From baeb2951340c80b0bb2d18ba0af0891c55f820f4 Mon Sep 17 00:00:00 2001
From: Eric Kohl <eric.kohl@reactos.org>
Date: Wed, 31 Mar 2010 21:02:38 +0000
Subject: [PATCH] [NTORKRNL] SepAccessCheck: Deny access if the DACL is is
 empty (but not NULL).

svn path=/trunk/; revision=46629
---
 reactos/ntoskrnl/se/semgr.c | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/reactos/ntoskrnl/se/semgr.c b/reactos/ntoskrnl/se/semgr.c
index 6885cb7d4b8..d06fb04bbb6 100644
--- a/reactos/ntoskrnl/se/semgr.c
+++ b/reactos/ntoskrnl/se/semgr.c
@@ -457,6 +457,14 @@ SepAccessCheck(IN PSECURITY_DESCRIPTOR SecurityDescriptor,
         }
     }
 
+    /* Deny access if the DACL is empty */
+    if (Dacl->AceCount == 0)
+    {
+        *GrantedAccess = 0;
+        *AccessStatus = STATUS_ACCESS_DENIED;
+        return FALSE;
+    }
+
     /* RULE 3: Check whether the token is the owner */
     Status = RtlGetOwnerSecurityDescriptor(SecurityDescriptor,
                                            &Sid,