[NTOSKRNL]: DACL and SACL should only be returned if the control flag indicates that they are present.

svn path=/trunk/; revision=57347
This commit is contained in:
Alex Ionescu
2012-09-20 00:04:42 +00:00
parent 6081db8d41
commit 46eff17170
+4
View File
@@ -69,6 +69,8 @@ SepGetDaclFromDescriptor(PVOID _Descriptor)
PISECURITY_DESCRIPTOR Descriptor = (PISECURITY_DESCRIPTOR)_Descriptor;
PISECURITY_DESCRIPTOR_RELATIVE SdRel;
if (!(Descriptor->Control & SE_DACL_PRESENT)) return NULL;
if (Descriptor->Control & SE_SELF_RELATIVE)
{
SdRel = (PISECURITY_DESCRIPTOR_RELATIVE)Descriptor;
@@ -88,6 +90,8 @@ SepGetSaclFromDescriptor(PVOID _Descriptor)
PISECURITY_DESCRIPTOR Descriptor = (PISECURITY_DESCRIPTOR)_Descriptor;
PISECURITY_DESCRIPTOR_RELATIVE SdRel;
if (!(Descriptor->Control & SE_SACL_PRESENT)) return NULL;
if (Descriptor->Control & SE_SELF_RELATIVE)
{
SdRel = (PISECURITY_DESCRIPTOR_RELATIVE)Descriptor;