diff options
| -rw-r--r-- | epan/dissectors/packet-windows-common.c | 13 | ||||
| -rw-r--r-- | epan/dissectors/packet-windows-common.h | 8 |
2 files changed, 15 insertions, 6 deletions
diff --git a/epan/dissectors/packet-windows-common.c b/epan/dissectors/packet-windows-common.c index c84a0ef334..c503a1da61 100644 --- a/epan/dissectors/packet-windows-common.c +++ b/epan/dissectors/packet-windows-common.c @@ -1361,12 +1361,13 @@ get_well_known_rid_name(guint32 rid) return match_strval(rid, well_known_rids); } -/* Dissect a NT SID. Label it with 'name' and return a string version of - the SID in the 'sid_str' parameter which must be freed by the caller. - hf_sid can be -1 if the caller doesnt care what name is used and then - "nt.sid" will be the default instead. If the caller wants a more - appropriate hf field, it will just pass a FT_STRING hf field here -*/ +/* Dissect a NT SID. Label it with 'name' and return a string version + * of the SID in the 'sid_str' parameter which has a packet lifetime + * scope and should NOT be freed by the caller. hf_sid can be -1 if + * the caller doesnt care what name is used and then "nt.sid" will be + * the default instead. If the caller wants a more appropriate hf + * field, it will just pass a FT_STRING hf field here + */ int dissect_nt_sid(tvbuff_t *tvb, int offset, proto_tree *parent_tree, diff --git a/epan/dissectors/packet-windows-common.h b/epan/dissectors/packet-windows-common.h index 88b957e3c4..f24843f2c5 100644 --- a/epan/dissectors/packet-windows-common.h +++ b/epan/dissectors/packet-windows-common.h @@ -203,6 +203,14 @@ extern const value_string ms_country_codes[]; int dissect_nt_64bit_time(tvbuff_t *tvb, proto_tree *tree, int offset, int hf_date); +/* Dissect a NT SID. Label it with 'name' and return a string version + * of the SID in the 'sid_str' parameter which has a packet lifetime + * scope and should NOT be freed by the caller. hf_sid can be -1 if + * the caller doesnt care what name is used and then "nt.sid" will be + * the default instead. If the caller wants a more appropriate hf + * field, it will just pass a FT_STRING hf field here + */ + int dissect_nt_sid(tvbuff_t *tvb, int offset, proto_tree *parent_tree, const char *name, char **sid_str, int hf_sid); |