4.3.1 Client Request Buffer

A complete ROP request buffer in this example would appear as follows.

 0000: 41 00 00 00 01 00 04 01-00 14 00 74 66 01 00 00
 0010: 00 01 3f f8 56

The first 6 bytes refer to the RopId, LogonId, InputHandleIndex, ModifyRulesFlags, and RulesCount fields of the RopModifyRules format ([MS-OXCROPS] section 2.2.11.1) as described in section 2.2.1.

  
 0000: 41 00 00 00 01 00

RopId: 0x41 (RopModifyRules)

LogonId: 0x00

InputHandleIndex: 0x00

ModifyRulesFlags: 0x00

RulesCount: 0x0001

The first and only RuleData structure for this request begins at byte 0x0006. The next 3 bytes are the RuleDataFlags and PropertyValueCount fields:

  
 0006: 04 01 00

RuleDataFlags: 0x04 (ROW_REMOVE)

PropertyValueCount: x0001

The only TaggedPropertyValue begins at byte 0x0009. It is summarized below. For more information on property packing, see [MS-OXCDATA].

  
 0009: 14 00 74 66 01 00 00 00-01 3f f8 56

PropertyTag: 0x66740014 (PidTagRuleId (section 2.2.7.8))

PropertyValue: 0x56F83F0100000001

Show: