dnsxpl.idl

这是一个dns溢出的源代码

//Definicion de las funciones exportadas en el interfaz.
// References: http://www.hsc.fr/ressources/articles/win_net_srv/msrpc_dns.html
[ uuid (50abc2a4-574d-40b3-9d66-ee4fd5fba076),
  version(5.0),
  pointer_default(unique)
]
interface cluuid
{

//0x00
void DnssrvOperation( 
[in] long parama,  //ignored?
[in, string] unsigned char *paramb,
[in] long paramc,
[in,string] unsigned char *paramd,
[in] long parame,
[in] unsigned char *paramf );

//0x01
long DnssrvQuery(
[in] [unique]  [string] wchar_t * parama,
[in] [unique]  [string] unsigned char * paramb,
[in] [unique]  [string] unsigned char * paramc,
[in]  long * paramd,
[out]  long *parame);

/*
long  DnsQuery( 
[in] [unique]  [string] wchar_t * element_400,
[in] [unique]  [string] char * element_401,
[in] [unique]  [string] char * element_402,
[out]  long * element_403,
[out]  TYPE_1 * element_404
 );

*/

void DnssrvComplexOperation(void);
void DnssrvEnumRecords(void);
void DnssrvUpdateRecord(void);
void DnssrvOperation2(void);

//0x06
long  DnssrvQuery2 (
[in]  long  parama,
[in]  long  paramb,
[in] [unique]  [string] wchar_t * paramc,
[in] [unique]  [string] char * paramd,
[in] [unique]  [string] char * parame,
[out] long *paramf, //<- Maybe in??
[out] long *paramg);


	

/*
-	0x05	DnssrvOperation2
-	0x06	DnssrvQuery2
-	0x07	DnssrvComplexOperation2
-	0x08	DnssrvEnumRecords2
-	0x09	DnssrvUpdateRecord2
*/

}


/*
// Functions extracted with "unmidl.py dns.exe"
long  Function_00( [in] [unique]  [string] wchar_t * element_1,
[in] [unique]  [string] char * element_2,
[in]  long  element_3,
[in] [unique]  [string] char * element_4,
[in]  long  element_5,
[in]  TYPE_1  element_6
 );

long  Function_01( [in] [unique]  [string] wchar_t * element_400,
[in] [unique]  [string] char * element_401,
[in] [unique]  [string] char * element_402,
[out]  long * element_403,
[out]  TYPE_1 * element_404
 );

long  Function_02( [in] [unique]  [string] wchar_t * element_406,
[in] [unique]  [string] char * element_407,
[in] [unique]  [string] char * element_408,
[in]  long  element_409,
[in]  TYPE_1  element_410,
[out]  long * element_411,
[out]  TYPE_1 * element_412
 );

long  Function_03( [in] [unique]  [string] wchar_t * element_414,
[in] [unique]  [string] char * element_415,
[in] [unique]  [string] char * element_416,
[in] [unique]  [string] char * element_417,
[in]  short  element_418,
[in]  long  element_419,
[in] [unique]  [string] char * element_420,
[in] [unique]  [string] char * element_421,
[out]  long * element_422,
[size_is(*element_422)] [out] [ref] [unique]  char ** element_423
 );

long  Function_04( [in] [unique]  [string] wchar_t * element_425,
[in] [unique]  [string] char * element_426,
[in]  [string] char *  element_427,
[in] [unique]  TYPE_34 ** element_428,
[in] [unique]  TYPE_34 ** element_436
 );

long  Function_05( [in]  long  element_438,
[in]  long  element_439,
[in] [unique]  [string] wchar_t * element_440,
[in] [unique]  [string] char * element_441,
[in]  long  element_442,
[in] [unique]  [string] char * element_443,
[in]  long  element_444,
[in]  TYPE_1  element_445
 );

long  Function_06( [in]  long  element_447,
[in]  long  element_448,
[in] [unique]  [string] wchar_t * element_449,
[in] [unique]  [string] char * element_450,
[in] [unique]  [string] char * element_451,
[out]  long * element_452,
[out]  TYPE_1 * element_453
 );

long  Function_07( [in]  long  element_455,
[in]  long  element_456,
[in] [unique]  [string] wchar_t * element_457,
[in] [unique]  [string] char * element_458,
[in] [unique]  [string] char * element_459,
[in]  long  element_460,
[in]  TYPE_1  element_461,
[out]  long * element_462,
[out]  TYPE_1 * element_463
 );

long  Function_08( [in]  long  element_465,
[in]  long  element_466,
[in] [unique]  [string] wchar_t * element_467,
[in] [unique]  [string] char * element_468,
[in] [unique]  [string] char * element_469,
[in] [unique]  [string] char * element_470,
[in]  short  element_471,
[in]  long  element_472,
[in] [unique]  [string] char * element_473,
[in] [unique]  [string] char * element_474,
[out]  long * element_475,
[size_is(*element_475)] [out] [ref] [unique]  char ** element_476
 );

long  Function_09( [in]  long  element_478,
[in]  long  element_479,
[in] [unique]  [string] wchar_t * element_480,
[in] [unique]  [string] char * element_481,
[in]  [string] char *  element_482,
[in] [unique]  TYPE_34 ** element_483,
[in] [unique]  TYPE_34 ** element_484
 );

*/