From df8a63e9182d3972b8bef49a8321f3d816c053b4 Mon Sep 17 00:00:00 2001
From: hakril <project@hakril.net>
Date: Mon, 5 May 2025 11:28:21 +0200
Subject: [PATCH] Fix bug in rpc client response view parsing in 32b process

---
 windows/rpc/client.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/windows/rpc/client.py b/windows/rpc/client.py
index 263b924..03e1741 100644
--- a/windows/rpc/client.py
+++ b/windows/rpc/client.py
@@ -220,7 +220,7 @@ class RPCClient(object):
             data = response.data[ctypes.sizeof(ALPC_RPC_RESPONSE):]
         else:
             # Response in view M extract size from PORT_MESSAGE & read data from view
-            assert response.port_message.u1.s1.TotalLength >= 0x48 # At least 0x20 of data
+            assert response.port_message.u1.s1.DataLength >= ctypes.sizeof(ALPC_RPC_RESPONSE) # 0x20
             rpcdatasize = struct.unpack("<I", response.data[0x18:0x1c])[0] # ctypes.sizeof(ALPC_RPC_RESPONSE)
             viewattr = response.view_attribute
             assert viewattr.ViewSize >= rpcdatasize