDS + }, + { {0xD6304E01, 0xF8F5, 0x4F45, {0x8B, 0x15, 0xD0, 0x24, 0xA6, 0x29, 0x67, 0x89}}, + "???","Unspecified Property Set", + PropSet189_IDS + }, + { {0x402B5934, 0xEC5A, 0x48C3, {0x93, 0xE6, 0x85, 0xE8, 0x6A, 0x2D, 0x93, 0x4E}}, + "???","Unspecified Property Set", + PropSet190_IDS + }, + { {0x9AEBAE7A, 0x9644, 0x487D, {0xA9, 0x2C, 0x65, 0x75, 0x85, 0xED, 0x75, 0x1A}}, + "???","Unspecified Property Set", + PropSet191_IDS + }, + { {0x63C25B20, 0x96BE, 0x488F, {0x87, 0x88, 0xC0, 0x9C, 0x40, 0x7A, 0xD8, 0x12}}, + "???","Unspecified Property Set", + PropSet192_IDS + }, + { {0x48FD6EC8, 0x8A12, 0x4CDF, {0xA0, 0x3E, 0x4E, 0xC5, 0xA5, 0x11, 0xED, 0xDE}}, + "???","Unspecified Property Set", + PropSet193_IDS + }, + { {0x64440491, 0x4C8B, 0x11D1, {0x8B, 0x70, 0x08, 0x00, 0x36, 0xB1, 0x1A, 0x03}}, + "???","Unspecified Property Set", + PropSet194_IDS + }, + { {0xC0AC206A, 0x827E, 0x4650, {0x95, 0xAE, 0x77, 0xE2, 0xBB, 0x74, 0xFC, 0xC9}}, + "???","Unspecified Property Set", + PropSet195_IDS + } +}; + +static struct GuidPropertySet *GuidPropertySet_find_guid(const e_guid_t *guid) +{ + unsigned i; + for (i=0; i<array_length(GuidPropertySet); i++) { + if (guid_cmp(&GuidPropertySet[i].guid, guid) == 0) { + return &GuidPropertySet[i]; + } + } + return NULL; +} + +static void get_name_from_fullpropspec(struct CFullPropSpec *v, char *out, int bufsize) +{ + struct GuidPropertySet *pset = GuidPropertySet_find_guid(&v->guid); + const char *id_str, *guid_str; + char *dest = out; + id_str = pset ? try_val_to_str(v->u.propid, pset->id_map) : NULL; + + if (id_str) { + g_snprintf(dest, bufsize, "%s", id_str); + } else { + guid_str = guids_get_guid_name(&v->guid); + if (guid_str) { + g_snprintf(dest, bufsize, "\"%s\"", guid_str); + } else { + guid_str = guid_to_str(wmem_packet_scope(), &v->guid); + g_snprintf(dest, bufsize, "{%s}", guid_str); + } + if (v->kind == PRSPEC_LPWSTR) { + g_snprintf(dest, bufsize, "%s \"%s\"", guid_str, v->u.name); + } else if (v->kind == PRSPEC_PROPID) { + g_snprintf(dest, bufsize, "%s 0x%08x", guid_str, v->u.propid); + } else { + g_snprintf(dest, bufsize, "%s <INVALID>", dest); + } + } +} + +/******************************************************************************/ +static int parse_uin32_array(tvbuff_t *tvb, int offset, proto_tree *tree, guint32 count, const char *fmt, ...) +{ + guint32 v, i; + proto_item *item; + const char *txt; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + proto_tree_add_subtree(tree, tvb, offset, count * 4, ett_mswsp_uin32_array, &item, txt); + proto_item_append_text(item, " count %u [", count); + for (i=0; i<count; i++) { + v = tvb_get_letohl(tvb, offset); + offset += 4; + if (i>0) { + proto_item_append_text(item, ",%u", v); + } else { + proto_item_append_text(item, "%u", v); + } + } + proto_item_append_text(item, "]"); + return offset; +} + +static int parse_padding(tvbuff_t *tvb, int offset, int alignment, proto_tree *pad_tree, const char *fmt, ...) +{ + if (offset % alignment) { + const int padding = alignment - (offset % alignment); + const char *txt; + va_list ap; + proto_item *ti; + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + proto_tree_add_subtree(pad_tree, tvb, offset, padding, ett_mswsp_msg_padding, &ti, txt); + va_end(ap); + + proto_item_append_text(ti, " (%d)", padding); + offset += padding; + } + DISSECTOR_ASSERT((offset % alignment) == 0); + return offset; +} + +static int parse_guid(tvbuff_t *tvb, int offset, proto_tree *tree, e_guid_t *guid, const char *text) +{ + const char *guid_str, *name, *bytes; + proto_tree *tr; + + tvb_get_letohguid(tvb, offset, guid); + guid_str = guid_to_str(wmem_packet_scope(), guid); + name = guids_get_guid_name(guid); + + tr = proto_tree_add_subtree_format(tree, tvb, offset, 16, ett_GUID, NULL, "%s: %s {%s}", text, name ? name : "", guid_str); + + + proto_tree_add_item(tr, hf_mswsp_guid_time_low, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tr, hf_mswsp_guid_time_mid, tvb, offset, 2, ENC_LITTLE_ENDIAN); + offset += 2; + proto_tree_add_item(tr, hf_mswsp_guid_time_high, tvb, offset, 2, ENC_LITTLE_ENDIAN); + offset += 2; + proto_tree_add_item(tr, hf_mswsp_guid_time_clock_hi, tvb, offset, 1, ENC_LITTLE_ENDIAN); + offset += 1; + proto_tree_add_item(tr, hf_mswsp_guid_time_clock_low, tvb, offset, 1, ENC_LITTLE_ENDIAN); + offset += 1; + bytes = bytestring_to_str(wmem_packet_scope(), &guid->data4[2], 6, ':'); + proto_tree_add_string(tr, hf_mswsp_guid_node, tvb, offset, 6, bytes); + + offset += 6; + + return offset; +} + +/*Language Code ID: http://msdn.microsoft.com/en-us/library/cc233968(v=prot.20).aspx */ +static int parse_lcid(tvbuff_t *tvb, int offset, proto_tree *parent_tree, const char *text) +{ + proto_item *item; + proto_tree *tree; + guint32 lcid; + + lcid = tvb_get_letohl(tvb, offset); + item = proto_tree_add_uint_format(parent_tree, hf_mswsp_lcid, tvb, offset, 4, lcid, "%s: 0x%x", text, lcid); + tree = proto_item_add_subtree(item, ett_LCID); + + proto_tree_add_uint(tree, hf_mswsp_lcid_langid, tvb, offset + 2, 2, lcid); + proto_tree_add_uint(tree, hf_mswsp_lcid_sortid, tvb, offset + 1, 1, (lcid >> 16) & 0xF); + offset += 4; + return offset; +} + +/*****************************************************************************************/ +/* 2.2.1.1 CBaseStorageVariant */ +static int parse_CBaseStorageVariant(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CBaseStorageVariant *value, const char *text); + +/* 2.2.1.2 CFullPropSpec */ +static int parse_CFullPropSpec(tvbuff_t *tvb, int offset, proto_tree *tree, proto_tree *pad_tree, struct CFullPropSpec *v, const char *fmt, ...); + +/* 2.2.1.3 CContentRestriction */ +static int parse_CContentRestriction(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CContentRestriction *v, const char *fmt, ...); + +/* 2.2.1.5 CNatLanguageRestriction */ +static int parse_CNatLanguageRestriction(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CNatLanguageRestriction *v, const char *fmt, ...); + +/* 2.2.1.6 CNodeRestriction */ +static int parse_CNodeRestriction(tvbuff_t *tvb, int offset, proto_tree *tree, proto_tree *pad_tree, struct CNodeRestriction *v, const char* fmt, ...); + +/* 2.2.1.7 CPropertyRestriction */ +static int parse_CPropertyRestriction(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CPropertyRestriction *v, const char *fmt, ...); + +/* 2.2.1.8 CReuseWhere */ +static int parse_CReuseWhere(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree _U_, struct CReuseWhere *v, const char *fmt, ...); + +/* 2.2.1.10 CSort */ +static int parse_CSort(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree _U_, const char *fmt, ...); + +/* 2.2.1.12 CCoercionRestriction */ +static int parse_CCoercionRestriction(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CCoercionRestriction *v, const char *fmt, ...); +/* 2.2.1.16 CRestrictionArray */ +static int parse_CRestrictionArray(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...); + +/* 2.2.1.17 CRestriction */ +static int parse_CRestriction(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CRestriction *v, const char *fmt, ...); + +/* 2.2.1.18 CColumnSet */ +static int parse_CColumnSet(tvbuff_t *tvb, int offset, proto_tree *tree, const char *fmt, ...); + +/* 2.2.1.20 CCategorizationSpec */ +static int parse_CCategorizationSpec(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...); + +/* 2.2.1.21 CCategSpec */ +static int parse_CCategSpec(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...); + +/* 2.2.1.22 CRangeCategSpec */ +static int parse_CRangeCategSpec(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...); + +/* 2.2.1.23 RANGEBOUNDARY */ +static int parse_RANGEBOUNDARY(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...); + +/* 2.2.1.24 CAggregSet */ +static int parse_CAggregSet(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...); + +/* 2.2.1.25 CAggregSpec */ +static int parse_CAggregSpec(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...); + +/* 2.2.1.26 CSortAggregSet */ +static int parse_CSortAggregSet(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...); + +/* 2.2.1.27 CAggregSortKey */ +static int parse_CAggregSortKey(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...); + +/* 2.2.1.28 CInGroupSortAggregSets */ +static int parse_CInGroupSortAggregSets(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...); + +/* 2.2.1.29 CInGroupSortAggregSet */ +static int parse_CInGroupSortAggregSet(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...); + +/* 2.2.1.30 CDbColId */ +static int parse_CDbColId(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *text); + +/* 2.2.1.31 CDbProp */ +static int parse_CDbProp(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct GuidPropertySet *propset, const char *fmt, ...); + +/* 2.2.1.32 CDbPropSet */ +static int parse_CDbPropSet(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...); + +/* 2.2.1.33 CPidMapper */ +static int parse_CPidMapper(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...); + +/* 2.2.1.34 CColumnGroupArray */ +static int parse_CColumnGroupArray(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...); + +/* 2.2.1.35 CColumnGroup */ +static int parse_CColumnGroup(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...); + +/* 2.2.1.41 CRowsetProperties */ +static int parse_CRowsetProperties(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...); + +/* 2.2.1.43 CSortSet */ +static int parse_CSortSet(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...); + +/* 2.2.1.44 CTableColumn */ +static int parse_CTableColumn(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CTableColumn *col, const char *fmt, ...); + + +/* +2.2.1.4 CInternalPropertyRestriction +2.2.1.9 CScopeRestriction +2.2.1.11 CVectorRestriction +2.2.1.13 CRelDocRestriction +2.2.1.14 CProbRestriction +2.2.1.15 CFeedbackRestriction +2.2.1.19 CCategorizationSet +2.2.1.45 SERIALIZEDPROPERTYVALUE +2.2.1.46 CCompletionCategSp +*/ + +static int parse_CSort(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree _U_, const char *fmt, ...) +{ + guint32 col, ord, ind; + + proto_item *item; + proto_tree *tree; + const char *txt; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CSort, &item, txt); + + col = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_cscort_column, tvb, offset, 4, col); + offset += 4; + + ord = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_cscort_order, tvb, offset, 4, ord); + offset += 4; + + ind = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_cscort_individual, tvb, offset, 4, ind); + offset += 4; + + offset = parse_lcid(tvb, offset, tree, "lcid"); + + proto_item_set_end(item, tvb, offset); + return offset; +} + +static int parse_CSortSet(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...) +{ + guint32 count, i; + + proto_item *item; + proto_tree *tree; + const char *txt; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CSortSet, &item, txt); + + count = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_cscortset_count, tvb, offset, 4, count); + offset += 4; + + for (i=0; i<count; i++) { + offset = parse_padding(tvb, offset, 4, tree, "padding_sortArray[%u]", i); + offset = parse_CSort(tvb, offset, tree, pad_tree, "sortArray[%u]", i); + } + + proto_item_set_end(item, tvb, offset); + return offset; +} + +static int parse_CTableColumn(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CTableColumn *col, const char *fmt, ...) +{ + static const value_string DBAGGTTYPE[] = { + {0x0, "DBAGGTTYPE_BYNONE"}, + {0x1, "DBAGGTTYPE_SUM"}, + {0x2, "DBAGGTTYPE_MAX"}, + {0x3, "DBAGGTTYPE_MIN"}, + {0x4, "DBAGGTTYPE_AVG"}, + {0x5, "DBAGGTTYPE_COUNT"}, + {0x6, "DBAGGTTYPE_CHILDCOUNT"}, + {0x7, "DBAGGTTYPE_BYFREQ"}, + {0x8, "DBAGGTTYPE_FIRST"}, + {0x9, "DBAGGTTYPE_DATERANGE"}, + {0xA, "DBAGGTTYPE_REPRESENTATIVEOF"}, + {0xB, "DBAGGTTYPE_EDITDISTANCE"}, + {0, NULL} + }; + + proto_item *item; + proto_tree *tree; + va_list ap; + struct vtype_data *type; + enum vType vtype_val = VT_EMPTY; + enum vType vtype_valhi = VT_EMPTY; + struct CFullPropSpec v; + const char *txt; + guint8 used; + + const char *modifier = ""; + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CTableColumn, &item, txt); + + offset = parse_CFullPropSpec(tvb, offset, tree, pad_tree, &v, "PropSpec"); + get_name_from_fullpropspec(&v, col->name, PROP_LENGTH); + col->vtype = tvb_get_letohl(tvb, offset); + vtype_val = (enum vType)col->vtype; + vtype_valhi = (enum vType)(col->vtype & 0xFF00); + if (vtype_valhi) { + if (vtype_valhi == VT_VECTOR) { + modifier = "|VT_VECTOR"; + } else if (vtype_valhi == VT_ARRAY) { + modifier = "|VT_ARRAY"; + } else { + modifier = "|(Unknown, possibly error)"; + } + } + type = vType_get_type(vtype_val); + DISSECTOR_ASSERT(type != NULL); + proto_tree_add_string_format_value(tree, hf_mswsp_ctablecolumn_vtype, tvb, offset, 4, type->str, "%s%s", type->str, modifier); + offset += 4; + + used = tvb_get_guint8(tvb, offset); + col->aggregateused = used; + proto_tree_add_uint(tree, hf_mswsp_ctablecolumn_aggused, tvb, offset, 1, used); + offset += 1; + + if (used) { + col->aggregatetype = tvb_get_guint8(tvb, offset); + proto_tree_add_string(tree, hf_mswsp_ctablecolumn_aggtype, tvb, offset, 1, val_to_str(col->aggregatetype, DBAGGTTYPE, "(Unknown: 0x%x)")); + offset += 1; + } + col->valueused = tvb_get_guint8(tvb, offset); + used = col->valueused; + proto_tree_add_uint(tree, hf_mswsp_ctablecolumn_valused, tvb, offset, 1, used); + offset += 1; + + if (used) { + offset = parse_padding(tvb, offset, 2, pad_tree, "padding_Value"); + + col->valueoffset = tvb_get_letohs(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_ctablecolumn_valoffset, tvb, offset, 2, col->valueoffset); + offset += 2; + + col->valuesize = tvb_get_letohs(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_ctablecolumn_valsize, tvb, offset, 2, col->valuesize); + offset += 2; + } + + used = tvb_get_guint8(tvb, offset); + col->statusused = used; + proto_tree_add_uint(tree, hf_mswsp_ctablecolumn_statused, tvb, offset, 2, used); + offset += 1; + + if (used) { + offset = parse_padding(tvb, offset, 2, pad_tree, "padding_Status"); + + col->statusoffset = tvb_get_letohs(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_ctablecolumn_statoffset, tvb, offset, 2, col->statusoffset); + offset += 2; + } + + used = tvb_get_guint8(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_ctablecolumn_lenused, tvb, offset, 2, used); + col->lengthused = used; + offset += 1; + + if (used) { + offset = parse_padding(tvb, offset, 2, pad_tree, "padding_Lenght"); + + col->lengthoffset = tvb_get_letohs(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_ctablecolumn_lenoffset, tvb, offset, 2, col->lengthoffset); + offset += 2; + } + + proto_item_set_end(item, tvb, offset); + return offset; +} + +static int parse_PRSPEC_Kind(tvbuff_t *tvb, int offset, proto_tree *tree, enum PRSPEC_Kind *prspec) +{ + static const value_string KIND[] = { + {0, "PRSPEC_LPWSTR"}, + {1, "PRSPEC_PROPID"}, + {0, NULL} + }; + + gint32 kind = tvb_get_letohl(tvb, offset); + DISSECTOR_ASSERT(kind < (PRSPEC_PROPID + 1)); + if (kind) { + *prspec = PRSPEC_PROPID; + } else { + *prspec = PRSPEC_LPWSTR; + } + proto_tree_add_string(tree, hf_mswsp_cfullpropspec_kind, tvb, offset, 4, val_to_str(*prspec, KIND, "(Unknown: 0x%x)")); + offset += 4; + return offset; +} + +static int parse_CFullPropSpec(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CFullPropSpec *v, const char *fmt, ...) +{ + struct GuidPropertySet *pset; + const char *id_str, *guid_str, *txt; + + proto_item *item; + proto_tree *tree; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CFullPropSpec, &item, txt); + + offset = parse_padding(tvb, offset, 8, pad_tree, "paddingPropSet"); + + offset = parse_guid(tvb, offset, tree, &v->guid, "GUID"); + pset = GuidPropertySet_find_guid(&v->guid); + + offset = parse_PRSPEC_Kind(tvb, offset, tree, &v->kind); + + v->u.propid = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_cfullpropspec_propid, tvb, offset, 4, v->u.propid); + offset += 4; + + if (v->kind == PRSPEC_LPWSTR) { + int len = 2*v->u.propid; + v->u.name = tvb_get_string_enc(wmem_packet_scope(), tvb, offset, len, ENC_LITTLE_ENDIAN | ENC_UCS_2); + proto_tree_add_string(tree, hf_mswsp_cfullpropspec_propname, tvb, offset, len, v->u.name); + offset += len; + } + + id_str = pset ? try_val_to_str(v->u.propid, pset->id_map) : NULL; + + if (id_str) { + proto_item_append_text(item, ": %s", id_str); + } else { + guid_str = guids_get_guid_name(&v->guid); + if (guid_str) { + proto_item_append_text(item, ": \"%s\"", guid_str); + } else { + guid_str = guid_to_str(wmem_packet_scope(), &v->guid); + proto_item_append_text(item, ": {%s}", guid_str); + } + + if (v->kind == PRSPEC_LPWSTR) { + proto_item_append_text(item, " \"%s\"", v->u.name); + } else if (v->kind == PRSPEC_PROPID) { + proto_item_append_text(item, " 0x%08x", v->u.propid); + } else { + proto_item_append_text(item, " <INVALID>"); + } + } + + proto_item_set_end(item, tvb, offset); + return offset; +} + + + +static const value_string PR_VALS[] = { + {PRLT, "PRLT"}, + {PRLE, "PRLE"}, + {PRGT, "PRGT"}, + {PRGE, "PRGE"}, + {PREQ, "PREQ"}, + {PRNE, "PRNE"}, + {PRRE, "PRRE"}, + {PRAllBits, "PRAllBits"}, + {PRSomeBits, "PRSomeBits"}, + {PRAll, "PRAll"}, + {PRAny, "PRAny"}, + {0, NULL} +}; + +static int parse_relop(tvbuff_t *tvb, int offset, proto_tree *tree, guint32 *relop, const char **str) +{ + const char *str1 = NULL, *str2 = NULL; + guint32 tmp = tvb_get_letohl(tvb, offset); + guint32 modifier = (tmp & 0xF00); + DISSECTOR_ASSERT((tmp & 0xf) < PRSomeBits +1); + + switch(tmp & 0xf) { + case PRLT: + *relop = PRLT; + break; + case PRLE: + *relop = PRLE; + break; + case PRGT: + *relop = PRGT; + break; + case PRGE: + *relop = PRGE; + break; + case PREQ: + *relop = PREQ; + break; + case PRNE: + *relop = PRNE; + break; + case PRRE: + *relop = PRRE; + break; + case PRAllBits: + *relop = PRAllBits; + break; + case PRSomeBits: + *relop = PRSomeBits; + break; + default: + break; + } + + str2 = val_to_str(*relop, PR_VALS, "0x%04x"); + + if (modifier) { + switch (modifier) { + case PRAll: + *relop = *relop | PRAll; + break; + case PRAny: + *relop |= PRAny; + break; + default: + DISSECTOR_ASSERT(false); + break; + } + str1 = try_val_to_str((modifier), PR_VALS); + if (str1) { + str1 = wmem_strdup_printf(wmem_packet_scope(), "%s | ", str1); + str2 = wmem_strdup_printf(wmem_packet_scope(), "%s%s", str1, str2); + } + } + proto_tree_add_string_format_value(tree, hf_mswsp_cproprestrict_relop, tvb, offset, 4, str2, "%s (0x%04x)", str2[0]=='\0' ? "" : str2, *relop); + + if (str) { + *str = str2; + } + return offset + 4; +} +static int parse_CPropertyRestriction(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CPropertyRestriction *v, const char *fmt, ...) +{ + proto_tree *tree; + proto_item *item; + const char *txt, *str = NULL; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CPropertyRestriction, &item, txt); + + offset = parse_relop(tvb, offset, tree, &v->relop, &str); + proto_item_append_text(item, " Op: %s", str); + + offset = parse_CFullPropSpec(tvb, offset, tree, pad_tree, &v->property, "Property"); + + offset = parse_CBaseStorageVariant(tvb, offset, tree, pad_tree, &v->prval, "prval"); + + offset = parse_padding(tvb, offset, 4, pad_tree, "padding_lcid"); + + v->lcid = tvb_get_letohl(tvb, offset); + offset = parse_lcid(tvb, offset, tree, "lcid"); + + proto_item_set_end(item, tvb, offset); + + return offset; +} + +static int parse_CCoercionRestriction(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CCoercionRestriction *v, const char *fmt, ...) +{ + proto_tree *tree; + proto_item *item; + const char *txt; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CCoercionRestriction, &item, txt); + + v->value = tvb_get_letohieee_float(tvb, offset); + proto_tree_add_float(tree, hf_mswsp_ccoercerestrict_value, tvb, offset, 4, v->value); + + offset += 4; + + offset = parse_CRestriction(tvb, offset, tree, pad_tree, &v->child, "child"); + + proto_item_set_end(item, tvb, offset); + return offset; +} + +static int parse_CContentRestriction(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CContentRestriction *v, const char *fmt, ...) +{ + proto_tree *tree; + proto_item *item; + va_list ap; + guint32 cc; + const char *str, *txt; + + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CContentRestriction, &item, txt); + + offset = parse_CFullPropSpec(tvb, offset, tree, pad_tree, &v->property, "Property"); + + offset = parse_padding(tvb, offset, 4, pad_tree, "Padding1"); + + cc = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_ccontentrestrict_cc, tvb, offset, 4, cc); + offset += 4; + + str = tvb_get_string_enc(wmem_packet_scope(), tvb, offset, 2*cc, ENC_LITTLE_ENDIAN | ENC_UCS_2); + v->phrase = str; + proto_tree_add_string(tree, hf_mswsp_ccontentrestrict_phrase, tvb, offset, 2*cc, str); + offset += 2*cc; + + offset = parse_padding(tvb, offset, 4, pad_tree, "Padding2"); + + v->lcid = tvb_get_letohl(tvb, offset); + offset = parse_lcid(tvb, offset, tree, "lcid"); + + v->method = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_ccontentrestrict_method, tvb, offset, 4, v->method); + offset += 4; + + proto_item_set_end(item, tvb, offset); + return offset; +} + +int parse_CNatLanguageRestriction(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CNatLanguageRestriction *v, const char *fmt, ...) +{ + proto_tree *tree; + proto_item *item; + va_list ap; + guint32 cc; + const char *str, *txt; + + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CNatLanguageRestriction, &item, txt); + + offset = parse_CFullPropSpec(tvb, offset, tree, pad_tree, &v->property, "Property"); + + offset = parse_padding(tvb, offset, 4, pad_tree, "padding_cc"); + + cc = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_natlangrestrict_cc, tvb, offset, 4, cc); + offset += 4; + + str = tvb_get_string_enc(wmem_packet_scope(), tvb, offset, 2*cc, ENC_LITTLE_ENDIAN | ENC_UCS_2); + v->phrase = str; + proto_tree_add_string(tree, hf_mswsp_natlangrestrict_phrase, tvb, offset, 2*cc, str); + offset += 2*cc; + + offset = parse_padding(tvb, offset, 4, pad_tree, "padding_lcid"); + + v->lcid = tvb_get_letohl(tvb, offset); + offset = parse_lcid(tvb, offset, tree, "lcid"); + + proto_item_set_end(item, tvb, offset); + return offset; +} + + +static int parse_CReuseWhere(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree _U_, struct CReuseWhere *v, const char *fmt, ...) +{ + proto_item *item; + va_list ap; + const char *txt; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_mswsp_msg_creusewhere, &item, txt); + v->whereId = tvb_get_letohl(tvb, offset); + offset += 4; + + proto_item_append_text(item, " Id: %u", v->whereId); + + proto_item_set_end(item, tvb, offset); + return offset; +} + +static const value_string RT_VALS[] = { + {RTNone, "RTNone"}, + {RTAnd, "RTAnd"}, + {RTOr, "RTOr"}, + {RTNot, "RTNot"}, + {RTContent, "RTContent"}, + {RTProperty, "RTProperty"}, + {RTProximity, "RTProximity"}, + {RTVector, ""}, + {RTNatLanguage, "RTNatLanguage"}, + {RTScope, "RTScope"}, + {RTCoerce_Add, "RTCoerce_Add"}, + {RTCoerce_Multiply, "RTCoerce_Multiply"}, + {RTCoerce_Absolute, "RTCoerce_Absolute"}, + {RTProb, "RTProb"}, + {RTFeedback, "RTFeedback"}, + {RTReldoc, "RTReldoc"}, + {RTReuseWhere, "RTReuseWhere"}, + {RTInternalProp, "RTInternalProp"}, + {RTPhrase, "RTInternalProp"}, + {0, NULL} +}; + +#define EP_ALLOC(T) (T*)wmem_alloc(wmem_packet_scope(), sizeof(T)) + +static int parse_rType(tvbuff_t *tvb, int offset, proto_tree *tree, enum rType *rtype, const char **str) +{ + const char *txt = NULL; + guint32 type = tvb_get_letohl(tvb, offset); + switch(type) { + case RTNone: + *rtype = RTNone; + break; + case RTAnd: + *rtype = RTAnd; + break; + case RTOr: + *rtype = RTOr; + break; + case RTNot: + *rtype = RTNot; + break; + case RTContent: + *rtype = RTContent; + break; + case RTProperty: + *rtype = RTProperty; + break; + case RTProximity: + *rtype = RTProximity; + break; + case RTVector: + *rtype = RTVector; + break; + case RTNatLanguage: + *rtype = RTNatLanguage; + break; + case RTScope: + *rtype = RTScope; + break; + case RTCoerce_Add: + *rtype = RTCoerce_Add; + break; + case RTCoerce_Multiply: + *rtype = RTCoerce_Multiply; + break; + case RTCoerce_Absolute: + *rtype = RTCoerce_Absolute; + break; + case RTProb: + *rtype = RTProb; + break; + case RTFeedback: + *rtype = RTFeedback; + break; + case RTReldoc: + *rtype = RTReldoc; + break; + case RTReuseWhere: + *rtype = RTReuseWhere; + break; + case RTInternalProp: + *rtype = RTInternalProp; + break; + default: + DISSECTOR_ASSERT(false); + break; + } + txt = val_to_str(*rtype, RT_VALS, "0x%.8x"); + proto_tree_add_string_format_value(tree, hf_mswsp_crestrict_ultype, tvb, offset, 4, txt, "%s (0x%.8x)", txt[0] == '0' ? "" : txt, *rtype); + if (str) { + *str = txt; + } + return offset + 4; +} + +static int parse_CRestriction(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CRestriction *v, const char *fmt, ...) +{ + proto_tree *tree; + proto_item *item; + const char *str, *txt; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CRestriction, &item, txt); + + + offset = parse_rType(tvb, offset, tree, &v->ulType, &str); + proto_item_append_text(item, " Type: %s", str); + + v->Weight = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_crestrict_weight, tvb, offset, 4, v->Weight); + offset += 4; + + switch(v->ulType) { + case RTNone: + break; + case RTAnd: + case RTOr: + case RTProximity: + case RTPhrase: { + v->u.RTAnd = EP_ALLOC(struct CNodeRestriction); + offset = parse_CNodeRestriction(tvb, offset, tree, pad_tree, v->u.RTAnd, "CNodeRestriction"); + break; + } + case RTNot: { + v->u.RTNot = EP_ALLOC(struct CRestriction); + offset = parse_CRestriction(tvb, offset, tree, pad_tree, + v->u.RTNot, "CRestriction"); + break; + } + case RTProperty: { + v->u.RTProperty = EP_ALLOC(struct CPropertyRestriction); + offset = parse_CPropertyRestriction(tvb, offset, tree, pad_tree, + v->u.RTProperty, "CPropertyRestriction"); + break; + } + case RTCoerce_Add: + case RTCoerce_Multiply: + case RTCoerce_Absolute: { + v->u.RTCoerce_Add = EP_ALLOC(struct CCoercionRestriction); + offset = parse_CCoercionRestriction(tvb, offset, tree, pad_tree, + v->u.RTCoerce_Add, "CCoercionRestriction"); + break; + } + case RTContent: { + v->u.RTContent = EP_ALLOC(struct CContentRestriction); + offset = parse_CContentRestriction(tvb, offset, tree, pad_tree, + v->u.RTContent, "CContentRestriction"); + break; + } + case RTReuseWhere: { + v->u.RTReuseWhere = EP_ALLOC(struct CReuseWhere); + offset = parse_CReuseWhere(tvb, offset, tree, pad_tree, + v->u.RTReuseWhere, "CReuseWhere"); + break; + } + case RTNatLanguage: { + v->u.RTNatLanguage = EP_ALLOC(struct CNatLanguageRestriction); + offset = parse_CNatLanguageRestriction(tvb, offset, tree, pad_tree, + v->u.RTNatLanguage, "CNatLanguageRestriction"); + break; + } + default: + proto_item_append_text(item, " Not supported!"); + } + + proto_item_set_end(item, tvb, offset); + return offset; +} + +static int parse_CRestrictionArray(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...) +{ + guint8 present, count; + + proto_tree *tree; + proto_item *item; + const char *txt; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CRestrictionArray, &item, txt); + + pad_tree = tree; + + count = tvb_get_guint8(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_crestrictarray_count, tvb, offset, 1, count); + offset += 1; + + present = tvb_get_guint8(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_crestrictarray_present, tvb, offset, 1, present); + offset += 1; + + if (present) { + unsigned i; + offset = parse_padding(tvb, offset, 4, pad_tree, "paddingCRestrictionPresent"); + + for (i=0; i<count; i++) { + struct CRestriction r; + offset = parse_CRestriction(tvb, offset, tree, pad_tree, &r, "Restriction[%d]", i); + } + } + proto_item_set_end(item, tvb, offset); + return offset; +} + +static int parse_CNodeRestriction(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct CNodeRestriction *v, const char *fmt, ...) +{ + proto_tree *tree; + proto_item *item; + unsigned i; + const char *txt; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CNodeRestriction, &item, txt); + + v->cNode = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_cnoderestrict_cnode, tvb, offset, 4, v->cNode); + offset += 4; + + for (i=0; i<v->cNode; i++) { + struct CRestriction r; + ZERO_STRUCT(r); + offset = parse_CRestriction(tvb, offset, tree, pad_tree, &r, "paNode[%u]", i); + offset = parse_padding(tvb, offset, 4, tree, "padding_paNode[%u]", i); /*at begin or end of loop ????*/ + + } + + proto_item_set_end(item, tvb, offset); + return offset; +} + + +/*****************************************************************************************/ + +static int vvalue_tvb_get0(tvbuff_t *tvb _U_, int offset _U_, void *val _U_) +{ + return 0; +} + +static int vvalue_tvb_get1(tvbuff_t *tvb, int offset, void *val) +{ + guint8 *ui1 = (guint8*)val; + *ui1 = tvb_get_guint8(tvb, offset); + return 1; +} + +static int vvalue_tvb_get2(tvbuff_t *tvb , int offset, void *val) +{ + guint16 *ui2 = (guint16*)val; + *ui2 = tvb_get_letohs(tvb, offset); + return 2; +} + +static int vvalue_tvb_get4(tvbuff_t *tvb , int offset, void *val) +{ + guint32 *ui4 = (guint32*)val; + *ui4 = tvb_get_letohl(tvb, offset); + return 4; +} + +static int vvalue_tvb_get8(tvbuff_t *tvb , int offset, void *val) +{ + guint64 *ui8 = (guint64*)val; + *ui8 = tvb_get_letoh64(tvb, offset); + return 8; +} + +static int vvalue_tvb_blob(tvbuff_t *tvb , int offset, void *val) +{ + struct data_blob *blob = (struct data_blob*)val; + guint32 len = tvb_get_letohl(tvb, offset); + const guint8 *data = tvb_get_ptr(tvb, offset + 4, len); + + blob->size = len; + blob->data = (guint8*)wmem_memdup(wmem_packet_scope(), data, len); + + return 4 + len; +} + +static int vvalue_tvb_lpstr(tvbuff_t *tvb , int offset, void *val) +{ + struct data_str *str = (struct data_str*)val; + gint len; + + str->len = tvb_get_letohl(tvb, offset); + str->str = tvb_get_stringz_enc(wmem_packet_scope(), tvb, offset + 4, &len, + ENC_ASCII|ENC_LITTLE_ENDIAN); + /* XXX test str->len == len */ + return 4 + len; +} + +static int vvalue_tvb_lpwstr_len(tvbuff_t *tvb , int offset, int length, void *val) +{ + struct data_str *str = (struct data_str*)val; + const gchar *ptr; + int len; + + if (length == 0) { + /* we don't know the length */ + ptr = tvb_get_stringz_enc(wmem_packet_scope(), tvb, offset, &len, + ENC_UTF_16|ENC_LITTLE_ENDIAN); + } else { + ptr = tvb_get_string_enc(wmem_packet_scope(), tvb, offset, length, + ENC_UTF_16|ENC_LITTLE_ENDIAN); + len = length; + } + str->str = ptr; + return len; +} + +static int vvalue_tvb_lpwstr(tvbuff_t *tvb , int offset, void *val) +{ + struct data_str *str = (struct data_str*)val; + + str->len = tvb_get_letohl(tvb, offset); + + return 4 + vvalue_tvb_lpwstr_len(tvb, offset + 4, 0, val); +} + +static int vvalue_tvb_vector_internal(tvbuff_t *tvb , int offset, struct vt_vector *val, struct vtype_data *type, int num) +{ + const int offset_in = offset; + const gboolean varsize = (type->size == -1); + const int elsize = varsize ? (int)sizeof(struct data_blob) : type->size; + guint8 *data = (guint8*)wmem_alloc(wmem_packet_scope(), elsize * num); + int len, i; + + val->len = num; + val->u.vt_ui1 = data; + DISSECTOR_ASSERT((void*)&val->u == ((void*)&val->u.vt_ui1)); + + for (i=0; i<num; i++) { + DISSECTOR_ASSERT_HINT(type->tvb_get != 0, + "type that we don't know yet how to handle, please submit a bug with trace"); + len = type->tvb_get(tvb, offset, data); + data += elsize; + offset += len; + if (varsize && (offset % 4) ) { /* at begin or end of loop ??? */ + int padding = 4 - (offset % 4); + offset += padding; + } + } + return offset - offset_in; +} + +static int vvalue_tvb_vector(tvbuff_t *tvb , int offset, struct vt_vector *val, struct vtype_data *type) +{ + const int num = tvb_get_letohl(tvb, offset); + return 4 + vvalue_tvb_vector_internal(tvb , offset+4, val, type, num); +} + +static void vvalue_strbuf_append_null(wmem_strbuf_t *strbuf _U_, void *ptr _U_) +{} + +static void vvalue_strbuf_append_i1(wmem_strbuf_t *strbuf, void *ptr) +{ + gint8 i1 = *(gint8*)ptr; + wmem_strbuf_append_printf(strbuf, "%d", (int)i1); +} + +static void vvalue_strbuf_append_i2(wmem_strbuf_t *strbuf, void *ptr) +{ + gint16 i2 = *(gint16*)ptr; + wmem_strbuf_append_printf(strbuf, "%d", (int)i2); +} + +static void vvalue_strbuf_append_i4(wmem_strbuf_t *strbuf, void *ptr) +{ + gint32 i4 = *(gint32*)ptr; + wmem_strbuf_append_printf(strbuf, "%d", i4); +} + +static void vvalue_strbuf_append_i8(wmem_strbuf_t *strbuf, void *ptr) +{ + gint64 i8 = *(gint64*)ptr; + wmem_strbuf_append_printf(strbuf, "%ld", i8); +} + +static void vvalue_strbuf_append_ui1(wmem_strbuf_t *strbuf, void *ptr) +{ + guint8 ui1 = *(guint8*)ptr; + wmem_strbuf_append_printf(strbuf, "%u", (unsigned)ui1); +} + +static void vvalue_strbuf_append_ui2(wmem_strbuf_t *strbuf, void *ptr) +{ + guint16 ui2 = *(guint16*)ptr; + wmem_strbuf_append_printf(strbuf, "%u", (unsigned)ui2); +} + +static void vvalue_strbuf_append_ui4(wmem_strbuf_t *strbuf, void *ptr) +{ + guint32 ui4 = *(guint32*)ptr; + wmem_strbuf_append_printf(strbuf, "%d", ui4); +} + +static void vvalue_strbuf_append_ui8(wmem_strbuf_t *strbuf, void *ptr) +{ + guint64 ui8 = *(guint64*)ptr; + wmem_strbuf_append_printf(strbuf, "%lu", ui8); +} + +static void vvalue_strbuf_append_r4(wmem_strbuf_t *strbuf, void *ptr) +{ + float r4 = *(float*)ptr; + wmem_strbuf_append_printf(strbuf, "%g", (double)r4); +} + +static void vvalue_strbuf_append_r8(wmem_strbuf_t *strbuf, void *ptr) +{ + double r8 = *(double*)ptr; + wmem_strbuf_append_printf(strbuf, "%g", r8); +} + +static void vvalue_strbuf_append_str(wmem_strbuf_t *strbuf, void *ptr) +{ + struct data_str *str = (struct data_str*)ptr; + wmem_strbuf_append_printf(strbuf, "\"%s\"", str->str); +} + +static void vvalue_strbuf_append_blob(wmem_strbuf_t *strbuf, void *ptr) +{ + struct data_blob *blob = (struct data_blob*)ptr; + wmem_strbuf_append_printf(strbuf, "size: %d", (int)blob->size); +} + +static void vvalue_strbuf_append_bool(wmem_strbuf_t *strbuf, void *ptr) +{ + guint16 val = *(guint*)ptr; + switch (val) { + case 0: + wmem_strbuf_append(strbuf, "False"); + break; + case 0xffff: + wmem_strbuf_append(strbuf, "True"); + break; + default: + wmem_strbuf_append_printf(strbuf, "Invalid (0x%4x)", val); + } +} + +static void vvalue_strbuf_append_vector(wmem_strbuf_t *strbuf, struct vt_vector val, struct vtype_data *type) +{ + const int elsize = (type->size == -1) ? (int)sizeof(struct data_blob) : type->size; + unsigned i; + guint8 *data = val.u.vt_ui1; + wmem_strbuf_append_c(strbuf, '['); + for (i=0; i<val.len; i++) { + if (i>0) { + wmem_strbuf_append_c(strbuf, ','); + } + type->strbuf_append(strbuf, data); + data += elsize; + } + wmem_strbuf_append_c(strbuf, ']'); +} + +static struct vtype_data VT_TYPE[] = { + {VT_EMPTY, "VT_EMPTY", 0, vvalue_tvb_get0, NULL, vvalue_strbuf_append_null}, + {VT_NULL, "VT_NULL", 0, vvalue_tvb_get0, NULL, vvalue_strbuf_append_null}, + {VT_I2, "VT_I2", 2, vvalue_tvb_get2, NULL, vvalue_strbuf_append_i2}, + {VT_I4, "VT_I4", 4, vvalue_tvb_get4, NULL, vvalue_strbuf_append_i4}, + {VT_R4, "VT_R4", 4, vvalue_tvb_get4, NULL, vvalue_strbuf_append_r4}, + {VT_R8, "VT_R8", 8, vvalue_tvb_get8, NULL, vvalue_strbuf_append_r8}, + {VT_CY, "VT_CY", 8, vvalue_tvb_get8, NULL, vvalue_strbuf_append_i8}, + {VT_DATE, "VT_DATE", 8, vvalue_tvb_get8, NULL, vvalue_strbuf_append_r8}, + {VT_BSTR, "VT_BSTR", -1, vvalue_tvb_lpwstr, vvalue_tvb_lpwstr_len, vvalue_strbuf_append_str}, + {VT_ERROR, "VT_ERROR", 4, vvalue_tvb_get4, NULL, vvalue_strbuf_append_ui4}, + {VT_BOOL, "VT_BOOL", 2, vvalue_tvb_get2, NULL, vvalue_strbuf_append_bool}, + {VT_VARIANT, "VT_VARIANT", -1, NULL, NULL, NULL}, + {VT_DECIMAL, "VT_DECIMAL", 16, NULL, NULL, NULL}, + {VT_I1, "VT_I1", 1, vvalue_tvb_get1, NULL, vvalue_strbuf_append_i1}, + {VT_UI1, "VT_UI1", 1, vvalue_tvb_get1, NULL, vvalue_strbuf_append_ui1}, + {VT_UI2, "VT_UI2", 2, vvalue_tvb_get2, NULL, vvalue_strbuf_append_ui2}, + {VT_UI4, "VT_UI4", 4, vvalue_tvb_get4, NULL, vvalue_strbuf_append_ui4}, + {VT_I8, "VT_I8", 8, vvalue_tvb_get8, NULL, vvalue_strbuf_append_i8}, + {VT_UI8, "VT_UI8", 8, vvalue_tvb_get8, NULL, vvalue_strbuf_append_ui8}, + {VT_INT, "VT_INT", 4, vvalue_tvb_get4, NULL, vvalue_strbuf_append_i4}, + {VT_UINT, "VT_UINT", 4, vvalue_tvb_get4, NULL, vvalue_strbuf_append_ui4}, + {VT_LPSTR, "VT_LPSTR", -1, vvalue_tvb_lpstr, NULL, vvalue_strbuf_append_str}, + {VT_LPWSTR, "VT_LPWSTR", -1, vvalue_tvb_lpwstr, vvalue_tvb_lpwstr_len, vvalue_strbuf_append_str}, + {VT_COMPRESSED_LPWSTR, "VT_COMPRESSED_LPWSTR", -1, NULL, NULL, vvalue_strbuf_append_str}, + {VT_FILETIME, "VT_FILETIME", 8, vvalue_tvb_get8, NULL, vvalue_strbuf_append_i8}, + {VT_BLOB, "VT_BLOB", -1, vvalue_tvb_blob, NULL, vvalue_strbuf_append_blob}, + {VT_BLOB_OBJECT, "VT_BLOB_OBJECT", -1, vvalue_tvb_blob, NULL, vvalue_strbuf_append_blob}, + {VT_CLSID, "VT_CLSID", 16, NULL, NULL, NULL} +}; + +static struct vtype_data *vType_get_type(guint16 t) +{ + unsigned i; + t = (t & 0xFF); + for (i=0; i<array_length(VT_TYPE); i++) { + if (t == VT_TYPE[i].tag) { + return &VT_TYPE[i]; + } + } + return NULL; +} + +static const char *str_CBaseStorageVariant(struct CBaseStorageVariant *value, gboolean print_type) +{ + + wmem_strbuf_t *strbuf = wmem_strbuf_new(wmem_packet_scope(), ""); + if (value == NULL) { + return "<NULL>"; + } + + if (value->type == NULL) { + return "<??""?>"; + } + + if (print_type) { + wmem_strbuf_append(strbuf, value->type->str); + + if (value->vType & 0xFF00) { + wmem_strbuf_append_printf(strbuf, "[%d]", value->vValue.vt_vector.len); + } + wmem_strbuf_append(strbuf, ": "); + } + + switch (value->vType & 0xFF00) { + case 0: + value->type->strbuf_append(strbuf, &value->vValue); + break; + case VT_ARRAY: + vvalue_strbuf_append_vector(strbuf, value->vValue.vt_array.vData, value->type); + break; + case VT_VECTOR: + vvalue_strbuf_append_vector(strbuf, value->vValue.vt_vector, value->type); + break; + default: + wmem_strbuf_append(strbuf, "Invalid"); + } + + return wmem_strbuf_get_str(strbuf); +} + +static int parse_vType(tvbuff_t *tvb, int offset, guint16 *vtype) +{ + guint16 tmp_vtype = tvb_get_letohs(tvb, offset); + guint16 modifier = tmp_vtype & 0xFF00; + + switch (tmp_vtype & 0xFF) { + case VT_EMPTY: + *vtype = VT_EMPTY; + break; + case VT_NULL: + *vtype = VT_NULL; + break; + case VT_I2: + *vtype = VT_I2; + break; + case VT_I4: + *vtype = VT_I4; + break; + case VT_R4: + *vtype = VT_R4; + break; + case VT_R8: + *vtype = VT_R8; + break; + case VT_CY: + *vtype = VT_CY; + break; + case VT_DATE: + *vtype = VT_DATE; + break; + case VT_BSTR: + *vtype = VT_BSTR; + break; + case VT_ERROR: + *vtype = VT_ERROR; + break; + case VT_BOOL: + *vtype = VT_BOOL; + break; + case VT_VARIANT: + *vtype = VT_VARIANT; + break; + case VT_DECIMAL: + *vtype = VT_DECIMAL; + break; + case VT_I1: + *vtype = VT_I1; + break; + case VT_UI1: + *vtype = VT_UI1; + break; + case VT_UI2: + *vtype = VT_UI2; + break; + case VT_UI4: + *vtype = VT_UI4; + break; + case VT_I8: + *vtype = VT_I8; + break; + case VT_UI8: + *vtype = VT_UI8; + break; + case VT_INT: + *vtype = VT_INT; + break; + case VT_UINT: + *vtype = VT_UINT; + break; + case VT_LPSTR: + *vtype = VT_LPSTR; + break; + case VT_LPWSTR: + *vtype = VT_LPWSTR; + break; + case VT_COMPRESSED_LPWSTR: + *vtype = VT_COMPRESSED_LPWSTR; + break; + case VT_FILETIME: + *vtype = VT_FILETIME; + break; + case VT_BLOB: + *vtype = VT_BLOB; + break; + case VT_BLOB_OBJECT: + *vtype = VT_BLOB_OBJECT; + break; + case VT_CLSID: + *vtype = VT_CLSID; + break; + default: + DISSECTOR_ASSERT(false); + break; + } + if (modifier) { + switch (modifier) { + case VT_VECTOR: + *vtype |= VT_VECTOR; + break; + case VT_ARRAY: + *vtype |= VT_ARRAY; + break; + default: + DISSECTOR_ASSERT(false); + break; + } + } + return offset + 2; +} + +static int parse_CBaseStorageVariant(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree _U_, struct CBaseStorageVariant *value, const char *text) +{ + int i, len; + proto_item *ti, *ti_type, *ti_val; + proto_tree *tree, *tr; + enum vType highType; + + ZERO_STRUCT(*value); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CBaseStorageVariant, &ti, text); + + parse_vType(tvb, offset, &value->vType); + value->type = vType_get_type(value->vType); + + DISSECTOR_ASSERT(value->type != NULL); + ti_type = proto_tree_add_string(tree, hf_mswsp_cbasestorvariant_vtype, tvb, offset, 2, value->type->str); + offset += 2; + + value->vData1 = tvb_get_guint8(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_cbasestorvariant_vdata1, tvb, offset, 1, value->vData1); + offset += 1; + + value->vData2 = tvb_get_guint8(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_cbasestorvariant_vdata2, tvb, offset, 1, value->vData2); + offset += 1; + + highType = (enum vType)(value->vType & 0xFF00); + + if (value->type == NULL) { + goto not_supported; + } + + ti_val = proto_tree_add_string(tree, hf_mswsp_cbasestorvariant_vvalue, tvb, offset, 0, ""); + + switch (highType) { + case VT_EMPTY: + DISSECTOR_ASSERT_HINT(value->type->tvb_get != 0, + "type that we don't know yet how to handle, please submit a bug with trace"); + len = value->type->tvb_get(tvb, offset, &value->vValue.vt_single); + offset += len; + break; + case VT_VECTOR: + proto_item_append_text(ti_type, "|VT_VECTOR"); + tr = proto_item_add_subtree(ti_val, ett_CBaseStorageVariant_Vector); + + len = vvalue_tvb_vector(tvb, offset, &value->vValue.vt_vector, value->type); + proto_tree_add_uint(tr, hf_mswsp_cbasestorvariant_num, tvb, offset, 4, value->vValue.vt_vector.len); + offset += len; + break; + case VT_ARRAY: { + guint16 cDims, fFeatures; + guint32 cbElements, cElements, lLbound; + int num = 1; + + proto_item_append_text(ti_type, "|VT_ARRAY"); + tr = proto_item_add_subtree(ti_val, ett_CBaseStorageVariant_Array); + + cDims = tvb_get_letohs(tvb, offset); + proto_tree_add_uint(tr, hf_mswsp_cbasestorvariant_cdims, tvb, offset, 2, cDims); + offset += 2; + + fFeatures = tvb_get_letohs(tvb, offset); + proto_tree_add_uint(tr, hf_mswsp_cbasestorvariant_ffeatures, tvb, offset, 2, fFeatures); + offset += 2; + + cbElements = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tr, hf_mswsp_cbasestorvariant_cbelements, tvb, offset, 4, cbElements); + offset += 4; + for (i=0; i<cDims; i++) { + cElements = tvb_get_letohl(tvb, offset); + lLbound = tvb_get_letohl(tvb, offset + 4); + proto_tree_add_string_format(tr, hf_mswsp_cbasestorvariant_rgsabound, tvb, offset, 8, "", "Rgsabound[%d]: (%d:%d)", i, cElements, lLbound); + offset += 8; + num *= cElements; + } + + len = vvalue_tvb_vector_internal(tvb , offset, &value->vValue.vt_array.vData, value->type, num); + offset += len; + break; + } + default: + proto_item_append_text(ti_type, "|0x%x", highType); + } + proto_item_set_end(ti, tvb, offset); + proto_item_set_end(ti_val, tvb, offset); + + proto_item_append_text(ti_val, " %s", str_CBaseStorageVariant(value, false)); + proto_item_append_text(ti, " %s", str_CBaseStorageVariant(value, true)); + + goto done; + +not_supported: + proto_item_append_text(ti, ": sorry, vType %02x not handled yet!", (unsigned)value->vType); +done: + return offset; +} + +enum { + DBKIND_GUID_NAME = 0, + DBKIND_GUID_PROPID = 1 +}; + +static int parse_CDbColId(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *text) +{ + guint32 eKind, ulId; + e_guid_t guid; + const char *str; + static const char *KIND[] = {"DBKIND_GUID_NAME", "DBKIND_GUID_PROPID"}; + + proto_item *tree_item; + proto_tree *tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CDbColId, &tree_item, text); + + eKind = tvb_get_letohl(tvb, offset); + str = (eKind < 2 ? KIND[eKind] : "???"); + proto_tree_add_string_format_value(tree, hf_mswsp_cdbcolid_ekind, tvb, offset, 4, str, "%s (%u)", str, eKind); + offset += 4; + + offset = parse_padding(tvb, offset, 8, pad_tree, "paddingGuidAlign"); + + offset = parse_guid(tvb, offset, tree, &guid, "GUID"); + + ulId = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_cdbcolid_ulid, tvb, offset, 4, ulId); + offset += 4; + + if (eKind == DBKIND_GUID_NAME) { + char *name; + int len = ulId; + name = tvb_get_string_enc(wmem_packet_scope(), tvb, offset, len, ENC_LITTLE_ENDIAN | ENC_UCS_2); + proto_item_append_text(tree_item, " \"%s\"", name); + proto_tree_add_string_format_value(tree, hf_mswsp_cdbcolid_vstring, tvb, offset, len, name, "\"%s\"", name); + offset += len; + } else if (eKind == DBKIND_GUID_PROPID) { + proto_item_append_text(tree_item, " %08x", ulId); + } else { + proto_item_append_text(tree_item, "<INVALID>"); + } + + proto_item_set_end(tree_item, tvb, offset); + + return offset; +} + +static int parse_CDbProp(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, struct GuidPropertySet *propset, const char *fmt, ...) +{ + static const value_string EMPTY_VS[] = {{0, NULL}}; + const value_string *vs = (propset && propset->id_map) ? propset->id_map : EMPTY_VS; + guint32 id, opt, status; + struct CBaseStorageVariant value; + proto_item *item; + proto_tree *tree; + const char *str, *txt; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CDbProp, &item, txt); + + id = tvb_get_letohl(tvb, offset); + str = val_to_str(id, vs, "0x%08x"); + proto_tree_add_string_format_value(tree, hf_mswsp_cdbprop_id, tvb, offset, 4, str, "%s (0x%08x)", (str[0] == '0' ? "" : str), id); + offset += 4; + proto_item_append_text(item, " Id: %s", str); + + opt = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_cdbprop_options, tvb, offset, 4, opt); + offset += 4; + + status = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_cdbprop_status, tvb, offset, 4, status); + offset += 4; + + offset = parse_CDbColId(tvb, offset, tree, pad_tree, "colid"); + + offset = parse_CBaseStorageVariant(tvb, offset, tree, pad_tree, &value, "vValue"); + + str = str_CBaseStorageVariant(&value, true); + proto_item_append_text(item, " %s", str); + proto_item_set_end(item, tvb, offset); + + return offset; +} + +static int parse_CDbPropSet(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...) +{ + int i, num; + e_guid_t guid; + struct GuidPropertySet *pset; + proto_item *item; + proto_tree *tree; + const char *txt; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CDbPropSet, &item, txt); + + offset = parse_guid(tvb, offset, tree, &guid, "guidPropertySet"); + + pset = GuidPropertySet_find_guid(&guid); + + if (pset) { + proto_item_append_text(item, " \"%s\" (%s)", pset->desc, pset->def); + } else { + const char *guid_str = guid_to_str(wmem_packet_scope(), &guid); + proto_item_append_text(item, " {%s}", guid_str); + } + + offset = parse_padding(tvb, offset, 4, pad_tree, "guidPropertySet"); + + num = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_cdbpropset_cprops, tvb, offset, 4, num); + offset += 4; + proto_item_append_text(item, " Num: %d", num); + + for (i = 0; i<num; i++) { + offset = parse_padding(tvb, offset, 4, pad_tree, "aProp[%d]", i); + offset = parse_CDbProp(tvb, offset, tree, pad_tree, pset, "aProp[%d]", i); + } + + proto_item_set_end(item, tvb, offset); + return offset; +} + +static int parse_PropertySetArray(tvbuff_t *tvb, int offset, int size_offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...) +{ + const int offset_in = offset; + guint32 size, num; + int i; + proto_tree *tree; + proto_item *item; + const char *txt; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CDbPropSet_Array, &item, txt); + + size = tvb_get_letohl(tvb, size_offset); + proto_tree_add_item(tree, hf_mswsp_msg_ConnectIn_Blob1, tvb, + size_offset, 4, ENC_LITTLE_ENDIAN); + + num = tvb_get_letohl(tvb, offset); + proto_tree_add_item(tree, hf_mswsp_msg_ConnectIn_PropSets_num, tvb, + offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + for (i = 0; i < (int)num; i++) { + offset = parse_CDbPropSet(tvb, offset, tree, pad_tree, "PropertySet[%d]", i); + } + + proto_item_set_end(item, tvb, offset); + DISSECTOR_ASSERT(offset - offset_in == (int)size); + return offset; +} + +int parse_CColumnSet(tvbuff_t *tvb, int offset, proto_tree *tree, const char *fmt, ...) +{ + guint32 count, v, i; + proto_item *item; + const char *txt; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + count = tvb_get_letohl(tvb, offset); + offset += 4; + proto_tree_add_subtree(tree, tvb, offset, count * 4, ett_mswsp_uin32_array, &item, txt); + proto_item_append_text(item, " Count %u [", count); + + for (i=0; i<count; i++) { + v = tvb_get_letohl(tvb, offset); + offset += 4; + if (i>0) { + proto_item_append_text(item, ",%u", v); + } else { + proto_item_append_text(item, "%u", v); + } + } + proto_item_append_text(item, "]"); + return offset; +} + +/* 2.2.1.23 RANGEBOUNDARY */ +int parse_RANGEBOUNDARY(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...) +{ + guint32 ulType; + guint8 labelPresent; + proto_item *item; + proto_tree *tree; + const char *txt; + struct CBaseStorageVariant prval; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + tree =proto_tree_add_subtree (parent_tree, tvb, offset, 0, ett_RANGEBOUNDARY, &item, txt); + + ulType = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_rangeboundry_ultype, tvb, offset, 4, ulType); + proto_item_append_text(item, ": Type 0x%08x", ulType); + offset += 4; + + ZERO_STRUCT(prval); + offset = parse_CBaseStorageVariant(tvb, offset, tree, pad_tree, &prval, "prVal"); + + labelPresent = tvb_get_guint8(tvb, offset); + proto_tree_add_string_format_value(tree, hf_mswsp_rangeboundry_labelpresent, tvb, offset, 1, "", "%s", labelPresent ? "True" : "False"); + offset += 1; + + if (labelPresent) { + guint32 ccLabel; + const char *label; + offset = parse_padding(tvb, offset, 4, pad_tree, "paddingLabelPresent"); + + ccLabel = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_rangeboundry_cclabel, tvb, offset, 4, ccLabel); + offset += 4; + + label = tvb_get_string_enc(wmem_packet_scope(), tvb, offset, 2*ccLabel, ENC_LITTLE_ENDIAN | ENC_UCS_2); + proto_tree_add_string(tree, hf_mswsp_rangeboundry_label, tvb, offset, 2*ccLabel, label); + proto_item_append_text(item, " Label: \"%s\"", label); + offset += 2*ccLabel; + } + + proto_item_append_text(item, " Val: %s", str_CBaseStorageVariant(&prval, true)); + + proto_item_set_end(item, tvb, offset); + return offset; +} + + +/* 2.2.1.22 CRangeCategSpec */ +int parse_CRangeCategSpec(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...) +{ + proto_item *item; + proto_tree *tree; + va_list ap; + unsigned i; + const char *txt; + guint32 cRange; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CRangeCategSpec, &item, txt); + + offset = parse_lcid(tvb, offset, tree, "lcid"); + + cRange = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_crangecategspec_crange, tvb, offset, 4, cRange); + offset += 4; + + for (i=0; i<cRange; i++) { + offset = parse_RANGEBOUNDARY(tvb, offset, tree, pad_tree, "aRangeBegin[%u]", i); + + } + + proto_item_set_end(item, tvb, offset); + return offset; +} + +/* 2.2.1.21 CCategSpec */ +int parse_CCategSpec(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...) +{ + proto_item *item; + proto_tree *tree; + + va_list ap; + guint32 type; + const char *txt; + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CCategSpec, &item, txt); + + type = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_ccategspec_type, tvb, offset, 4, type); + proto_item_append_text(item, " Type %u", type); + offset += 4; + + offset = parse_CSort(tvb, offset, tree, pad_tree, "CSort"); + + offset = parse_CRangeCategSpec(tvb, offset, tree, pad_tree, "CRangeCategSpec"); + + proto_item_set_end(item, tvb, offset); + return offset; +} + +/* 2.2.1.25 CAggregSpec */ +static int parse_CAggregSpec(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...) +{ + proto_item *item; + proto_tree *tree; + va_list ap; + guint8 type; + guint32 ccAlias, idColumn; + const char *alias, *txt; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CAggregSpec, &item, txt); + + type = tvb_get_guint8(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_caggregspec_type, tvb, offset, 1, type); + proto_item_append_text(item, "type: %u", type); + offset += 1; + + offset = parse_padding(tvb, offset, 4, pad_tree, "padding"); + + ccAlias = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_caggregspec_ccalias, tvb, offset, 1, ccAlias); + offset += 4; + + alias = tvb_get_string_enc(wmem_packet_scope(), tvb, offset, 2*ccAlias, ENC_LITTLE_ENDIAN | ENC_UCS_2); + proto_tree_add_string(tree, hf_mswsp_caggregspec_alias, tvb, offset, 2*ccAlias, alias); + offset += 2*ccAlias; + + idColumn = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_caggregspec_idcolumn, tvb, offset, 1, idColumn); + offset += 4; + /* Optional ??? + ulMaxNumToReturn, idRepresentative; + */ + + proto_item_set_end(item, tvb, offset); + return offset; +} + +/* 2.2.1.24 CAggregSet */ +static int parse_CAggregSet(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...) +{ + guint32 cCount, i; + proto_item *item; + proto_tree *tree; + const char *txt; + + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CAggregSet, &item, txt); + + cCount = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_caggregset_count, tvb, offset, 4, cCount); + offset += 4; + + for (i=0; i<cCount; i++) { + /* 2.2.1.25 CAggregSpec */ + offset = parse_CAggregSpec(tvb, offset, tree, pad_tree, "AggregSpecs[%u]", i); + } + + proto_item_set_end(item, tvb, offset); + return offset; +} + +/* 2.2.1.27 CAggregSortKey */ +static int parse_CAggregSortKey(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...) +{ + guint32 order; + proto_item *item; + proto_tree *tree; + const char *txt; + + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CAggregSortKey, &item, txt); + + order = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_caggregsortkey_order, tvb, offset, 4, order); + offset += 4; + + offset = parse_CAggregSpec(tvb, offset, tree, pad_tree, "ColumnSpec"); + + proto_item_set_end(item, tvb, offset); + return offset; +} + + +/* 2.2.1.26 CSortAggregSet */ +static int parse_CSortAggregSet(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...) +{ + guint32 cCount, i; + proto_item *item; + proto_tree *tree; + const char *txt; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CSortAggregSet, &item, txt); + + cCount = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_csortaggregset_count, tvb, offset, 4, cCount); + offset += 4; + + for (i=0; i<cCount; i++) { + /* 2.2.1.27 CAggregSortKey */ + offset = parse_CAggregSortKey(tvb, offset, tree, pad_tree, "SortKeys[%u]", i); + } + + proto_item_set_end(item, tvb, offset); + return offset; +} + +enum CInGroupSortAggregSet_type { + GroupIdDefault = 0x00, /* The default for all ranges. */ + GroupIdMinValue = 0x01, /*The first range in the parent's group.*/ + GroupIdNull = 0x02, /*The last range in the parent's group.*/ + GroupIdValue = 0x03 +}; + +static int parse_CInGroupSortAggregSet_type(tvbuff_t *tvb, int offset, proto_tree *tree, enum CInGroupSortAggregSet_type *type) +{ + guint8 tmp = tvb_get_guint8(tvb, offset); + switch(tmp) { + case GroupIdDefault: + *type = GroupIdDefault; + break; + case GroupIdMinValue: + *type = GroupIdMinValue; + break; + case GroupIdNull: + *type = GroupIdNull; + break; + case GroupIdValue: + *type = GroupIdValue; + break; + default: + DISSECTOR_ASSERT(false); + break; + } + proto_tree_add_uint(tree, hf_mswsp_cingroupsortaggregset_type, tvb, offset, 1, *type); + return offset + 1; +} + +/* 2.2.1.29 CInGroupSortAggregSet */ +static int parse_CInGroupSortAggregSet(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...) +{ + proto_item *item; + proto_tree *tree; + va_list ap; + enum CInGroupSortAggregSet_type type; + const char *txt; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CInGroupSortAggregSet, &item, txt); + + offset = parse_CInGroupSortAggregSet_type(tvb, offset, tree, &type); + offset = parse_padding(tvb, offset, 4, pad_tree, "CInGroupSortAggregSet"); + + if (type == GroupIdValue) { + struct CBaseStorageVariant id; + offset = parse_CBaseStorageVariant(tvb, offset, tree, pad_tree, &id, "inGroupId"); + } + + offset = parse_CSortAggregSet(tvb, offset, tree, pad_tree, "SortAggregSet"); + + proto_item_set_end(item, tvb, offset); + return offset; +} + + +/* 2.2.1.28 CInGroupSortAggregSets */ +static int parse_CInGroupSortAggregSets(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...) +{ + guint32 cCount, i; + proto_item *item; + proto_tree *tree; + const char *txt; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CInGroupSortAggregSets, &item, txt); + + cCount = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_cingroupsortaggregsets_count, tvb, offset, 4, cCount); + offset += 4; + + for (i=0; i<cCount; i++) { + /* 2.2.1.29 CInGroupSortAggregSet */ + offset = parse_CInGroupSortAggregSet(tvb, offset, tree, pad_tree, "SortSets[%u]", i); + } + + proto_item_set_end(item, tvb, offset); + return offset; +} + +/* 2.2.1.20 CCategorizationSpec */ +int parse_CCategorizationSpec(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...) +{ + guint32 cMaxResults; + proto_item *item; + proto_tree *tree; + const char *txt; + + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CCategorizationSpec, &item, txt); + + /* 2.2.1.18 CColumnSet */ + offset = parse_CColumnSet(tvb, offset, tree, "csColumns"); + + /* 2.2.1.21 CCategSpec */ + offset = parse_CCategSpec(tvb, offset, tree, pad_tree, "Spec"); + + /* 2.2.1.24 CAggregSet */ + offset = parse_CAggregSet(tvb, offset, tree, pad_tree, "AggregSet"); + + /* 2.2.1.26 CSortAggregSet */ + offset = parse_CSortAggregSet(tvb, offset, tree, pad_tree, "SortAggregSet"); + + /* 2.2.1.28 CInGroupSortAggregSets */ + offset = parse_CInGroupSortAggregSets(tvb, offset, tree, pad_tree, "InGroupSortAggregSets"); + + cMaxResults = tvb_get_letohl(tvb, offset); + proto_tree_add_int(tree, hf_mswsp_categorizationspec_cmaxres, tvb, offset, 4, cMaxResults); + offset += 4; + + proto_item_set_end(item, tvb, offset); + return offset; +} + +static int parse_BooleanOptions(tvbuff_t *tvb, int offset, proto_tree *parent_tree) +{ + proto_item *item; + proto_tree *tree; + guint32 opt = tvb_get_letohl(tvb, offset); + item = proto_tree_add_uint_format(parent_tree, hf_mswsp_bool_options, tvb, offset, 4, opt, + "uBooleanOptions: 0x%08x", opt); + tree = proto_item_add_subtree(item, ett_mswsp_bool_options); + proto_tree_add_uint(tree, hf_mswsp_bool_options_cursor, tvb, offset, 1, opt & 0x7); + proto_tree_add_boolean(tree, hf_mswsp_bool_options_async, tvb, offset, + 4, opt); + proto_tree_add_boolean(tree, hf_mswsp_bool_options_firstrows, tvb, offset, + 4, opt); + proto_tree_add_boolean(tree, hf_mswsp_bool_options_holdrows, tvb, offset, + 4, opt); + proto_tree_add_boolean(tree, hf_mswsp_bool_options_chaptered, tvb, offset, + 4, opt); + proto_tree_add_boolean(tree, hf_mswsp_bool_options_useci, tvb, offset, + 4, opt); + proto_tree_add_boolean(tree, hf_mswsp_bool_options_defertrim, tvb, offset, + 4, opt); + proto_tree_add_boolean(tree, hf_mswsp_bool_options_rowsetevents, tvb, offset, + 4, opt); + proto_tree_add_boolean(tree, hf_mswsp_bool_options_dontcomputeexpensive, tvb, offset, + 4, opt); + offset += 4; + + return offset; +} +int parse_CRowsetProperties(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree _U_, const char *fmt, ...) +{ + guint32 maxres, timeout; + proto_item *item; + proto_tree *tree; + const char *txt; + + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + + va_end(ap); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CRowsetProperties, &item, txt); + + offset = parse_BooleanOptions(tvb, offset, tree); + + proto_tree_add_item(tree, hf_mswsp_crowsetprops_ulmaxopenrows, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + proto_tree_add_item(tree, hf_mswsp_crowsetprops_ulmemusage, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + maxres = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_crowsetprops_cmaxresults, tvb, offset, 4, maxres); + offset += 4; + + timeout = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_crowsetprops_ccmdtimeout, tvb, offset, 4, timeout); + offset += 4; + + proto_item_set_end(item, tvb, offset); + return offset; +} + +int parse_CPidMapper(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...) +{ + proto_item *item; + proto_tree *tree; + va_list ap; + guint32 count, i; + const char *txt; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CPidMapper, &item, txt); + + count = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_cpidmapper_count, tvb, offset, 4, count); + offset += 4; + + offset = parse_padding(tvb, offset, 8, pad_tree, "CPidMapper_PropSpec"); + + for (i=0; i<count; i++) { + struct CFullPropSpec v; + ZERO_STRUCT(v); + /*at begin or end of loop???*/ + offset = parse_padding(tvb, offset, 4, pad_tree, + "CPidMapper_PropSpec[%u]", i); + offset = parse_CFullPropSpec(tvb, offset, tree, pad_tree, &v, "PropSpec[%u]", i); + } + + proto_item_set_end(item, tvb, offset); + return offset; +} + +/* 2.2.1.35 CColumnGroup */ +int parse_CColumnGroup(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree _U_, const char *fmt, ...) +{ + proto_tree *tree; + proto_item *item, *ti; + va_list ap; + const char *txt; + guint32 count, groupPid, i; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CColumnGroup, &item, txt); + + count = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_ccolumngroup_count, tvb, offset, 4, count); + offset += 4; + + groupPid = tvb_get_letohl(tvb, offset); + ti = proto_tree_add_uint(tree, hf_mswsp_ccolumngroup_grouppid, tvb, offset, 4, groupPid); + if ((0xFFFF0000 & groupPid) == 0x7FFF0000) { + proto_item_append_text(ti, " Idx: %u", groupPid & 0xFFFF); + } else { + proto_item_append_text(ti, "<Invalid>"); + } + offset += 4; + + for (i=0; i<count; i++) { + /* 2.2.1.36 SProperty */ + guint32 pid, weight; + pid = tvb_get_letohl(tvb, offset); + weight = tvb_get_letohl(tvb, offset + 4); + proto_tree_add_uint_format(tree, hf_mswsp_ccolumngroup_pid, tvb, offset, 8, pid, "Props[%u]: pid: %u weight: %u", i, pid, weight); + offset += 8; + } + + proto_item_set_end(item, tvb, offset); + return offset; +} + +/* 2.2.1.34 CColumnGroupArray */ +int parse_CColumnGroupArray(tvbuff_t *tvb, int offset, proto_tree *parent_tree, proto_tree *pad_tree, const char *fmt, ...) +{ + proto_tree *tree; + proto_item *item; + va_list ap; + const char *txt; + + guint32 count, i; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CColumnGroupArray, &item, txt); + + count = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_ccolumngrouparray_count, tvb, offset, 4, count); + offset += 4; + + for (i=0; i<count; i++) { + offset = parse_padding(tvb, offset, 4, pad_tree, "aGroupArray[%u]", i); + offset = parse_CColumnGroup(tvb, offset, tree, pad_tree, "aGroupArray[%u]", i); + } + + proto_item_set_end(item, tvb, offset); + return offset; +} + +static int parse_UInt32Array(tvbuff_t *tvb, int offset, proto_tree *parent_tree, guint32 count, const char *item_name, const char *fmt, ...) +{ + guint32 v, i; + proto_tree *tree; + proto_item *item; + const char *txt; + + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_Array, &item, txt); + + for (i=0; i<count; i++) { + v = tvb_get_letohl(tvb, offset); + proto_tree_add_uint_format(tree, hf_mswsp_int32array_value, tvb, offset, 4, v, "%s[%u] = %u", item_name,i, v); + offset += 4; + } + proto_item_set_end(item, tvb, offset); + return offset; +} + +/* 2.2.1.40 CRowSeekNext */ +static int parse_CRowSeekNext(tvbuff_t *tvb, int offset, proto_tree *parent_tree, const char *fmt, ...) +{ + proto_tree *tree; + proto_item *item; + const char *txt; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CRowsSeekNext, &item, txt); + + proto_tree_add_item(tree, hf_mswsp_crowseeknext_cskip, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_item_set_end(item, tvb, offset); + return offset; +} + + +/* 2.2.1.37 CRowSeekAt */ +static int parse_CRowSeekAt(tvbuff_t *tvb, int offset, proto_tree *parent_tree, const char *fmt, ...) +{ + proto_tree *tree; + proto_item *item; + va_list ap; + const char *txt; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CRowsSeekAt, &item, txt); + + proto_tree_add_item(tree, hf_mswsp_crowseekat_bmkoffset, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + + proto_tree_add_item(tree, hf_mswsp_crowseekat_skip, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + proto_tree_add_item(tree, hf_mswsp_crowseekat_hregion, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + proto_item_set_end(item, tvb, offset); + return offset; +} + +/* 2.2.1.38 CRowSeekAtRatio */ +static int parse_CRowSeekAtRatio(tvbuff_t *tvb, int offset, proto_tree *parent_tree, const char *fmt, ...) +{ + proto_tree *tree; + proto_item *item; + va_list ap; + const char *txt; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CRowsSeekAtRatio, &item, txt); + + proto_tree_add_item(tree, hf_mswsp_crowseekatratio_ulnumerator, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + + proto_tree_add_item(tree, hf_mswsp_crowseekatratio_uldenominator, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + proto_tree_add_item(tree, hf_mswsp_crowseekatratio_hregion, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + proto_item_set_end(item, tvb, offset); + return offset; +} + +/* 2.2.1.39 CRowSeekByBookmark */ +static int parse_CRowSeekByBookmark(tvbuff_t *tvb, int offset, proto_tree *parent_tree, const char *fmt, ...) +{ + proto_tree *tree; + proto_item *item; + guint32 num; + const char *txt; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CRowsSeekByBookmark, &item, txt); + + num = tvb_get_letohl(tvb,offset); + proto_tree_add_item(tree, hf_mswsp_crowseekbybookmark_cbookmarks, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + offset = parse_UInt32Array(tvb, offset, tree, num, "abookmark", "abookmarks"); + + num = tvb_get_letohl(tvb,offset); + proto_tree_add_item(tree, hf_mswsp_crowseekbybookmark_maxret, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + offset = parse_UInt32Array(tvb, offset, tree, num, "ascret", "ascret"); + + proto_item_set_end(item, tvb, offset); + return offset; +} + +static int get_fixed_vtype_dataize(enum vType vtype) +{ + struct vtype_data *vt_type = vType_get_type(vtype); + if (vt_type) { + return vt_type->size; + } + return -1; +} + +static int parse_CRowVariantArrayInfo(tvbuff_t *tvb, int offset, proto_tree *tree, gboolean is_64bit, struct CRowVariant *variant) +{ + if (is_64bit) { + variant->content.array_vector.i64.count = + tvb_get_letoh64(tvb, offset); + proto_tree_add_uint64(tree, hf_mswsp_crowvariantinfo_count64, tvb, offset, 8, variant->content.array_vector.i64.count); + offset += 8; + variant->content.array_vector.i64.array_address = tvb_get_letoh64(tvb, offset); + proto_tree_add_uint64(tree, hf_mswsp_arrayvector_address64, tvb, offset, 8, variant->content.array_vector.i64.array_address); + offset += 8; + + } else { + variant->content.array_vector.i32.count = + tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_crowvariantinfo_count32, tvb, offset, 4, variant->content.array_vector.i32.count ); + offset += 4; + variant->content.array_vector.i32.array_address = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_arrayvector_address32, tvb, offset, 4, variant->content.array_vector.i32.array_address); + offset += 4; + } + return offset; +} + +static int parse_VariantColVector(tvbuff_t *tvb, int offset, proto_tree *tree, guint64 base_address, gboolean is_64bit, struct CRowVariant *variant) +{ + guint32 i = 0; + guint64 count = 0; + int buf_offset = 0; + proto_tree *sub_tree; + struct vtype_data *vt_list_type = + vType_get_type((enum vType)(variant->vtype & 0x00FF)); + wmem_strbuf_t *strbuf; + + DISSECTOR_ASSERT(vt_list_type != NULL); + offset = parse_CRowVariantArrayInfo(tvb, offset, tree, is_64bit, variant); + if (is_64bit) { + buf_offset = + (int)(variant->content.array_vector.i64.array_address - base_address); + count = variant->content.array_vector.i64.count; + } else { + buf_offset = + (int)(variant->content.array_vector.i32.array_address - base_address); + count = variant->content.array_vector.i32.count; + } + sub_tree = proto_tree_add_subtree(tree, tvb, buf_offset, 0, ett_CRowVariant_Vector, NULL, "values"); + for (i = 0; i < count; i++) { + guint64 item_address = 0; + int size; + union vt_single value; + int len; + if (is_64bit) { + size = 8; + item_address = tvb_get_letoh64(tvb, buf_offset + (i * size)); + proto_tree_add_uint64_format(sub_tree, hf_mswsp_rowvariant_item_address64, tvb, buf_offset, size, item_address, "address[%d] 0x%lx", i, item_address); + } else { + size = 4; + item_address = tvb_get_letohl(tvb, buf_offset + (i * size)); + proto_tree_add_uint_format(sub_tree, hf_mswsp_rowvariant_item_address32, tvb, buf_offset, size, (guint32)item_address, "address[%d] 0x%x", i, (guint32)item_address); + } + strbuf = wmem_strbuf_new(wmem_packet_scope(), ""); + if (vt_list_type->size == -1) { + /* dynamic type */ + DISSECTOR_ASSERT_HINT(vt_list_type->tvb_get_value_only != 0, + "appears this is a vector of dynamic types that we don't know yet how to handle, please submit a bug with trace"); + len = vt_list_type->tvb_get_value_only(tvb, (int)(item_address - base_address), 0, &value); + vt_list_type->strbuf_append(strbuf, &value); + } else { + /* + * assume non dynamic size types are stored directly. + * Note: not test as not seen in the wild. + */ + len = vt_list_type->size; + DISSECTOR_ASSERT_HINT(vt_list_type->tvb_get != 0, + "appears this is a vector of fixed types that we don't know yet how to handle, please submit a bug with trace"); + + vt_list_type->tvb_get(tvb, (int)(item_address - base_address), &value); + vt_list_type->strbuf_append(strbuf, &value); + } + proto_tree_add_string(sub_tree, hf_mswsp_rowvariant_item_value, tvb, (gint)(item_address - base_address), len, wmem_strbuf_get_str(strbuf)); + } + return offset; +} + +static int parse_VariantCol(tvbuff_t *tvb, int offset, proto_tree *parent_tree, guint64 base_address, guint32 length _U_, gboolean is_64bit, struct CRowVariant *variant, const char *fmt, ...) +{ + proto_tree *tree; + proto_item *item; + + va_list ap; + struct vtype_data *vt_type; + const char *modifier = "", *txt; + int size; + guint16 vtype_high; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_CRowVariant, &item, txt); + + variant->vtype = tvb_get_letohs(tvb, offset); + vt_type = vType_get_type((enum vType)variant->vtype); + DISSECTOR_ASSERT(vt_type != NULL); + + vtype_high = (variant->vtype & 0xFF00); + if (vtype_high) { + if (vtype_high == VT_VECTOR) { + modifier = "|VT_VECTOR"; + } else if (vtype_high == VT_ARRAY) { + modifier = "|VT_ARRAY"; + } else { + modifier = "|Unknown, possibly error"; + } + } + + proto_tree_add_string_format_value(tree, hf_mswsp_rowvariant_vtype, tvb, offset, 2, vt_type->str, "%s%s", vt_type->str, modifier); + offset += 2; + + proto_tree_add_item(tree, hf_mswsp_rowvariant_reserved1, tvb, offset, 2, ENC_LITTLE_ENDIAN); + variant->reserved1 = tvb_get_letohs(tvb, offset); + + offset += 2; + proto_tree_add_item(tree, hf_mswsp_rowvariant_reserved2, tvb, offset, 4, ENC_LITTLE_ENDIAN); + variant->reserved2 = tvb_get_letohl(tvb, offset); + offset += 4; + + size = get_fixed_vtype_dataize((enum vType)(variant->vtype & 0x00FF)); + + if (vtype_high == VT_VECTOR || vtype_high == VT_ARRAY) { + offset = parse_VariantColVector(tvb, offset, tree, base_address, + is_64bit, variant); + } else { + wmem_strbuf_t *strbuf = wmem_strbuf_new(wmem_packet_scope(), ""); + if (size != -1) { + /* single fixed size value type */ + const char* desc = vt_type->str; + + DISSECTOR_ASSERT_HINT(vt_type->tvb_get != 0, + "appears fixed type that we don't know yet how to handle, please submit a bug with trace"); + vt_type->tvb_get(tvb, offset, &variant->content); + vt_type->strbuf_append(strbuf, &variant->content); + proto_tree_add_string_format_value(tree, hf_mswsp_rowvariant_item_value, tvb, offset, size, desc, "%s: %s", desc, wmem_strbuf_get_str(strbuf)); + } else { + gint64 value_address; + int buf_offset = offset; + int len; + union vt_single non_fixed_size_val; + DISSECTOR_ASSERT_HINT(vt_type->tvb_get_value_only != 0, "appears this is a dynamic type that we don't know yet how to handle, please submit a bug with network trace"); + if (is_64bit) { + variant->content.hyperw = tvb_get_letoh64(tvb, offset); + offset += 8; + value_address = variant->content.hyperw; + proto_tree_add_uint64(tree, hf_mswsp_rowvariant_item_address64, tvb, buf_offset, 8, value_address); + } else { + variant->content.longw = tvb_get_letohl(tvb, offset); + offset += 4; + value_address = variant->content.longw; + proto_tree_add_uint(tree, hf_mswsp_rowvariant_item_address32, tvb, buf_offset, 4, (guint32)value_address); + } + + len = vt_type->tvb_get_value_only(tvb, (int)(value_address - base_address), 0, &non_fixed_size_val); + vt_type->strbuf_append(strbuf, &non_fixed_size_val); + proto_tree_add_string(tree, hf_mswsp_rowvariant_item_value, tvb, (gint)(value_address - base_address), len, wmem_strbuf_get_str(strbuf)); + } + } + + return offset; +} + +static int parse_RowsBufferCol(tvbuff_t *tvb, int offset, guint32 row, guint32 col, struct CPMSetBindingsIn *bindingsin, struct rows_data *rowsin, gboolean b_is_64bit, proto_tree *parent_tree, const char *fmt, ...) +{ + proto_tree *tree; + proto_item *item; + guint32 buf_start = offset; + guint32 buf_offset = buf_start + (row * bindingsin->brow); + struct CTableColumn *pcol = &bindingsin->acolumns[col]; + + static const value_string STATUS[] = { + {0, "StoreStatusOk"}, + {1, "StoreStatusDeferred"}, + {2, "StoreStatusNull"}, + {0, NULL} + }; + + const char *txt; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_GetRowsColumn, &item, txt); + proto_item_append_text(item, " (%s)", pcol->name); + if (pcol->statusused) { + int tmp_offset = buf_offset + pcol->statusoffset; + proto_tree_add_string(tree, hf_mswsp_ctablecolumn_status, tvb, tmp_offset, 1, val_to_str(tvb_get_guint8(tvb, tmp_offset), STATUS, "(Invalid: 0x%x)")); + } + if (pcol->lengthused) { + int tmp_offset = buf_offset + pcol->lengthoffset; + proto_tree_add_item(tree, hf_mswsp_ctablecolumn_length, tvb, tmp_offset, 1, ENC_LITTLE_ENDIAN); + } + if (pcol->valueused) { + int tmp_offset = buf_offset + pcol->valueoffset; + struct CRowVariant variant; + guint32 len = pcol->valuesize; + guint64 base_address = rowsin->ulclientbase;/*( + rowsin->cbreserved;*/ + ZERO_STRUCT(variant); + + if (pcol->lengthused) { + len = tvb_get_letohs(tvb, buf_offset + pcol->lengthoffset) - pcol->valuesize; + } + if (pcol->vtype == VT_VARIANT) { + parse_VariantCol(tvb, tmp_offset, tree, base_address, len, b_is_64bit, &variant, "CRowVariant"); + } + } + return offset; +} + +static int parse_RowsBuffer(tvbuff_t *tvb, int offset, guint32 num_rows, struct CPMSetBindingsIn *bindingsin, struct rows_data *rowsin, gboolean is64bit, proto_tree *parent_tree, const char *fmt, ...) +{ + proto_tree *tree; + proto_item *item; + guint32 num; + const char *txt; + va_list ap; + + va_start(ap, fmt); + txt = wmem_strdup_vprintf(wmem_packet_scope(), fmt, ap); + va_end(ap); + + tree = proto_tree_add_subtree(parent_tree, tvb, offset, 0, ett_GetRowsRow, &item, txt); + + for (num = 0; num < num_rows; ++num) { + guint32 col; + proto_tree *row_tree; + row_tree = proto_tree_add_subtree_format(tree, tvb, offset, 0, ett_GetRowsRow, NULL, "Row[%d]", num); + for (col = 0; col < bindingsin->ccolumns; col++) { + parse_RowsBufferCol(tvb, offset, num, col, bindingsin, rowsin, is64bit, row_tree, "Col[%d]", col); + } + } + return offset; +} +/* Code to actually dissect the packets */ + +static int dissect_CPMConnect(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *private_data) +{ + proto_item *ti; + proto_tree *tree; + gint offset = 16; + guint len; + guint32 version; + struct message_data *data = NULL; + struct mswsp_ct *ct = NULL; + + ti = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA); + tree = proto_item_add_subtree(ti, ett_mswsp_msg); + proto_item_set_text(ti, "CPMConnect%s", in ? "In" : "Out"); + col_append_str(pinfo->cinfo, COL_INFO, "Connect"); + + version = tvb_get_letohl(tvb, offset); + ti = proto_tree_add_item(tree, hf_mswsp_msg_Connect_Version, tvb, + offset, 4, ENC_LITTLE_ENDIAN); + if (version & 0xffff0000) { + proto_item_append_text(ti, " 64 bit"); + } + + ct = get_create_converstation_data(pinfo); + + if (ct) { + data = find_or_create_message_data(ct, pinfo, 0xC8, in, private_data); + if (data) { + data->content.version = version; + } + } + switch (version & 0xffff) { + case 0x102: + proto_item_append_text(ti, " w2k8 or vista"); + break; + case 0x109: + proto_item_append_text(ti, " XP or w2k3, with Windows Search 4.0"); + break; + case 0x700: + proto_item_append_text(ti, " win7 or w2k8r2"); + break; + } + offset += 4; + + if (in) { + guint32 blob_size1_off, blob_size2_off; + proto_tree *pad_tree; + + pad_tree = proto_tree_add_subtree(tree, tvb, offset, 0, ett_mswsp_pad, &ti, "Padding"); + + proto_tree_add_item(tree, hf_mswsp_msg_ConnectIn_ClientIsRemote, tvb, + offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + /* _cbBlob1 */ + blob_size1_off = offset; + offset += 4; + + offset = parse_padding(tvb, offset, 8, pad_tree, "_paddingcbBlob2"); + + /* _cbBlob2 */ + blob_size2_off = offset; + offset += 4; + + offset = parse_padding(tvb, offset, 16, pad_tree, "_padding"); + + len = tvb_unicode_strsize(tvb, offset); + ti = proto_tree_add_item(tree, hf_mswsp_msg_ConnectIn_MachineName, tvb, + offset, len, ENC_UTF_16); + /*This shouldnt be necessary, is this a bug or is there some GUI setting I've missed?*/ + proto_item_set_text(ti, "Remote machine: %s", tvb_get_string_enc(wmem_packet_scope(), tvb, offset, len, ENC_LITTLE_ENDIAN | ENC_UCS_2)); + offset += len; + + len = tvb_unicode_strsize(tvb, offset); + ti = proto_tree_add_item(tree, hf_mswsp_msg_ConnectIn_UserName, tvb, + offset, len, ENC_UTF_16); + proto_item_set_text(ti, "User: %s", tvb_get_string_enc(wmem_packet_scope(), tvb, offset, len, ENC_LITTLE_ENDIAN | ENC_UCS_2)); + offset += len; + + offset = parse_padding(tvb, offset, 8, pad_tree, "_paddingcPropSets"); + + offset = parse_PropertySetArray(tvb, offset, blob_size1_off, tree, pad_tree, "PropSets"); + + offset = parse_padding(tvb, offset, 8, pad_tree, "paddingExtPropset"); + + offset = parse_PropertySetArray(tvb, offset, blob_size2_off, tree, pad_tree, "ExtPropset"); + + offset = parse_padding(tvb, offset, 8, pad_tree, "???"); + + DISSECTOR_ASSERT(offset == (int)tvb_reported_length(tvb)); + + /* make "Padding" the last item */ + proto_tree_move_item(tree, ti, proto_tree_get_parent(pad_tree)); + } else { + + } + return tvb_reported_length(tvb); +} + +static int dissect_CPMDisconnect(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree _U_, gboolean in _U_, void *data _U_) +{ + col_append_str(pinfo->cinfo, COL_INFO, "Disconnect"); + return tvb_reported_length(tvb); +} + +static int dissect_CPMCreateQuery(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_) +{ + gint offset = 16; + proto_item *item; + proto_tree *tree; + + item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA); + tree = proto_item_add_subtree(item, ett_mswsp_msg); + + proto_item_set_text(item, "CPMCreateQuery%s", in ? "In" : "Out"); + col_append_str(pinfo->cinfo, COL_INFO, "CreateQuery"); + + if (in) { + proto_item *ti; + proto_tree *pad_tree = proto_tree_add_subtree(tree, tvb, offset, 0, ett_mswsp_pad, &ti, "Padding"); + guint8 CColumnSetPresent, CRestrictionPresent, CSortSetPresent, CCategorizationSetPresent; + guint32 size = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_msg_cpmcreatequery_size, tvb, offset, 4, size); + offset += 4; + + CColumnSetPresent = tvb_get_guint8(tvb, offset); + proto_tree_add_uint_format_value(tree, hf_mswsp_msg_cpmcreatequery_ccolumnsetpresent, tvb, offset, 1, CColumnSetPresent, "%s", CColumnSetPresent ? "True" : "False"); + offset += 1; + + if (CColumnSetPresent) { + offset = parse_padding(tvb, offset, 4, pad_tree, "paddingCColumnSetPresent"); + offset = parse_padding(tvb, offset, 4, pad_tree, "paddingCColumnSetPresent"); + offset = parse_CColumnSet(tvb, offset, tree, "CColumnSet"); + } + + CRestrictionPresent = tvb_get_guint8(tvb, offset); + proto_tree_add_uint_format_value(tree, hf_mswsp_msg_cpmcreatequery_crestrictionpresent, tvb, offset, 1, CColumnSetPresent,"%s", CColumnSetPresent ? "True" : "False"); + offset += 1; + if (CRestrictionPresent) { + offset = parse_CRestrictionArray(tvb, offset, tree, pad_tree, "RestrictionArray"); + } + + CSortSetPresent = tvb_get_guint8(tvb, offset); + proto_tree_add_uint_format_value(tree, hf_mswsp_msg_cpmcreatequery_csortpresent, tvb, offset, 1, CSortSetPresent, "%s", CSortSetPresent ? "True" : "False"); + offset += 1; + if (CSortSetPresent) { + offset = parse_padding(tvb, offset, 4, tree, "paddingCSortSetPresent"); + + proto_tree_add_item(tree, hf_mswsp_msg_cpmcreatequery_csortset_xxx, tvb, offset, 8, ENC_LITTLE_ENDIAN); + offset += 8; + + offset = parse_CSortSet(tvb, offset, tree, pad_tree, "SortSet"); + } + + CCategorizationSetPresent = tvb_get_guint8(tvb, offset); + proto_tree_add_uint_format_value(tree, hf_mswsp_msg_cpmcreatequery_ccategpresent, tvb, offset, 1, CCategorizationSetPresent, "%s", CCategorizationSetPresent ? "True" : "False"); + offset += 1; + + if (CCategorizationSetPresent) { + guint32 count, i; + offset = parse_padding(tvb, offset, 4, pad_tree, "paddingCCategorizationSetPresent"); + /* 2.2.1.19 CCategorizationSet */ + count = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_msg_cpmcreatequery_ccateg_count, tvb, offset, 4, count); + offset += 4; + for (i=0; i<count; i++) { + offset = parse_CCategorizationSpec(tvb, offset, tree, pad_tree, "categories[%u]", i); + } + } + + offset = parse_padding(tvb, offset, 4, tree, "XXXX"); + + offset = parse_CRowsetProperties(tvb, offset, tree, pad_tree, "RowSetProperties"); + + offset = parse_CPidMapper(tvb, offset, tree, pad_tree, "PidMapper"); + + parse_CColumnGroupArray(tvb, offset, tree, pad_tree, "GroupArray"); + } else { /* out */ + proto_tree_add_item(tree, hf_mswsp_msg_cpmcreatequery_trueseq, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmcreatequery_workid, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + /* + * #FIXME Cursors is an array of uint32 where the size of the array is + * determined by categories in the CategorizationSet in the CPMQuery + * request message. + */ + proto_tree_add_item(tree, hf_mswsp_msg_cpmcreatequery_cursors, tvb, offset, -1, ENC_NA); + } + + return tvb_reported_length(tvb); +} + +static int dissect_CPMFreeCursor(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree _U_, gboolean in _U_, void *data _U_) +{ + col_append_str(pinfo->cinfo, COL_INFO, "FreeCursor"); + return tvb_reported_length(tvb); +} + +static int dissect_CPMGetRows(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *private_data) +{ + struct mswsp_ct *ct = NULL; + gint offset = 16; + proto_item *item; + proto_tree *tree; + proto_tree *seek_tree; + guint32 eType = 0; + + item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, in ? 0 : -1, ENC_NA); + tree = proto_item_add_subtree(item, ett_mswsp_msg); + + proto_item_set_text(item, "GetRows%s", in ? "In" : "Out"); + col_append_str(pinfo->cinfo, COL_INFO, "GetRows"); + + ct = get_create_converstation_data(pinfo); + if (in) { + /* 2.2.3.11 */ + struct message_data *data = find_or_create_message_data(ct, pinfo,0xCC,in, private_data); + + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_hcursor, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_rowstotransfer, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_rowwidth, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_cbseek, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + data->content.rowsin.cbreserved = tvb_get_letohl(tvb, offset); + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_cbreserved, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_cbreadbuffer, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + data->content.rowsin.ulclientbase = tvb_get_letohl(tvb, offset); + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_ulclientbase, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_fbwdfetch, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + eType = tvb_get_letohl(tvb, offset); + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_etype, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_chapt, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + seek_tree = proto_tree_add_subtree(tree, tvb, offset, 0, ett_SeekDescription, NULL, "SeekDescription"); + switch (eType) { + case 0: /* eRowSeekNone */ + break; + case 1: /* eRowSeekNext */ + parse_CRowSeekNext(tvb, offset, seek_tree, "CRowSeekNext"); + break; + case 2: /* eRowSeekAt */ + parse_CRowSeekAt(tvb, offset, seek_tree, "CRowSeekAt"); + + break; + case 3: /* eRowSeekAtRatio */ + parse_CRowSeekAtRatio(tvb, offset, seek_tree, "CRowSeekAtRatio"); + break; + case 4: /* eRowSeekByBookmark */ + parse_CRowSeekByBookmark(tvb, offset, seek_tree, "CRowSeekByRatio"); + break; + default: /*error*/ + break; + DISSECTOR_ASSERT(eType <=4); + } + } else { + /* 2.2.3.12 */ + /* + * GetRows response needs information from GetRow & SetBindings + * requests + */ + /* find the preceeding SetBinding data */ + guint32 num_rows = 0; + proto_item *ti; + proto_tree *pad_tree = proto_tree_add_subtree(tree, tvb, offset, 0, ett_mswsp_pad, &ti, "Padding"); + struct CPMSetBindingsIn *bindingsin = find_binding_msg_data(ct, pinfo, + private_data); + struct rows_data *rowsin = find_rowsin_msg_data(ct, pinfo, private_data); + bool b_64bit_mode = false; + if (bindingsin && rowsin) { + b_64bit_mode = is_64bit_mode(ct, pinfo, private_data); + } + num_rows = tvb_get_letohl(tvb, offset); + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_crowsreturned, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + eType = tvb_get_letohl(tvb, offset); + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_etype, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrows_chapt, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + seek_tree = proto_tree_add_subtree(tree, tvb, offset, 0, ett_SeekDescription, NULL, "SeekDescription"); + switch (eType) { + case 0: /* eRowSeekNone */ + break; + case 1: /* eRowSeekNext */ + parse_CRowSeekNext(tvb, offset, seek_tree, "CRowSeekNext"); + break; + case 2: /* eRowSeekAt */ + parse_CRowSeekAt(tvb, offset, seek_tree, "CRowSeekAt"); + + break; + case 3: /* eRowSeekAtRatio */ + parse_CRowSeekAtRatio(tvb, offset, seek_tree, "CRowSeekAtRatio"); + break; + case 4: /* eRowSeekByBookmark */ + parse_CRowSeekByBookmark(tvb, offset, seek_tree, "CRowSeekByRatio"); + break; + default: /*error*/ + break; + } + DISSECTOR_ASSERT(eType <=4); + + if (bindingsin && rowsin) { + offset = parse_padding(tvb, offset, rowsin->cbreserved, pad_tree, + "paddingRows"); + parse_RowsBuffer(tvb, offset, num_rows, bindingsin, rowsin, b_64bit_mode, tree, "Rows"); + } + } + + return tvb_reported_length(tvb); + +} + +static int dissect_CPMRatioFinished(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_) +{ + gint offset = 16; + proto_item *item; + proto_tree *tree; + col_append_str(pinfo->cinfo, COL_INFO, "RatioFinished"); + item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA); + tree = proto_item_add_subtree(item, ett_mswsp_msg); + proto_item_set_text(item, "RationFinised%s", in ? "In" : "Out"); + if (in) { + proto_tree_add_item(tree, hf_mswsp_msg_cpmratiofinished_hcursor, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmratiofinished_fquick, tvb, offset, 4, ENC_LITTLE_ENDIAN); + } else { + proto_tree_add_item(tree, hf_mswsp_msg_cpmratiofinished_ulnumerator, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmratiofinished_uldenominator, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmratiofinished_crows, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmratiofinished_fnewrows, tvb, offset, 4, ENC_LITTLE_ENDIAN); + } + + return tvb_reported_length(tvb); +} + +static int dissect_CPMCompareBmk(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_) +{ + gint offset = 16; + proto_item *item; + proto_tree *tree; + + item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, in ? 0 : -1, ENC_NA); + tree = proto_item_add_subtree(item, ett_mswsp_msg); + + proto_item_set_text(item, "CompareBmk%s", in ? "In" : "Out"); + col_append_str(pinfo->cinfo, COL_INFO, "CompareBmk"); + if (in) { + proto_tree_add_item(tree, hf_mswsp_msg_cpmcomparebmk_hcursor, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmcomparebmk_chapt, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmcomparebmk_bmkfirst, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmcomparebmk_bmksecond, tvb, offset, 4, ENC_LITTLE_ENDIAN); + } else { + proto_tree_add_item(tree, hf_mswsp_msg_cpmcomparebmk_dwcomparison, tvb, offset, 4, ENC_LITTLE_ENDIAN); + } + return tvb_reported_length(tvb); +} + +static int dissect_CPMGetApproximatePosition(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_) +{ + gint offset = 16; + proto_item *item; + proto_tree *tree; + + item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, in ? 0 : -1, ENC_NA); + tree = proto_item_add_subtree(item, ett_mswsp_msg); + + proto_item_set_text(item, "GetApproximatePosition%s", in ? "In" : "Out"); + col_append_str(pinfo->cinfo, COL_INFO, "GetApproximatePosition"); + if (in) { + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetapproxpos_hcursor, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetapproxpos_chapt, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetapproxpos_bmk, tvb, offset, 4, ENC_LITTLE_ENDIAN); + } else { + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetapproxpos_numerator, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetapproxpos_denominator, tvb, offset, 4, ENC_LITTLE_ENDIAN); + } + return tvb_reported_length(tvb); +} + +/* 2.2.3.10 */ +static int dissect_CPMSetBindings(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *private_data) +{ + gint offset = 16; + struct CPMSetBindingsIn request; + + col_append_str(pinfo->cinfo, COL_INFO, "SetBindings"); + if (in) { + + struct mswsp_ct *ct = NULL; + struct message_data *data = NULL; + proto_item *ti; + proto_tree *tree, *pad_tree; + guint32 size, num, n; + + ti = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA); + tree = proto_item_add_subtree(ti, ett_mswsp_msg); + + proto_item_set_text(ti, "SetBindingsIn"); + + pad_tree = proto_tree_add_subtree(tree, tvb, offset, 0, ett_mswsp_pad, &ti, "Padding"); + + proto_tree_add_item(tree, hf_mswsp_msg_cpmsetbinding_hcursor, tvb, offset, 4, ENC_LITTLE_ENDIAN); + request.hcursor = tvb_get_letohl(tvb, offset); + offset += 4; + request.brow = tvb_get_letohl(tvb, offset); + proto_tree_add_item(tree, hf_mswsp_msg_cpmsetbinding_cbrow, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + size = tvb_get_letohl(tvb, offset); + request.bbindingdesc = size; + proto_tree_add_item(tree, hf_mswsp_msg_cpmsetbinding_desc, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + request.dummy = tvb_get_letohl(tvb, offset); + proto_tree_add_item(tree, hf_mswsp_msg_cpmsetbinding_dummy, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + num = tvb_get_letohl(tvb, offset); + request.ccolumns = num; + proto_tree_add_item(tree, hf_mswsp_msg_cpmsetbinding_ccolumns, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + + proto_tree_add_item(tree, hf_mswsp_msg_cpmsetbinding_acolumns, tvb, offset, size-4, ENC_NA); + ct = get_create_converstation_data(pinfo); + data = find_or_create_message_data(ct, pinfo,0xD0,in, private_data); + + request.acolumns = (struct CTableColumn*)wmem_alloc(wmem_file_scope(), + sizeof(struct CTableColumn) * num); + for (n=0; n<num; n++) { + offset = parse_padding(tvb, offset, 4, pad_tree, "padding_aColumns[%u]", n); + offset = parse_CTableColumn(tvb, offset, tree, pad_tree, &request.acolumns[n],"aColumns[%u]", n); + } + data->content.bindingsin = request; + + } else { /* server only returns status with header */ + } + + return tvb_reported_length(tvb); +} + +static int dissect_CPMGetNotify(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree _U_, gboolean in _U_, void *data _U_) +{ + col_append_str(pinfo->cinfo, COL_INFO, "GetNotify"); + return tvb_reported_length(tvb); +} + +static int dissect_CPMSendNotifyOut(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in _U_, void *data _U_) +{ + gint offset = 16; + proto_item *item; + proto_tree *tree; + + col_append_str(pinfo->cinfo, COL_INFO, "SendNotify"); + item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA); + tree = proto_item_add_subtree(item, ett_mswsp_msg); + proto_item_set_text(item, "GetSendNotifyOut"); + proto_tree_add_item(tree, hf_mswsp_msg_cpmsendnotify_watchnotify, tvb, offset, 4, ENC_LITTLE_ENDIAN); + return tvb_reported_length(tvb); +} + +static int dissect_CPMGetQueryStatus(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_) +{ + gint offset = 16; + proto_item *item; + proto_tree *tree; + + item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA); + tree = proto_item_add_subtree(item, ett_mswsp_msg); + + proto_item_set_text(item, "GetQueryStatus%s", in ? "In" : "Out"); + col_append_str(pinfo->cinfo, COL_INFO, "GetQueryStatus"); + + if (in) { + /* 2.2.3.7 */ + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetquerystatus_hcursor, tvb, offset, 4, ENC_LITTLE_ENDIAN); + } else { + /* 2.2.3.7 */ + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetquerystatus_qstatus, tvb, offset, 4, ENC_LITTLE_ENDIAN); + } + + return tvb_reported_length(tvb); +} + +static int dissect_CPMCiState(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_) +{ + gint offset = 16; + proto_item *item; + proto_tree *tree; + + col_append_str(pinfo->cinfo, COL_INFO, "CiState"); + + if (!in) { + item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA); + tree = proto_item_add_subtree(item, ett_mswsp_msg); + proto_item_set_text(item, "CiStateOut"); + proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_cbstruct, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_cwordlist, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_cpersistindex, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_cqueries, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_cfreshtest, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_cfreshtest, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_dwmergeprogress, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_estate, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_cfiltereddocs, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_ctotaldocs, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_cpendingscans, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_dwindexsize, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_cuniquekeys, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_csecqdocuments, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmcistate_dwpropcachesize, tvb, offset, 4, ENC_LITTLE_ENDIAN); + } + return tvb_reported_length(tvb); +} + +static int dissect_CPMFetchValue(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_) +{ + gint offset = 16; + proto_item *item; + proto_tree *tree, *pad_tree; + col_append_str(pinfo->cinfo, COL_INFO, "FetchValue"); + + item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA); + tree = proto_tree_add_subtree_format(parent_tree, tvb, offset, 0, ett_mswsp_msg, &item, "FetchValue%s", in ? "In" : "Out"); + pad_tree = proto_tree_add_subtree(tree, tvb, offset, 0, ett_mswsp_pad, NULL, "Padding"); + if (in) { + struct CFullPropSpec prop; + proto_tree_add_item(tree, hf_mswsp_msg_cpmfetchvalue_wid, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmfetchvalue_cbsofar, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmfetchvalue_cbpropspec, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmfetchvalue_cbchunk, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + offset = parse_CFullPropSpec(tvb, offset, tree, pad_tree, &prop, + "PropSpec"); + parse_padding(tvb, offset, 4, pad_tree,"_padding"); + } else { + guint32 cbValue = tvb_get_letohl(tvb, offset); + proto_tree_add_item(tree, hf_mswsp_msg_cpmfetchvalue_cbvalue, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmfetchvalue_fmoreexists, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmfetchvalue_fvalueexists, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmfetchvalue_vvalue, tvb, offset, cbValue, ENC_NA); + } + return tvb_reported_length(tvb); +} + +static int dissect_CPMGetQueryStatusEx(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_) +{ + gint offset = 16; + proto_item *item; + proto_tree *tree; + + item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA); + tree = proto_item_add_subtree(item, ett_mswsp_msg); + + proto_item_set_text(item, "GetQueryStatusEx%s", in ? "In" : "Out"); + col_append_str(pinfo->cinfo, COL_INFO, "GetQueryStatusEx"); + + if (in) { + /* 2.2.3.8 */ + proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_hcursor, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_bmk, tvb, offset, 4, ENC_LITTLE_ENDIAN); + } else { + /* 2.2.3.9 */ + proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_qstatus, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_cfiltereddocs, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_cdocstofilter, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_dwratiodenom, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_dwrationumer, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_irowbmk, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_crowstotal, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_maxrank, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_cresultsfound, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmquerystatusex_whereid, tvb, offset, 4, ENC_LITTLE_ENDIAN); + } + return tvb_reported_length(tvb); +} + +static int dissect_CPMRestartPosition(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_) +{ + gint offset = 16; + proto_item *item; + proto_tree *tree; + + col_append_str(pinfo->cinfo, COL_INFO, "CPMRestartPosition"); + + if (in) { + item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA); + tree = proto_item_add_subtree(item, ett_mswsp_msg); + proto_item_set_text(item, "CPMRestartPosition"); + proto_tree_add_item(tree, hf_mswsp_msg_cpmrestartposition_hcursor, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmrestartposition_chapt, tvb, offset, 4, ENC_LITTLE_ENDIAN); + } + + col_append_str(pinfo->cinfo, COL_INFO, "RestartPosition"); + return tvb_reported_length(tvb); +} + +static int dissect_CPMSetCatState(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree _U_, gboolean in _U_, void *data _U_) +{ + col_append_str(pinfo->cinfo, COL_INFO, "SetCatState"); + return tvb_reported_length(tvb); +} + +static int dissect_CPMGetRowsetNotify(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_) +{ + gint offset = 16; + proto_item *item; + proto_tree *tree; + col_append_str(pinfo->cinfo, COL_INFO, "GetRowsetNotify"); + if (!in) { + guint32 word; + guint8 byte; + item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA); + tree = proto_item_add_subtree(item, ett_mswsp_msg); + proto_item_set_text(item, "GetRowsetNotifyOut"); + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrowsetnotify_wid, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + word = tvb_get_letohl(tvb, offset); + /* moveevents */ + byte = word & 0x00000001; + proto_tree_add_uint_format_value(tree, hf_mswsp_msg_cpmgetrowsetnotify_moreevents, tvb, offset, 1, byte, "%s", byte ? "True" : "False"); + /* eventType */ + word = word >> 1; + byte = word & 0x0000007F; + proto_tree_add_uint(tree, hf_mswsp_msg_cpmgetrowsetnotify_eventtype, tvb, offset, 1, byte ); + + /* rowSetItemState */ + word = word >> 7; + byte = word & 0x000000FF; + proto_tree_add_uint(tree, hf_mswsp_msg_cpmgetrowsetnotify_rowsetitemstate, tvb, offset + 1, 1, byte ); + + /* changedItemState */ + word = word >> 8; + byte = word & 0x000000FF; + proto_tree_add_uint(tree, hf_mswsp_msg_cpmgetrowsetnotify_changeditemstate, tvb, offset + 2, 1, byte ); + + /* rowSetEvent */ + word = word >> 8; + byte = word & 0x000000FF; + proto_tree_add_uint(tree, hf_mswsp_msg_cpmgetrowsetnotify_rowsetevent, tvb, offset + 3, 1, byte ); + offset += 4; + + + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrowsetnotify_rowseteventdata1, tvb, offset, 8, ENC_LITTLE_ENDIAN); + offset += 8; + proto_tree_add_item(tree, hf_mswsp_msg_cpmgetrowsetnotify_rowseteventdata2, tvb, offset, 8, ENC_LITTLE_ENDIAN); + /* it seems there is an extra unknow 8 bytes following */ + } + return tvb_reported_length(tvb); +} + +static int dissect_CPMFindIndices(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_) +{ + gint offset = 16; + proto_item *item; + proto_tree *tree; + col_append_str(pinfo->cinfo, COL_INFO, "FindIndices"); + item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA); + tree = proto_item_add_subtree(item, ett_mswsp_msg); + proto_item_set_text(item, "FindIndices%s", in ? "In" : "Out"); + + if (in) { + guint32 cWids; + guint32 cDepthPrev; + cWids = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_msg_cpmfindindices_cwids, tvb, offset, 4, cWids); + offset += 4; + cDepthPrev = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_msg_cpmfindindices_cdepthprev, tvb, offset, 4, cDepthPrev); + offset += 4; + offset = parse_uin32_array(tvb, offset, tree, cWids, "pwids"); + parse_uin32_array(tvb, offset, tree, cDepthPrev, "prgiRowPrev"); + } else { + guint32 cDepthNext; + cDepthNext = tvb_get_letohl(tvb, offset); + proto_tree_add_uint(tree, hf_mswsp_msg_cpmfindindices_cdepthnext, tvb, offset, 4, cDepthNext); + offset += 4; + parse_uin32_array(tvb, offset, tree, cDepthNext, "prgiRowNext"); + } + return tvb_reported_length(tvb); +} + +static int dissect_CPMSetScopePrioritization(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_) +{ + gint offset = 16; + proto_item *item; + proto_tree *tree; + + col_append_str(pinfo->cinfo, COL_INFO, "SetScopePrioritization"); + + if (in) { + item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, -1, ENC_NA); + tree = proto_item_add_subtree(item, ett_mswsp_msg); + proto_item_set_text(item, "SetScopePrioritizationIn"); + proto_tree_add_item(tree, hf_mswsp_msg_cpmsetscopeprioritization_priority, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmsetscopeprioritization_eventfreq, tvb, offset, 4, ENC_LITTLE_ENDIAN); + } + return tvb_reported_length(tvb); +} + +static int dissect_CPMGetScopeStatistics(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, gboolean in, void *data _U_) +{ + + gint offset = 16; + proto_item *item; + proto_tree *tree; + + item = proto_tree_add_item(parent_tree, hf_mswsp_msg, tvb, offset, in ? 0 : -1, ENC_NA); + tree = proto_item_add_subtree(item, ett_mswsp_msg); + + proto_item_set_text(item, "GetScopeStatistics%s", in ? "In" : "Out"); + col_append_str(pinfo->cinfo, COL_INFO, "GetScopeStatistics"); + + if (in) { + /* 2.2.3.33 */ + } else { + /* 2.2.3.34 */ + proto_tree_add_item(tree, hf_mswsp_msg_cpmsetscopestatisics_dwindexitems, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmsetscopestatisics_dwoutstandingadds, tvb, offset, 4, ENC_LITTLE_ENDIAN); + offset += 4; + proto_tree_add_item(tree, hf_mswsp_msg_cpmsetscopestatisics_dwoutstandingmodifies, tvb, offset, 4, ENC_LITTLE_ENDIAN); + } + + return tvb_reported_length(tvb); +} + + +static const value_string msg_ids[] = { + {0x000000C8, "CPMConnect"}, /* In/Out */ + {0x000000C9, "CPMDisconnect"}, + {0x000000CA, "CPMCreateQuery"}, /* In/Out */ + {0x000000CB, "CPMFreeCursor"}, /* In/Out */ + {0x000000CC, "CPMGetRows"}, /* In/Out */ + {0x000000CD, "CPMRatioFinished"}, /* In/Out */ + {0x000000CE, "CPMCompareBmk"}, /* In/Out */ + {0x000000CF, "CPMGetApproximatePosition"}, /* In/Out */ + {0x000000D0, "CPMSetBindingsIn"}, + {0x000000D1, "CPMGetNotify"}, + {0x000000D2, "CPMSendNotifyOut"}, + {0x000000D7, "CPMGetQueryStatusIn"}, /* In/Out */ + {0x000000D9, "CPMCiStateInOut"}, + {0x000000E4, "CPMFetchValue"}, /* In/Out */ + {0x000000E7, "CPMGetQueryStatusEx"}, /* In/Out */ + {0x000000E8, "CPMRestartPositionIn"}, + {0x000000EC, "CPMSetCatStateIn"}, /* (not supported) */ + {0x000000F1, "CPMGetRowsetNotify"}, /* In/Out */ + {0x000000F2, "CPMFindIndices"}, /* In/Out */ + {0x000000F3, "CPMSetScopePrioritization"}, /* In/Out */ + {0x000000F4, "CPMGetScopeStatistics"}, /* In/Out */ + {0, NULL} +}; + + +static int +dissect_mswsp(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, gboolean in, void *data) +{ + proto_tree *mswsp_tree = NULL; + struct { + guint32 msg; + guint32 status; + guint32 checksum; + guint32 reserved; + } hdr; + int (*fn)(tvbuff_t*, packet_info*, proto_tree*, gboolean, void *data); + + if (tvb_reported_length(tvb) < 16) { + return 0; + } + + hdr.msg = tvb_get_letohl(tvb, 0); + + switch(hdr.msg) { + case 0xC8: + fn = dissect_CPMConnect; + break; + case 0xC9: + fn = dissect_CPMDisconnect; + break; + case 0xCA: + fn = dissect_CPMCreateQuery; + break; + case 0xCB: + fn = dissect_CPMFreeCursor; + break; + case 0xCC: + fn = dissect_CPMGetRows; + break; + case 0xCD: + fn = dissect_CPMRatioFinished; + break; + case 0xCE: + fn = dissect_CPMCompareBmk; + break; + case 0xCF: + fn = dissect_CPMGetApproximatePosition; + break; + case 0xD0: + fn = dissect_CPMSetBindings; + break; + case 0xD1: + fn = dissect_CPMGetNotify; + break; + case 0xD2: + fn = dissect_CPMSendNotifyOut; + break; + case 0xD7: + fn = dissect_CPMGetQueryStatus; + break; + case 0xD9: + fn = dissect_CPMCiState; + break; + case 0xE4: + fn = dissect_CPMFetchValue; + break; + case 0xE7: + fn = dissect_CPMGetQueryStatusEx; + break; + case 0xE8: + fn = dissect_CPMRestartPosition; + break; + case 0xEC: + fn = dissect_CPMSetCatState; + break; + case 0xF1: + fn = dissect_CPMGetRowsetNotify; + break; + case 0xF2: + fn = dissect_CPMFindIndices; + break; + case 0xF3: + fn = dissect_CPMSetScopePrioritization; + break; + case 0xF4: + fn = dissect_CPMGetScopeStatistics; + break; + default: + return 0; + } + + hdr.status = tvb_get_letohl(tvb, 4); + hdr.checksum = tvb_get_letohl(tvb, 8); + + /* col_set_str(pinfo->cinfo, COL_PROTOCOL, "MS-WSP"); */ + col_append_str(pinfo->cinfo, COL_PROTOCOL, " WSP"); + /* col_clear(pinfo->cinfo, COL_INFO); */ + + col_set_str(pinfo->cinfo, COL_INFO, "WSP "); + col_append_str(pinfo->cinfo, COL_INFO, in ? "Request: " : "Response: "); + + if (tree) { + proto_tree *hdr_tree; + proto_item *ti, *hti; + + ti = proto_tree_add_item(tree, proto_mswsp, tvb, 0, -1, ENC_NA); + mswsp_tree = proto_item_add_subtree(ti, ett_mswsp); + + hti = proto_tree_add_item(mswsp_tree, hf_mswsp_hdr, tvb, 0, 16, ENC_NA); + hdr_tree = proto_item_add_subtree(hti, ett_mswsp_hdr); + + proto_tree_add_item(hdr_tree, hf_mswsp_hdr_msg, tvb, + 0, 4, ENC_LITTLE_ENDIAN); + proto_item_append_text(hti, " %s", val_to_str(hdr.msg, VALS(msg_ids), + "(Unknown: 0x%x)")); + + proto_tree_add_item(hdr_tree, hf_mswsp_hdr_status, tvb, + 4, 4, ENC_LITTLE_ENDIAN); + if (!in || hdr.status != 0) { + proto_item_append_text(hti, " %s", + val_to_str(hdr.status, VALS(dcom_hresult_vals), + "(Unknown: 0x%x)")); + } + + proto_tree_add_item(hdr_tree, hf_mswsp_hdr_checksum, tvb, + 8, 4, ENC_LITTLE_ENDIAN); + /* todo: validate checksum */ + + proto_tree_add_item(hdr_tree, hf_mswsp_hdr_reserved, tvb, + 12, 4, ENC_LITTLE_ENDIAN); + } + + fn(tvb, pinfo, mswsp_tree, in, data); + + /* Return the amount of data this dissector was able to dissect */ + return tvb_reported_length(tvb); +} + + +/* Register the protocol with Wireshark */ + +/* this format is require because a script is used to build the C function + that calls all the protocol registration. +*/ + +void +proto_register_mswsp(void) +{ + module_t *mswsp_module; + + /* Setup list of header fields See Section 1.6.1 for details*/ + static hf_register_info hf[] = { + { + &hf_mswsp_hdr, + { + "Header", "mswsp.hdr", + FT_NONE, BASE_NONE , NULL, 0, + "Message header", HFILL + } + }, + { + &hf_mswsp_hdr_msg, + { + "Msg id", "mswsp.hdr.id", + FT_UINT32, BASE_HEX , VALS(msg_ids), 0, + "Message id", HFILL + } + }, + { + &hf_mswsp_hdr_status, + { + "Status", "mswsp.hdr.status", + FT_UINT32, BASE_HEX , VALS(dcom_hresult_vals), 0, + "Message Status", HFILL + } + }, + { + &hf_mswsp_hdr_checksum, + { + "checksum", "mswsp.hdr.checksum", + FT_UINT32, BASE_HEX , NULL, 0, + "Message Checksum", HFILL + } + }, + { + &hf_mswsp_hdr_reserved, + { + "Reserved", "mswsp.hdr.reserved", + FT_UINT32, BASE_HEX , NULL, 0, + "Reserved bytes", HFILL + } + }, + { + &hf_mswsp_msg, + { + "msg", "mswsp.msg", + FT_NONE, BASE_NONE , NULL, 0, + "Message", HFILL + } + }, + { + &hf_mswsp_msg_Connect_Version, + { + "Version", "mswsp.Connect.version", + FT_UINT32, BASE_HEX , NULL, 0, + "OS Version",HFILL + } + }, + { + &hf_mswsp_msg_ConnectIn_ClientIsRemote, + { + "Remote", "mswsp.ConnectIn.isRemote", + FT_BOOLEAN, BASE_HEX , NULL, 0, + "Client is remote",HFILL + } + }, + { + &hf_mswsp_msg_ConnectIn_Blob1, + { + "Size", "mswsp.ConnectIn.propset.size", + FT_UINT32, BASE_DEC , NULL, 0, + "Size of PropSet fields",HFILL + } + }, + { + &hf_mswsp_msg_ConnectIn_MachineName, + { + "Remote machine", "mswsp.ConnectIn.machine", + FT_STRINGZ, BASE_NONE , NULL, 0, + "Name of remote machine",HFILL + } + }, + { + &hf_mswsp_msg_ConnectIn_UserName, + { + "User", "mswsp.ConnectIn.user", + FT_STRINGZ, BASE_NONE , NULL, 0, + "Name of remote user",HFILL + } + }, + { + &hf_mswsp_msg_ConnectIn_PropSets_num, + { + "Num", "mswsp.ConnectIn.propset.num", + FT_UINT32, BASE_DEC , NULL, 0, + "Number of Property Sets", HFILL + } + }, + { + &hf_mswsp_bool_options, + { + "uBooleanOptions", "mswsp.CPMCreateQuery.RowSetProperties.uBooleanOptions", + FT_UINT32, BASE_HEX, NULL, 0, "Boolean options", HFILL + } + }, + { + &hf_mswsp_bool_options_cursor, + { + "Cursor", "mswsp.CPMCreateQuery.RowSetProperties.uBooleanOptions", FT_UINT8, + BASE_HEX, VALS(cursor_vals), 0, "Cursor Type", HFILL + } + }, + { + &hf_mswsp_bool_options_async, + { + "eAsynchronous", "mswsp.CPMCreateQuery.RowSetProperties.uBooleanOptions.eAsyncronous", + FT_BOOLEAN, 32, NULL, eAsynchronous, "The client will not wait for execution completion", HFILL + } + }, + { + &hf_mswsp_bool_options_firstrows, + { + "eFirstRows", "mswsp.CPMCreateQuery.RowSetProperties.uBooleanOptions.eFirstRows", + FT_BOOLEAN, 32, NULL, eFirstRows, "Return the first rows encountered, not the best matches.", HFILL + } + }, + { + &hf_mswsp_bool_options_holdrows, + { + "eHoldRows", "mswsp.CPMCreateQuery.RowSetProperties.uBooleanOptions.eHoldRows", + FT_BOOLEAN, 32, NULL, eHoldRows, "The server MUST NOT discard rows until the client is done with a query.", HFILL + } + }, + { + &hf_mswsp_bool_options_chaptered, + { + "eChaptered", "mswsp.CPMCreateQuery.RowSetProperties.uBooleanOptions.eChaptered", + FT_BOOLEAN, 32, NULL, eChaptered, "The rowset supports chapters.", HFILL + } + }, + { + &hf_mswsp_bool_options_useci, + { + "eUseCI", "mswsp.CPMCreateQuery.RowSetProperties.uBooleanOptions.eUseCI", + FT_BOOLEAN, 32, NULL, eUseCI, "Use the inverted index to evaluate content restrictions even if it is out of date.", HFILL + } + }, + { + &hf_mswsp_bool_options_defertrim, + { + "eDeferTrimming", "mswsp.CPMCreateQuery.RowSetProperties.uBooleanOptions.eDeferTrimming", + FT_BOOLEAN, 32, NULL, eDeferTrimming, "Defer Non-indexed trimming operations like scoping or security checking which can be expensive.", HFILL + } + }, + { + &hf_mswsp_bool_options_rowsetevents, + { + "eEnableRowsetEvents", "mswsp.RowSetProperties.CPMCreateQuery.uBooleanOptions.eEnableRowsetEvents", + FT_BOOLEAN, 32, NULL, eEnableRowsetEvents, "Enables storage of rowset events on the server side.", HFILL + } + }, + { + &hf_mswsp_bool_options_dontcomputeexpensive, + { + "eDoNotComputeExpensiveProps", "mswsp.CPMCreateQuery.RowSetProperties.uBooleanOptions.eDoNotComputeExpensiveProps", + FT_BOOLEAN, 32, NULL, eDoNotComputeExpensiveProps, "Prevents computation of expensive properties.", HFILL + } + }, + { + &hf_mswsp_guid_time_low, + { + "time-low", "mswsp.guid.time_low", + FT_UINT32, BASE_HEX, NULL, 0, "time low value", HFILL + } + }, + { + &hf_mswsp_guid_time_mid, + { + "time-mid", "mswsp.guid.time_mid", + FT_UINT16, BASE_HEX, NULL, 0, "time mid value", HFILL + } + }, + { + &hf_mswsp_guid_time_high, + { + "time-high", "mswsp.guid.time_high", + FT_UINT16, BASE_HEX, NULL, 0, "time high value", HFILL + } + }, + { + &hf_mswsp_guid_time_clock_hi, + { + "clock_seq_hi_and_reserved", "mswsp.guid.time_clock_high", + FT_UINT8, BASE_HEX, NULL, 0, "time clock high value", HFILL + } + }, + { + &hf_mswsp_guid_time_clock_low, + { + "clock_seq_low", "mswsp.guid.time_clock_low", + FT_UINT8, BASE_HEX, NULL, 0, "time clock high low", HFILL + } + }, + { + &hf_mswsp_guid_node, + { + "node", "mswsp.guid.node", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_lcid, + { + "lcid", "mswsp.lcid", + FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_lcid_sortid, + { + "Sort ID", "mswsp.lcid.sortid", + FT_UINT8, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_lcid_langid, + { + "Language ID", "mswsp.lcid.langid", + FT_UINT16, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cscort_column, + { + "column", "mswsp.csort.column", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cscort_order, + { + "order", "mswsp.csort.order", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cscort_individual, + { + "inidvidual", "mswsp.csort.individual", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cscortset_count, + { + "count", "mswsp.csortset.count", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ctablecolumn_vtype, + { + "vType", "mswsp.ctablecolumn.vtype", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ctablecolumn_aggused, + { + "AggreagateUsed", "mswsp.ctablecolumn.aggused", + FT_UINT8, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ctablecolumn_aggtype, + { + "AggreagateType", "mswsp.ctablecolumn.aggtype", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ctablecolumn_valused, + { + "ValueUsed", "mswsp.ctablecolumn.valused", + FT_UINT8, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ctablecolumn_valoffset, + { + "ValueOffset", "mswsp.ctablecolumn.valused", + FT_UINT16, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ctablecolumn_valsize, + { + "ValueSize", "mswsp.ctablecolumn.valsize", + FT_UINT16, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ctablecolumn_statused, + { + "StatusUsed", "mswsp.ctablecolumn.statused", + FT_UINT8, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ctablecolumn_statoffset, + { + "StatusOffset", "mswsp.ctablecolumn.statoffset", + FT_UINT16, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ctablecolumn_lenused, + { + "LengthUsed", "mswsp.ctablecolumn.lenused", + FT_UINT8, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ctablecolumn_lenoffset, + { + "LengthOffset", "mswsp.ctablecolumn.lenoffset", + FT_UINT16, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cfullpropspec_kind, + { + "ulKind", "mswsp.cfullpropspec.kind", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cfullpropspec_propid, + { + "propid", "mswsp.cfullpropspec.propid", + FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cfullpropspec_propname, + { + "propname", "mswsp.cfullpropspec.propname", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cproprestrict_relop, + { + "relop", "mswsp.cproprestrict.relop", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ccoercerestrict_value, + { + "value", "mswsp.ccoercerestrict.value", + FT_FLOAT, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ccontentrestrict_cc, + { + "cc", "mswsp.ccontentrestrict.cc", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ccontentrestrict_phrase, + { + "phrase", "mswsp.ccontentrestrict.phrase", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ccontentrestrict_method, + { + "method", "mswsp.ccontentrestrict.method", + FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_natlangrestrict_cc, + { + "cc", "mswsp.ccontentrestrict.cc", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_natlangrestrict_phrase, + { + "phrase", "mswsp.ccontentrestrict.phrase", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crestrict_ultype, + { + "ulType", "mswsp.crestrict.ultype", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crestrict_weight, + { + "Weight", "mswsp.crestrict.weight", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crestrictarray_count, + { + "count", "mswsp.crestrictarray.count", + FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crestrictarray_present, + { + "present", "mswsp.crestrictarray.present", + FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cnoderestrict_cnode, + { + "Weight", "mswsp.cnoderestrict.cnode", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cbasestorvariant_vtype, + { + "vType", "mswsp.cbasestorvariant.vtype", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cbasestorvariant_vvalue, + { + "vValue", "mswsp.cbasestorvariant.vvalue", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cbasestorvariant_vdata1, + { + "vData1", "mswsp.cbasestorvariant.vdata1", + FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cbasestorvariant_vdata2, + { + "vData2", "mswsp.cbasestorvariant.vdata2", + FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cbasestorvariant_num, + { + "num", "mswsp.cbasestorvariant.num", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cbasestorvariant_cdims, + { + "cDims", "mswsp.cbasestorvariant.cdims", + FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cbasestorvariant_ffeatures, + { + "fFeatures", "mswsp.cbasestorvariant.ffeatures", + FT_UINT16, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cbasestorvariant_cbelements, + { + "cbElements", "mswsp.cbasestorvariant.cbelements", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cbasestorvariant_rgsabound, + { + "Rgsabound", "mswsp.cbasestorvariant.rgsabound", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cdbcolid_ekind, + { + "eKind", "mswsp.cdbcolid.ekind", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cdbcolid_ulid, + { + "ulId", "mswsp.cdbcolid.ulid", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cdbcolid_vstring, + { + "vString", "mswsp.cdbcolid.vstring", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cdbprop_id, + { + "Id", "mswsp.cdbprop.id", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cdbprop_options, + { + "Options", "mswsp.cdbprop.options", + FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cdbprop_status, + { + "Status", "mswsp.cdbprop.status", + FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cdbpropset_cprops, + { + "cProperties", "mswsp.cdbpropset.cprops", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_rangeboundry_ultype, + { + "ulType", "mswsp.rangeboundry.ultype", + FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_rangeboundry_labelpresent, + { + "labelPresent", "mswsp.rangeboundry.labelpresent", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_rangeboundry_cclabel, + { + "ccLabel", "mswsp.rangeboundry.ultype", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_rangeboundry_label, + { + "Label", "mswsp.rangeboundry.ultype", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crangecategspec_crange, + { + "cRange", "mswsp.crangecategspec.crange", + FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ccategspec_type, + { + "type", "mswsp.ccategspec.type", + FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_caggregspec_type, + { + "type", "mswsp.caggregspec.type", + FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_caggregspec_ccalias, + { + "ccAlias", "mswsp.caggregspec.ccalias", + FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_caggregspec_alias, + { + "Alias", "mswsp.caggregspec.alias", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_caggregspec_idcolumn, + { + "idColumn", "mswsp.caggregspec.idcolumn", + FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_caggregset_count, + { + "count", "mswsp.caggregset.count", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_caggregsortkey_order, + { + "order", "mswsp.caggregsortkey.order", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_csortaggregset_count, + { + "count", "mswsp.csortaggregset.count", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cingroupsortaggregset_type, + { + "Type", "mswsp.cingroupsortaggregset.type", + FT_UINT8, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cingroupsortaggregsets_count, + { + "count", "mswsp.cingroupsortaggregsets.count", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_categorizationspec_cmaxres, + { + "cMaxResults", "mswsp.categorizationspec.cmaxres", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crowsetprops_ulmaxopenrows, + { + "ulMaxOpenRows (ignored)", "mswsp.crowsetprops.ulmaxopenrows", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crowsetprops_ulmemusage, + { + "ulMemUsage (ignored)", "mswsp.crowsetprops.ulmemusage", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crowsetprops_cmaxresults, + { + "cMaxResults", "mswsp.crowsetprops.cmaxresults", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crowsetprops_ccmdtimeout, + { + "cCmdTimeout", "mswsp.crowsetprops.ccmdtimeout", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_cpidmapper_count, + { + "count", "mswsp.cpidmapper.count", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ccolumngroup_count, + { + "count", "mswsp.ccolumngroup.count", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ccolumngroup_grouppid, + { + "groupPid", "mswsp.ccolumngroup.grouppid", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ccolumngroup_pid, + { + "pid", "mswsp.ccolumngroup.pid", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ccolumngrouparray_count, + { + "count", "mswsp.ccolumngrouparray.count", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_int32array_value, + { + "value", "mswsp.int32array.value", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crowseeknext_cskip, + { + "cskip", "mswsp.crowseeknext.cskip", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crowseekat_bmkoffset, + { + "bmkoffset", "mswsp.crowseekat.bmkoffset", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crowseekat_skip, + { + "skip", "mswsp.crowseekat.skip", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crowseekat_hregion, + { + "hregion", "mswsp.crowseekat.hregion", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crowseekatratio_ulnumerator, + { + "ulnumerator", "mswsp.crowseekatratio.ulnumerator", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crowseekatratio_uldenominator, + { + "uldenominator", "mswsp.crowseekatratio.uldenominator", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crowseekatratio_hregion, + { + "hregion", "mswsp.crowseekatratio.hregion", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crowseekbybookmark_cbookmarks, + { + "cbookmarks", "mswsp.crowseekbybookmark.cbookmarks", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crowseekbybookmark_maxret, + { + "maxret", "mswsp.crowseekbybookmark.maxret", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crowvariantinfo_count64, + { + "count", "mswsp.crowvariantinfo.count64", + FT_UINT64, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_arrayvector_address64, + { + "address of array", "mswsp.arrayvector.address64", + FT_UINT64, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_crowvariantinfo_count32, + { + "count", "mswsp.crowvariantinfo.count32", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_arrayvector_address32, + { + "address of array", "mswsp.arrayvector.address64", + FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_rowvariant_item_address64, + { + "address", "mswsp.rowvariant.item.address64", + FT_UINT64, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_rowvariant_item_address32, + { + "address", "mswsp.rowvariant.item.address32", + FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_rowvariant_item_value, + { + "value", "mswsp.rowvariant.item.value", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_rowvariant_vtype, + { + "vtype", "mswsp.rowvariant.vtype", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_rowvariant_reserved1, + { + "reserved1", "mswsp.rowvariant.reserved1", + FT_UINT16, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_rowvariant_reserved2, + { + "reserved2", "mswsp.rowvariant.reserved2", + FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ctablecolumn_status, + { + "status", "mswsp.ctablecolumn.name", + FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_ctablecolumn_length, + { + "length", "mswsp.ctablecolumn.length", + FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcreatequery_size, + { + "size", "mswsp.cpmcreatequery.size", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcreatequery_ccolumnsetpresent , + { + "CColumnSetPresent", "mswsp.cpmcreatequery.ccolumnsetpresent", + FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcreatequery_crestrictionpresent , + { + "CRestrictionPresent", "mswsp.cpmcreatequery.crestrictionpresent", + FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcreatequery_csortpresent , + { + "CSortPresent", "mswsp.cpmcreatequery.csortpresent", + FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcreatequery_csortset_xxx , + { + "XXX - (undocumented bytes)", "mswsp.cpmcreatequery.csortset.xxx", + FT_UINT64, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcreatequery_ccategpresent , + { + "CCategorizationSetPresent", "mswsp.cpmcreatequery.ccategpresent", + FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcreatequery_ccateg_count, + { + "count", "mswsp.cpmcreatequery.ccateg.count", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcreatequery_trueseq, + { + "TrueSequential", "mswsp.cpmcreatequery.trueseq", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcreatequery_workid, + { + "WorkId", "mswsp.cpmcreatequery.trueseq", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcreatequery_cursors, + { + "Cursors", "mswsp.cpmcreatequery.cursors", + FT_BYTES, SEP_SPACE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrows_hcursor, + { + "hCursor", "mswsp.msg.cpmgetrows.hcursor", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrows_rowstotransfer, + { + "cRowsToTransfer", "mswsp.msg.cpmgetrows.rowstotransfer", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrows_rowwidth, + { + "cbRowWidth", "mswsp.msg.cpmgetrows.rowswidth", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrows_cbseek, + { + "cbSeek", "mswsp.msg.cpmgetrows.cbseek", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrows_cbreserved, + { + "cbReserved", "mswsp.msg.cpmgetrows.cbreserved", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrows_cbreadbuffer, + { + "cbReadBuffer", "mswsp.msg.cpmgetrows.cbreadbuffer", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrows_ulclientbase, + { + "ulClientBase", "mswsp.msg.cpmgetrows.ulclientbase", + FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrows_fbwdfetch, + { + "fBwdFetch", "mswsp.msg.cpmgetrows.fbwdfetch", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrows_etype, + { + "eType", "mswsp.msg.cpmgetrows.etype", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrows_chapt, + { + "chapt", "mswsp.msg.cpmgetrows.chapt", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrows_crowsreturned, + { + "cRowsReturned", "mswsp.msg.cpmgetrows.crowsreturned", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmratiofinished_hcursor, + { + "hCursor", "mswsp.msg.cpmratiofinished_hcursor", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmratiofinished_fquick, + { + "fQuick", "mswsp.msg.cpmratiofinished_fquick", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmratiofinished_ulnumerator, + { + "ulNumerator", "mswsp.msg.cpmratiofinished_ulnumerator", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmratiofinished_uldenominator, + { + "ulDenominator", "mswsp.msg.cpmratiofinished_uldenominator", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmratiofinished_crows, + { + "cRows", "mswsp.msg.cpmratiofinished_crows", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmratiofinished_fnewrows, + { + "fNewRows", "mswsp.msg.cpmratiofinished_fnewrows", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcomparebmk_hcursor, + { + "hCursor", "mswsp.msg.cpmcomparebmk.hcursor", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcomparebmk_chapt, + { + "chapt", "mswsp.msg.cpmcomparebmk.chapt", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcomparebmk_bmkfirst, + { + "bmkFirst", "mswsp.msg.cpmcomparebmk.bmkfirst", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcomparebmk_bmksecond, + { + "bmkSecond", "mswsp.msg.cpmcomparebmk.bmksecond", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcomparebmk_dwcomparison, + { + "dwComparison", "mswsp.msg.cpmcomparebmk.dwcomparison", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetapproxpos_hcursor, + { + "hCursor", "mswsp.msg.cpmgetapproxpos.hcursor", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetapproxpos_chapt, + { + "chapt", "mswsp.msg.cpmgetapproxpos.chapt", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetapproxpos_bmk, + { + "bmk", "mswsp.msg.cpmgetapproxpos.bmk", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetapproxpos_numerator, + { + "numerator", "mswsp.msg.cpmgetapproxpos.numerator", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetapproxpos_denominator, + { + "denominator", "mswsp.msg.cpmgetapproxpos.denominator", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmsetbinding_hcursor, + { + "hCursor", "mswsp.msg.cpmsetbinding.hcursor", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmsetbinding_cbrow, + { + "cBrow", "mswsp.msg.cpmsetbinding.cbrow", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmsetbinding_desc, + { + "cbBindingDesc", "mswsp.msg.cpmsetbinding.desc", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmsetbinding_dummy, + { + "dummy", "mswsp.msg.cpmsetbinding.dummy", + FT_UINT32, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmsetbinding_ccolumns, + { + "cColumns", "mswsp.msg.cpmsetbinding.ccolumns", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmsetbinding_acolumns, + { + "aColumns", "mswsp.msg.cpmsetbinding.acolumns", + FT_BYTES, SEP_DOT, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmsendnotify_watchnotify, + { + "watchNotify", "mswsp.msg.cpmsendnotify.watchnotify", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetquerystatus_hcursor, + { + "hCursor", "mswsp.msg.cpmquerystatus.hcursor", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetquerystatus_qstatus, + { + "QStatus", "mswsp.msg.cpmquerystatus.qstatus", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcistate_cbstruct, + { + "cbStruct", "mswsp.msg.cpmcistate.cbstruct", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcistate_cwordlist, + { + "cbWordList", "mswsp.msg.cpmcistate.cbwordlist", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcistate_cpersistindex, + { + "cbPersistentIndex", "mswsp.msg.cpmcistate.cbpersistindex", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcistate_cqueries, + { + "cQueries", "mswsp.msg.cpmcistate.cqueries", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcistate_cfreshtest, + { + "cFreshTest", "mswsp.msg.cpmcistate.cfreshtest", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcistate_dwmergeprogress, + { + "dwMergeProgress", "mswsp.msg.cpmcistate.dwmergeprogress", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcistate_estate, + { + "eState", "mswsp.msg.cpmcistate.estate", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcistate_cfiltereddocs, + { + "cFilteredDocuments", "mswsp.msg.cpmcistate.cfiltereddocs", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcistate_ctotaldocs, + { + "cTotalDocuments", "mswsp.msg.cpmcistate.ctotaldocs", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcistate_cpendingscans, + { + "cPendingScans", "mswsp.msg.cpmcistate.cpendingscans", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcistate_dwindexsize, + { + "dwIndexSize", "mswsp.msg.cpmcistate.dwindexsize", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcistate_cuniquekeys, + { + "cUniqueKeys", "mswsp.msg.cpmcistate.cuniquekeys", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcistate_csecqdocuments, + { + "cSecQDocuments", "mswsp.msg.cpmcistate.csecqdocuments", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmcistate_dwpropcachesize, + { + "dwPropCacheSize", "mswsp.msg.cpmcistate.dwpropcachesize", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmfetchvalue_wid, + { + "wid", "mswsp.msg.cpmfetchvalue.wid", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmfetchvalue_cbsofar, + { + "cbSoFar", "mswsp.msg.cpmfetchvalue.cbsofar", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmfetchvalue_cbpropspec, + { + "cbPropSpec", "mswsp.msg.cpmfetchvalue.cbpropspec", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmfetchvalue_cbchunk, + { + "cbChunk", "mswsp.msg.cpmfetchvalue.chunk", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmfetchvalue_cbvalue, + { + "cbValue", "mswsp.msg.cpmfetchvalue.cbvalue", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmfetchvalue_fmoreexists, + { + "fMoreExists", "mswsp.msg.cpmfetchvalue.fmoreexists", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmfetchvalue_fvalueexists, + { + "fValueExists", "mswsp.msg.cpmfetchvalue.fvalueexists", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmfetchvalue_vvalue, + { + "vvalue", "mswsp.msg.cpmfetchvalue.vvalue", + FT_BYTES, SEP_SPACE, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmquerystatusex_qstatus, + { + "qStatus", "mswsp.msg.cpmquerystatusex.qstatus", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmquerystatusex_hcursor, + { + "hCursor", "mswsp.msg.cpmquerystatusex.hcursor", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmquerystatusex_bmk, + { + "bmk", "mswsp.msg.cpmquerystatusex.bmk", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmquerystatusex_cfiltereddocs, + { + "cFilteredDocuments", "mswsp.msg.cpmquerystatusex.cfiltereddocs", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmquerystatusex_cdocstofilter, + { + "cDocumentsToFilter", "mswsp.msg.cpmquerystatusex.cdocstofilter", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmquerystatusex_dwratiodenom, + { + "dwRatioFinishedDenomenator", "mswsp.msg.cpmquerystatusex.dwratiodenom", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmquerystatusex_dwrationumer, + { + "dwRatioFinishedNumerator", "mswsp.msg.cpmquerystatusex.dwrationumer", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmquerystatusex_irowbmk, + { + "iRowBmk", "mswsp.msg.cpmquerystatusex.irowbmk", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmquerystatusex_crowstotal, + { + "cRowsTotal", "mswsp.msg.cpmquerystatusex.crowstotal", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmquerystatusex_maxrank, + { + "maxRank", "mswsp.msg.cpmquerystatusex.maxrank", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmquerystatusex_cresultsfound, + { + "cResultsFound", "mswsp.msg.cpmquerystatusex.cresultsfound", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmquerystatusex_whereid, + { + "whereId", "mswsp.msg.cpmquerystatusex.whereid", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmrestartposition_hcursor, + { + "hCursor", "mswsp.msg.cpmrestartposition.hcursor", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmrestartposition_chapt, + { + "chapt", "mswsp.msg.cpmrestartposition.chapt", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrowsetnotify_wid, + { + "wid", "mswsp.msg.cpmgetrowsetnotify.wid", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrowsetnotify_moreevents, + { + "moreEvents", "mswsp.msg.cpmgetrowsetnotify.moreevents", + FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrowsetnotify_eventtype, + { + "eventType", "mswsp.msg.cpmgetrowsetnotify.eventType", + FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrowsetnotify_rowsetitemstate, + { + "rowSetItemState", "mswsp.msg.cpmgetrowsetnotify.rowsetitemstate", + FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrowsetnotify_changeditemstate, + { + "changedItemState", "mswsp.msg.cpmgetrowsetnotify.changeditemState", + FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrowsetnotify_rowsetevent, + { + "rowSetEvent", "mswsp.msg.cpmgetrowsetnotify.rowsetevent", + FT_UINT8, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrowsetnotify_rowseteventdata1, + { + "rowSetEventdata1", "mswsp.msg.cpmgetrowsetnotify.rowseteventdata1", + FT_UINT64, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmgetrowsetnotify_rowseteventdata2, + { + "rowSetEventdata2", "mswsp.msg.cpmgetrowsetnotify.rowseteventdata2", + FT_UINT64, BASE_HEX, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmfindindices_cwids, + { + "cWids", "mswsp.msg.cpmfindindices.cwids", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmfindindices_cdepthprev, + { + "cDepthPrev", "mswsp.msg.cpmfindindices.cdepthprev", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmfindindices_cdepthnext, + { + "cDepthNext", "mswsp.msg.cpmfindindices.cdepthnext", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmsetscopeprioritization_priority, + { + "priority", "mswsp.msg.cpmsetscopeprioritization.priority", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmsetscopeprioritization_eventfreq, + { + "eventFrequency", "mswsp.msg.cpmsetscopeprioritization.eventfreq", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmsetscopestatisics_dwindexitems, + { + "dwIndexedItems", "mswsp.msg.cpmsetscopestatistics.dwindexitems", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmsetscopestatisics_dwoutstandingadds, + { + "dwOutstandingAdds", "mswsp.msg.cpmsetscopestatistics.dwoutstandingadds", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + }, + { + &hf_mswsp_msg_cpmsetscopestatisics_dwoutstandingmodifies, + { + "dwOutstandingModifies", "mswsp.msg.cpmsetscopestatistics.dwoutstandingmodifies", + FT_UINT32, BASE_DEC, NULL, 0, NULL, HFILL + } + } + }; + + /* Setup protocol subtree array */ + static gint *ett[] = { + &ett_mswsp, + &ett_mswsp_hdr, + &ett_mswsp_msg, + &ett_mswsp_pad, + &ett_mswsp_property_restriction, + &ett_CRestrictionArray, + &ett_CBaseStorageVariant, + &ett_CBaseStorageVariant_Vector, + &ett_CBaseStorageVariant_Array, + &ett_CDbColId, + &ett_GUID, + &ett_CDbProp, + &ett_CDbPropSet, + &ett_CDbPropSet_Array, + &ett_CRestriction, + &ett_CNodeRestriction, + &ett_CPropertyRestriction, + &ett_CCoercionRestriction, + &ett_CContentRestriction, + &ett_RANGEBOUNDARY, + &ett_CRangeCategSpec, + &ett_CCategSpec, + &ett_CAggregSpec, + &ett_CAggregSet, + &ett_CCategorizationSpec, + &ett_CAggregSortKey, + &ett_CSortAggregSet, + &ett_CInGroupSortAggregSet, + &ett_CInGroupSortAggregSets, + &ett_CRowsetProperties, + &ett_CFullPropSpec, + &ett_CPidMapper, + &ett_CSort, + &ett_CSortSet, + &ett_CNatLanguageRestriction, + &ett_CColumnGroup, + &ett_CColumnGroupArray, + &ett_LCID, + &ett_CTableColumn, + &ett_Array, + &ett_SeekDescription, + &ett_CRowsSeekNext, + &ett_CRowsSeekAt, + &ett_CRowsSeekAtRatio, + &ett_CRowsSeekByBookmark, + &ett_GetRowsRow, + &ett_GetRowsColumn, + &ett_CRowVariant, + &ett_CRowVariant_Vector, + &ett_mswsp_bool_options, + &ett_mswsp_uin32_array, + &ett_mswsp_msg_padding, + &ett_mswsp_msg_creusewhere + }; + + int i; + + /* Register the protocol name and description */ + proto_mswsp = proto_register_protocol("Windows Search Protocol", + "MS-WSP", "mswsp"); + + /* Required function calls to register the header fields and subtrees used */ + proto_register_field_array(proto_mswsp, hf, array_length(hf)); + proto_register_subtree_array(ett, array_length(ett)); + + for (i=0; i<(int)array_length(GuidPropertySet); i++) { + guids_add_guid(&GuidPropertySet[i].guid, GuidPropertySet[i].def); + } + + + /* Register preferences module (See Section 2.6 for more on preferences) */ + /* (Registration of a prefs callback is not required if there are no */ + /* prefs-dependent registration functions (eg: a port pref). */ + /* See proto_reg_handoff below. */ + /* If a prefs callback is not needed, use NULL instead of */ + /* proto_reg_handoff_mswsp in the following). */ + mswsp_module = prefs_register_protocol(proto_mswsp, + proto_reg_handoff_mswsp); + + register_init_routine(&mswsp_init_protocol); + /* Register preferences module under preferences subtree. + Use this function instead of prefs_register_protocol if you want to group + preferences of several protocols under one preferences subtree. + Argument subtree identifies grouping tree node name, several subnodes can be + specified using slash '/' (e.g. "OSI/X.500" - protocol preferences will be + accessible under Protocols->OSI->X.500-><PROTOSHORTNAME> preferences node. + */ + /* mswsp_module = prefs_register_protocol_subtree(subtree, */ + /* proto_mswsp, proto_reg_handoff_mswsp); */ + + /* Register a sample preference */ + prefs_register_bool_preference(mswsp_module, "show_hex", + "Display numbers in Hex", + "Enable to display numerical values in hexadecimal.", + &gPREF_HEX); + + /* Register a sample port preference */ + prefs_register_uint_preference(mswsp_module, "tcp.port", "mswsp TCP Port", + " mswsp TCP port if other than the default", + 10, &gPORT_PREF); +} + +static int dissect_mswsp_smb(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data) +{ + smb_info_t *si = (smb_info_t*)data; + gboolean in = si->request; + + smb_fid_info_t *fid_info = NULL; + fid_info = find_fid_info(si); + + if (!fid_info || !fid_info->fsi || !fid_info->fsi->filename) { + return 0; + } + + + if (g_ascii_strcasecmp(fid_info->fsi->filename, "\\MsFteWds") != 0) { + return 0; + } + p_add_proto_data(wmem_file_scope(), pinfo, proto_mswsp, 0, (void*)&SMB1); + return dissect_mswsp(tvb, pinfo, tree, in, data); +} + + +static int dissect_mswsp_smb2(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data) +{ + smb2_info_t *si = (smb2_info_t*)data; + gboolean in = !(si->flags & SMB2_FLAGS_RESPONSE); + char* fid_name = NULL; + guint32 open_frame = 0, close_frame = 0; + + if (!si) { + return 0; + } + + if (si->saved) { + dcerpc_fetch_polhnd_data(&si->saved->policy_hnd, &fid_name, NULL, &open_frame, &close_frame, pinfo->fd->num); + } + + if (!fid_name || strcmp(fid_name, "File: MsFteWds") != 0) { + return 0; + } + + p_add_proto_data(wmem_file_scope(), pinfo, proto_mswsp, 0, (void*)&SMB2); + return dissect_mswsp(tvb, pinfo, tree, in, data); +} + + + +/* If this dissector uses sub-dissector registration add a registration routine. + This exact format is required because a script is used to find these + routines and create the code that calls these routines. + + If this function is registered as a prefs callback (see prefs_register_protocol + above) this function is also called by preferences whenever "Apply" is pressed; + In that case, it should accommodate being called more than once. + + Simple form of proto_reg_handoff_mswsp which can be used if there are + no prefs-dependent registration function calls. + */ + +void +proto_reg_handoff_mswsp(void) +{ + heur_dissector_add("smb_transact", dissect_mswsp_smb, "WSP over SMB1", "smb1_wsp", proto_mswsp, HEURISTIC_ENABLE); + heur_dissector_add("smb2_heur_subdissectors", dissect_mswsp_smb2, "WSP over SMB2", "smb2_wsp", proto_mswsp, HEURISTIC_ENABLE); +} + + +/* + * Editor modelines - http://www.wireshark.org/tools/modelines.html + * + * Local variables: + * c-basic-offset: 4 + * tab-width: 8 + * indent-tabs-mode: t + * End: + * + * vi: set shiftwidth=4 tabstop=8 expandtab: + * :indentSize=4:tabSize=8:noTabs=true: + */ diff --git a/epan/dissectors/packet-smb-pipe.c b/epan/dissectors/packet-smb-pipe.c index 6bd7696fcf..4951c801e7 100644 --- a/epan/dissectors/packet-smb-pipe.c +++ b/epan/dissectors/packet-smb-pipe.c @@ -3260,7 +3260,7 @@ smb_dcerpc_reassembly_cleanup(void) gboolean dissect_pipe_dcerpc(tvbuff_t *d_tvb, packet_info *pinfo, proto_tree *parent_tree, - proto_tree *tree, guint32 fid) + proto_tree *tree, guint32 fid, void *data) { gboolean result=0; gboolean save_fragmented; @@ -3293,7 +3293,7 @@ dissect_pipe_dcerpc(tvbuff_t *d_tvb, packet_info *pinfo, proto_tree *parent_tree and bail out */ if(!pinfo->can_desegment){ - result = dissector_try_heuristic(smb_transact_heur_subdissector_list, d_tvb, pinfo, parent_tree, &hdtbl_entry, NULL); + result = dissector_try_heuristic(smb_transact_heur_subdissector_list, d_tvb, pinfo, parent_tree, &hdtbl_entry, data); goto clean_up_and_exit; } @@ -3324,7 +3324,7 @@ dissect_pipe_dcerpc(tvbuff_t *d_tvb, packet_info *pinfo, proto_tree *parent_tree * Try the heuristic dissectors and see if we * find someone that recognizes this payload. */ - result = dissector_try_heuristic(smb_transact_heur_subdissector_list, d_tvb, pinfo, parent_tree, &hdtbl_entry, NULL); + result = dissector_try_heuristic(smb_transact_heur_subdissector_list, d_tvb, pinfo, parent_tree, &hdtbl_entry, data); /* no this didn't look like something we know */ if(!result){ @@ -3375,7 +3375,7 @@ dissect_pipe_dcerpc(tvbuff_t *d_tvb, packet_info *pinfo, proto_tree *parent_tree tree, pinfo, d_tvb, &frag_tree_item); /* dissect the full PDU */ - result = dissector_try_heuristic(smb_transact_heur_subdissector_list, d_tvb, pinfo, parent_tree, &hdtbl_entry, NULL); + result = dissector_try_heuristic(smb_transact_heur_subdissector_list, d_tvb, pinfo, parent_tree, &hdtbl_entry, data); } goto clean_up_and_exit; } @@ -3395,12 +3395,12 @@ dissect_pipe_dcerpc(tvbuff_t *d_tvb, packet_info *pinfo, proto_tree *parent_tree /* we didn't find it, try any of the heuristic dissectors and bail out */ - result = dissector_try_heuristic(smb_transact_heur_subdissector_list, d_tvb, pinfo, parent_tree, &hdtbl_entry, NULL); + result = dissector_try_heuristic(smb_transact_heur_subdissector_list, d_tvb, pinfo, parent_tree, &hdtbl_entry, data); goto clean_up_and_exit; } if(!(fd_head->flags&FD_DEFRAGMENTED)){ /* we don't have a fully reassembled frame */ - result = dissector_try_heuristic(smb_transact_heur_subdissector_list, d_tvb, pinfo, parent_tree, &hdtbl_entry, NULL); + result = dissector_try_heuristic(smb_transact_heur_subdissector_list, d_tvb, pinfo, parent_tree, &hdtbl_entry, data); goto clean_up_and_exit; } @@ -3424,7 +3424,7 @@ dissect_pipe_dcerpc(tvbuff_t *d_tvb, packet_info *pinfo, proto_tree *parent_tree tree, pinfo, d_tvb, &frag_tree_item); /* dissect the full PDU */ - result = dissector_try_heuristic(smb_transact_heur_subdissector_list, d_tvb, pinfo, parent_tree, &hdtbl_entry, NULL); + result = dissector_try_heuristic(smb_transact_heur_subdissector_list, d_tvb, pinfo, parent_tree, &hdtbl_entry, data); @@ -3667,7 +3667,7 @@ dissect_pipe_smb(tvbuff_t *sp_tvb, tvbuff_t *s_tvb, tvbuff_t *pd_tvb, if (fid != -1) { if (d_tvb == NULL) return FALSE; - return dissect_pipe_dcerpc(d_tvb, pinfo, tree, pipe_tree, fid); + return dissect_pipe_dcerpc(d_tvb, pinfo, tree, pipe_tree, fid, smb_info); } break; } diff --git a/epan/dissectors/packet-smb-pipe.h b/epan/dissectors/packet-smb-pipe.h index 9b481257bf..4ccaf10c77 100644 --- a/epan/dissectors/packet-smb-pipe.h +++ b/epan/dissectors/packet-smb-pipe.h @@ -30,6 +30,6 @@ dissect_pipe_smb(tvbuff_t *sp_tvb, tvbuff_t *s_tvb, tvbuff_t *pd_tvb, packet_info *pinfo, proto_tree *tree, smb_info_t *smb_info); gboolean dissect_pipe_dcerpc(tvbuff_t *d_tvb, packet_info *pinfo, proto_tree *parent_tree, - proto_tree *tree, guint32 fid); + proto_tree *tree, guint32 fid, void *data); #endif diff --git a/epan/dissectors/packet-smb.c b/epan/dissectors/packet-smb.c index 6e4cd4256a..fdbbef4da1 100644 --- a/epan/dissectors/packet-smb.c +++ b/epan/dissectors/packet-smb.c @@ -4207,7 +4207,8 @@ dissect_file_data(tvbuff_t *tvb, proto_tree *tree, int offset, guint16 bc, guint static int dissect_file_data_dcerpc(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, - proto_tree *top_tree, int offset, guint16 bc, guint16 datalen, guint16 fid) + proto_tree *top_tree, int offset, guint16 bc, guint16 datalen, guint16 fid, + void *data) { int tvblen; tvbuff_t *dcerpc_tvb; @@ -4222,7 +4223,7 @@ dissect_file_data_dcerpc(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, } tvblen = tvb_reported_length_remaining(tvb, offset); dcerpc_tvb = tvb_new_subset(tvb, offset, tvblen, bc); - dissect_pipe_dcerpc(dcerpc_tvb, pinfo, top_tree, tree, fid); + dissect_pipe_dcerpc(dcerpc_tvb, pinfo, top_tree, tree, fid, data); if (bc > tvblen) offset += tvblen; else @@ -4248,7 +4249,7 @@ dissect_file_data_maybe_dcerpc(tvbuff_t *tvb, packet_info *pinfo, if ( (si->sip && (si->sip->flags & SMB_SIF_TID_IS_IPC)) && (ofs == 0) ) { /* dcerpc call */ return dissect_file_data_dcerpc(tvb, pinfo, tree, - top_tree, offset, bc, datalen, fid); + top_tree, offset, bc, datalen, fid, si); } else { /* ordinary file data */ return dissect_file_data(tvb, tree, offset, bc, datalen); @@ -8329,7 +8330,7 @@ dissect_nt_trans_data_request(tvbuff_t *tvb, packet_info *pinfo, int offset, pro /* ioctl data */ ioctl_tvb = tvb_new_subset(tvb, offset, MIN((int)bc, tvb_reported_length_remaining(tvb, offset)), bc); if (nti) { - dissect_smb2_ioctl_data(ioctl_tvb, pinfo, tree, top_tree_global, nti->ioctl_function, TRUE); + dissect_smb2_ioctl_data(ioctl_tvb, pinfo, tree, top_tree_global, nti->ioctl_function, TRUE, NULL); } offset += bc; @@ -8910,7 +8911,7 @@ dissect_nt_trans_data_response(tvbuff_t *tvb, packet_info *pinfo, case NT_TRANS_IOCTL: /* ioctl data */ ioctl_tvb = tvb_new_subset(tvb, offset, MIN((int)len, tvb_reported_length_remaining(tvb, offset)), len); - dissect_smb2_ioctl_data(ioctl_tvb, pinfo, tree, top_tree_global, nti->ioctl_function, FALSE); + dissect_smb2_ioctl_data(ioctl_tvb, pinfo, tree, top_tree_global, nti->ioctl_function, FALSE, NULL); offset += len; diff --git a/epan/dissectors/packet-smb2.c b/epan/dissectors/packet-smb2.c index 4f478ce528..671da25b50 100644 --- a/epan/dissectors/packet-smb2.c +++ b/epan/dissectors/packet-smb2.c @@ -1583,7 +1583,6 @@ dissect_smb2_fid(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int offset di.conformant_run = 0; /* we need di->call_data->flags.NDR64 == 0 */ di.call_data = &call_data; - di.dcerpc_procedure_name = ""; switch (mode) { case FID_MODE_OPEN: @@ -4421,7 +4420,7 @@ smb2_set_dcerpc_file_id(packet_info *pinfo, smb2_info_t *si) } static int -dissect_file_data_dcerpc(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree _U_, int offset, guint32 datalen, proto_tree *top_tree) +dissect_file_data_dcerpc(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree _U_, int offset, guint32 datalen, proto_tree *top_tree, void *data) { tvbuff_t *dcerpc_tvb; heur_dtbl_entry_t *hdtbl_entry; @@ -4429,11 +4428,11 @@ dissect_file_data_dcerpc(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree _U_ dcerpc_tvb = tvb_new_subset(tvb, offset, MIN((int)datalen, tvb_captured_length_remaining(tvb, offset)), datalen); /* dissect the full PDU */ - dissector_try_heuristic(smb2_heur_subdissector_list, dcerpc_tvb, pinfo, top_tree, &hdtbl_entry, NULL); + if (dissector_try_heuristic(smb2_heur_subdissector_list, dcerpc_tvb, pinfo, top_tree, &hdtbl_entry, data)) { - offset += datalen; - + offset += datalen; + } return offset; } @@ -4552,10 +4551,14 @@ dissect_smb2_write_request(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, } /* data or dcerpc ?*/ - if (length && si->tree && si->tree->share_type == SMB2_SHARE_TYPE_PIPE) { + if (length) { + int oldoffset = offset; smb2_set_dcerpc_file_id(pinfo, si); - offset = dissect_file_data_dcerpc(tvb, pinfo, tree, offset, length, si->top_tree); - return offset; + offset = dissect_file_data_dcerpc(tvb, pinfo, tree, offset, length, si->top_tree, si); + if (offset != oldoffset) { + /* managed to dissect pipe data */ + return offset; + } } /* just ordinary data */ @@ -4612,9 +4615,9 @@ dissect_smb2_write_response(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *t } static void -dissect_smb2_FSCTL_PIPE_TRANSCEIVE(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int offset, proto_tree *top_tree, gboolean data_in _U_) +dissect_smb2_FSCTL_PIPE_TRANSCEIVE(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int offset, proto_tree *top_tree, gboolean data_in _U_, void *data) { - dissect_file_data_dcerpc(tvb, pinfo, tree, offset, tvb_captured_length_remaining(tvb, offset), top_tree); + dissect_file_data_dcerpc(tvb, pinfo, tree, offset, tvb_captured_length_remaining(tvb, offset), top_tree, data); } static void @@ -4634,6 +4637,7 @@ dissect_smb2_FSCTL_PIPE_WAIT(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree if (name == NULL) { name = ""; } + col_append_fstr(pinfo->cinfo, COL_INFO, " Pipe: %s", name); if (top_tree) { @@ -5138,7 +5142,7 @@ dissect_smb2_FSCTL_SET_OBJECT_ID_EXTENDED(tvbuff_t *tvb, packet_info *pinfo _U_, } void -dissect_smb2_ioctl_data(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, proto_tree *top_tree, guint32 ioctl_function, gboolean data_in) +dissect_smb2_ioctl_data(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, proto_tree *top_tree, guint32 ioctl_function, gboolean data_in, void *private_data _U_) { guint16 dc; @@ -5153,7 +5157,7 @@ dissect_smb2_ioctl_data(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, pro } break; case 0x0011c017: /* FSCTL_PIPE_TRANSCEIVE */ - dissect_smb2_FSCTL_PIPE_TRANSCEIVE(tvb, pinfo, tree, 0, top_tree, data_in); + dissect_smb2_FSCTL_PIPE_TRANSCEIVE(tvb, pinfo, tree, 0, top_tree, data_in, private_data); break; case 0x00110018: /* FSCTL_PIPE_WAIT */ dissect_smb2_FSCTL_PIPE_WAIT(tvb, pinfo, tree, 0, top_tree, data_in); @@ -5208,14 +5212,14 @@ static void dissect_smb2_ioctl_data_in(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, smb2_info_t *si) { smb2_set_dcerpc_file_id(pinfo, si); - dissect_smb2_ioctl_data(tvb, pinfo, tree, si->top_tree, si->ioctl_function, TRUE); + dissect_smb2_ioctl_data(tvb, pinfo, tree, si->top_tree, si->ioctl_function, TRUE, si); } static void dissect_smb2_ioctl_data_out(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, smb2_info_t *si) { smb2_set_dcerpc_file_id(pinfo, si); - dissect_smb2_ioctl_data(tvb, pinfo, tree, si->top_tree, si->ioctl_function, FALSE); + dissect_smb2_ioctl_data(tvb, pinfo, tree, si->top_tree, si->ioctl_function, FALSE, si); } static int @@ -5444,14 +5448,15 @@ dissect_smb2_read_response(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, /* reserved */ offset += 4; - /* data or dcerpc ? - * If the pidvalid flag is set we assume it is a deferred - * STATUS_PENDING read and thus a named pipe (==dcerpc) - */ - if (length && ( (si->tree && si->tree->share_type == SMB2_SHARE_TYPE_PIPE)||(si->flags & SMB2_FLAGS_ASYNC_CMD))) { + /* data or dcerpc ?*/ + if (length) { + int oldoffset = offset; smb2_set_dcerpc_file_id(pinfo, si); - offset = dissect_file_data_dcerpc(tvb, pinfo, tree, offset, length, si->top_tree); - return offset; + offset = dissect_file_data_dcerpc(tvb, pinfo, tree, offset, length, si->top_tree, si); + if (offset != oldoffset) { + /* managed to dissect pipe data */ + return offset; + } } /* data */ diff --git a/epan/dissectors/packet-smb2.h b/epan/dissectors/packet-smb2.h index 80a08fbe36..4e4c3aed3e 100644 --- a/epan/dissectors/packet-smb2.h +++ b/epan/dissectors/packet-smb2.h @@ -187,6 +187,6 @@ typedef struct _smb2_transform_info_t { int dissect_smb2_FILE_OBJECTID_BUFFER(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, int offset); int dissect_smb2_ioctl_function(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, int offset, guint32 *ioctl_function); -void dissect_smb2_ioctl_data(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, proto_tree *top_tree, guint32 ioctl_function, gboolean data_in); +void dissect_smb2_ioctl_data(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, proto_tree *top_tree, guint32 ioctl_function, gboolean data_in, void *private_data); #endif |