2.2.3.1.1.5.1 RopFastTransferSourceGetBuffer ROP Request Buffer

The following descriptions define valid fields for the request buffer of the RopFastTransferSourceGetBuffer ROP ([MS-OXCROPS] section 2.2.12.4).

InputServerObject: The value of this field MUST be the download context.

BufferSize (2 bytes): An unsigned 16-bit integer. This field specifies the maximum amount of data (in bytes) to be output in by the TransferBuffer field. For more details, see sections 3.3.5.7.1 and 3.2.5.8.1.5.

MaximumBufferSize (2 bytes, optional): An unsigned 16-bit integer that specifies the maximum size limit when the server determines the buffer size. This value MUST be present if and only if the value of the BufferSize field is set to a sentinel value of 0xBABE.