| Previous | Next |
| WSA_QOS_EFILTERCOUNT | WSA_QOS_EFLOWCOUNT |
WSA_QOS_EOBJLENGTH
ObjectLength frames each typed object inside the byte buffer
WSA_QOS_EOBJLENGTH means a QOS_OBJECT_HDR.ObjectLength value cannot describe a complete valid object. The length must include the header and object payload, stay within the enclosing ProviderSpecific buffer, and allow the parser to locate the next object. A correct structure type with a wrong length is still unsafe to consume.
Walk the buffer using explicit byte offsets and verify that each length is at least the minimum size for its ObjectType. Detect arithmetic overflow before adding the length to the current offset. Pay particular attention to packed structures copied between 32-bit and 64-bit processes and to variable-length policy data. Do not replace the declared length with sizeof blindly when the object has trailing data.
Length invariants to verify
- ObjectLength includes QOS_OBJECT_HDR.
- Object end does not exceed WSABUF.len.
- Next object begins at the expected offset.
- Variable payload size matches its internal count.
References
- Microsoft: QOS object framing
- Microsoft: walking the ProviderSpecific buffer
- Microsoft: qos.h object structures
Looking for a different code? Search another status or error code.