We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 85a40d8 commit df8a63eCopy full SHA for df8a63e
1 file changed
windows/rpc/client.py
@@ -220,7 +220,7 @@ def _get_response_effective_data(self, response):
220
data = response.data[ctypes.sizeof(ALPC_RPC_RESPONSE):]
221
else:
222
# Response in view M extract size from PORT_MESSAGE & read data from view
223
- assert response.port_message.u1.s1.TotalLength >= 0x48 # At least 0x20 of data
+ assert response.port_message.u1.s1.DataLength >= ctypes.sizeof(ALPC_RPC_RESPONSE) # 0x20
224
rpcdatasize = struct.unpack("<I", response.data[0x18:0x1c])[0] # ctypes.sizeof(ALPC_RPC_RESPONSE)
225
viewattr = response.view_attribute
226
assert viewattr.ViewSize >= rpcdatasize
0 commit comments