Fix some more lenghts.

[rdpsrv] / mcs.c

diff --git a/mcs.c b/mcs.c
index 10469d860b39a7c7b5c9ad06650e4613d211b279..ce10a6874113b3dfb14bf3fdc5e4c8653102250f 100644 (file)
--- a/mcs.c
+++ b/mcs.c
@@ -282,8 +282,8 @@ mcs_send_connect_response()
        length = 184;
        
        // two bytes of length
-       out_uint8(s, 0x80 | (length >> 7));
-       out_uint8(s, length & 0x7f);
+       out_uint8(s, 0x80 | (length >> 8));
+       out_uint8(s, length & 0xff);
 
        // server info -- we claim to support RDP5
        out_uint16_le(s, SEC_TAG_SRV_INFO);
@@ -304,21 +304,23 @@ mcs_send_connect_response()
        // crypto info
        out_uint16_le(s, SEC_TAG_SRV_CRYPT);
        out_uint16_le(s, 160); // length
-       out_uint32_le(s, 1); // 40-bit
-       out_uint32_le(s, 1); // low
+       out_uint32_le(s, 2); // 128-bit
+       out_uint32_le(s, 3); // high
 
        out_uint32_le(s, SEC_RANDOM_SIZE); // random_len
-       out_uint32_le(s, 96);             // rsa_info_len
+       out_uint32_le(s, 108);             // rsa_info_len
        out_uint8s(s, SEC_RANDOM_SIZE);    // server_random
        out_uint32_le(s, 1);               // RDP4-style
-       out_uint8s(s, 8);                  // unknown
+       // unknown
+       out_uint32_le(s, 1);            
+       out_uint32_le(s, 1);
 
        out_uint16_le(s, SEC_TAG_PUBKEY);
-       out_uint16_le(s, 88);
+       out_uint16_le(s, 92);
        out_uint32_le(s, SEC_RSA_MAGIC);
        out_uint32_le(s, SEC_MODULUS_SIZE + SEC_PADDING_SIZE);  // modulus_len
        out_uint32_le(s, SEC_MODULUS_SIZE * 8);                 // modulus_bits
-       out_uint8s(s, 4);                                       // unknown
+       out_uint32_le(s, 0x3f);                                 // unknown
        out_uint8p(s, my_exponent, SEC_EXPONENT_SIZE);
        out_uint8p(s, my_modulus, SEC_MODULUS_SIZE);
        out_uint8s(s, SEC_PADDING_SIZE);