Certain IDL constructs are marshaled and unmarshaled incorrectly by RPC

• The remote call fails, and an RPC_X_BAD_STUB_DATA error code is returned by the Visual Basic program.
• Incorrect data is unmarshaled.

• Microsoft Windows XP (original version) and Windows XP Service Pack 1 (SP1) installations that include the MS03-039 security update. This update is documented in the following Microsoft Knowledge Base article:
  824146� MS03-039: A buffer overrun in RPCSS could allow an attacker to run malicious programs
• Microsoft Windows 2000
• Microsoft Windows NT 4.0
• Microsoft Windows 98

• The IDL file uses a structure that contains an 8-byte field that uses any one of the following types:
  DATE
  Double
  CY
  VARIANT
  DECIMAL
  INT64/UINT64
• The 8-byte field is a non-first field, and there is a field that is 4 bytes or smaller before the 8-byte field that is contained in the same structure.

Public Type myType

member1 As Long

member2 As Double

End Type

Hotfix information for Windows Server 2003

1. Do one of the following:
   • Install the latest service pack for Windows Server 2003. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
     889100� How to obtain the latest service pack for Windows Server 2003
   • Install the security update that is described in security bulletin MS05-051. For more information about security bulletin MS05-051, click the following article number to view the article in the Microsoft Knowledge Base:
     902400� MS05-051: Vulnerabilities in MS DTC and COM+ could allow remote code execution
2. Add the UDTAlignmentPolicy registry entry. To do this, follow these steps:
   
   Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.
   1. Click Start, click Run, in the Open box, type regedit, and then click OK.
   2. Locate the following registry subkey:
      HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc
   3. On the Edit menu, point to New, and then click DWORD value.
   4. Type UDTAlignmentPolicy, and then press ENTER.
   5. Double-click UDTAlignmentPolicy, and then type a value to determine the data format that RPC will use based on the following information:
      
      If the UDTAlignmentPolicy value is set to 0, RPC will marshal by using the "old" incorrect data format. RPC will communicate with versions of Windows that incorrectly marshal and unmarshal IDL constructs. For example, RPC will communicate with Windows 2000 or Windows XP SP1 installations that include the MS03-039 update.
      
      If the UDTAlignmentPolicy value is set to 0, RPC can communicate with Windows 2000-based computers.
      
      If the UDTAlignmentPolicy value is set to 1, RPC will marshal by using the "new" correct wire format. RPC will communicate with versions of Windows that correctly marshal and unmarshal IDL constructs. For example, RPC will communicate with Windows Server 2003 or Windows XP installations that include the MS03-026 update.
      
      If the UDTAlignmentPolicy entry does not exist, the remote call will fail, and RPC will return an RPC_X_BAD_STUB_DATA error code when RPC tries to marshal or unmarshal affected types.
      
      Important When the UDTAlignmentPolicy value is set to 0, your Windows Server 2003-based computer can exchange data for the IDL construct with versions of Windows that incorrectly marshal and unmarshal IDL constructs. However, the IDL construct is unmarshaled to the incorrect format. Using incorrect marshaling and unmarshaling code may prevent the interoperability of this same IDL construct and other IDL constructs when programs communicate with computers that run versions of Windows that correctly marshal and unmarshal IDL constructs.

Service pack information for Windows XP

Hotfix information for Windows XP

• Microsoft Windows Server 2003 and later versions
• Microsoft Windows XP Service Pack 1 (SP1) installations that include the MS03-026 update but do not include the MS03-039 security update. The MS03-026 update is documented in the following Microsoft Knowledge Base article:
  823980� MS03-026: Buffer overrun in RPC interface may allow code execution
• Microsoft Windows XP Service Pack 2 (SP2)