mirror of
https://github.com/ApfelTeeSaft/reactos.git
synced 2026-08-26 19:33:31 +00:00
AddControllers already disconnects the controller interrupt on its error paths but left InterruptObject pointing at the freed object. Now that DriverEntry runs Cleanup on failure (and Unload() routes through it too), that stale pointer is handed to IoDisconnectInterrupt a second time, bugchecking with BAD_POOL_HEADER. Clear InterruptObject right after disconnecting so Cleanup() skips it. CORE-20669