the dce 1.0 reference implementation only allows such constructs as "size_is(len)", or possibly "size_is(len-1)". msrpc allows much more complex constructs such as "size_is(len / 2 - 1)" and even "length_is ((max & ~0x7) + 0x7)", a common expression in dcom idl files.