silverf0x / RpcView

RpcView is a free tool to explore and decompile Microsoft RPC interfaces
GNU General Public License v3.0
895 stars 247 forks source link

Fix security callback enumeration for 32bit #71

Open qtc-de opened 10 months ago

qtc-de commented 10 months ago

From RpcCore2 on, the _RPC_INTERFACE_T structure layout seems to be incorrect regarding the security callback. I recently encountered a 32bit RPC server utilizing security callbacks and they were not displayed in RpcView.

The changes in this PR were confirmed to fix the issue for RpcCore4 and probably also work for the previous two versions.