From 0bbcdaf47ff9d8cf77fe524893118d3d45f635a3 Mon Sep 17 00:00:00 2001
From: Sir Richard <sir_richard@svn.reactos.org>
Date: Thu, 11 Nov 2010 13:08:41 +0000
Subject: [PATCH] [NTOS]: Fix a bug in MiRemovePageByColor which caused
 corruption of the page list and could lead to crashes, re-use of freed
 memory, assuming active memory was free, etc.

svn path=/trunk/; revision=49557
---
 reactos/ntoskrnl/mm/ARM3/pfnlist.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/reactos/ntoskrnl/mm/ARM3/pfnlist.c b/reactos/ntoskrnl/mm/ARM3/pfnlist.c
index 3caf780b8c2..239b3138c34 100644
--- a/reactos/ntoskrnl/mm/ARM3/pfnlist.c
+++ b/reactos/ntoskrnl/mm/ARM3/pfnlist.c
@@ -265,7 +265,7 @@ MiRemovePageByColor(IN PFN_NUMBER PageIndex,
     else
     {
         /* Set the list head's backlink instead */
-        ListHead->Blink = OldFlink;
+        ListHead->Blink = OldBlink;
     }
     
     /* Check if the back entry is the list head */