Hi,
[MS-SMB2] 3.3.5.20.3 Handling SMB2_0_INFO_SECURITY specify:
If the OutputBufferLength given in the client request is either zero or is insufficient to hold the information requested, the server MUST fail the request with STATUS_BUFFER_TOO_SMALL.
If Connection.Dialect is "3.1.1", [..]; otherwise, the server MUST return error data with ByteCount set to 2 and ErrorData set to a 4-byte value indicating the minimum required buffer length.
I've captured packets of a session between Windows 7 SP1 and Windows Server 2008 SP1. Windows Server 2008 SP1 set ByteCount to 4 which makes much more sense since this is a 4-byte value, could this be a typo in MS-SMB2?
sending packet capture to dochelp (at) microsoft.com