ApfelTeeSaft/reactos
1
0
Fork 0
mirror of https://github.com/ApfelTeeSaft/reactos.git synced 2026-08-27 03:43:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

[NTORKRNL]

Browse Source 
SepAccessCheck: Deny access if the DACL is is empty (but not NULL).

svn path=/trunk/; revision=46629
This commit is contained in:
Eric Kohl
2010-03-31 21:02:38 +00:00
parent 9e478e990f
commit baeb295134
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
reactos/ntoskrnl/se/semgr.c
+8
View File
@@ -457,6 +457,14 @@ SepAccessCheck(IN PSECURITY_DESCRIPTOR SecurityDescriptor,
}
}
/* Deny access if the DACL is empty */
if (Dacl->AceCount == 0)
{
*GrantedAccess = 0;
*AccessStatus = STATUS_ACCESS_DENIED;
return FALSE;
}
/* RULE 3: Check whether the token is the owner */
Status = RtlGetOwnerSecurityDescriptor(SecurityDescriptor,
&Sid,