[ros-diffs] [tfaber] 68911: [NTOS:SE] - Correctly check ACE type in SeFastTraverseCheck. CID 1102005

[tfaber]

Author: tfaber
Date: Wed Sep  2 09:19:52 2015
New Revision: 68911

URL: http://svn.reactos.org/svn/reactos?rev=68911&view=rev
Log:
[NTOS:SE]
- Correctly check ACE type in SeFastTraverseCheck. CID 1102005

Modified:
    trunk/reactos/ntoskrnl/se/accesschk.c

Modified: trunk/reactos/ntoskrnl/se/accesschk.c
URL: 
http://svn.reactos.org/svn/reactos/trunk/reactos/ntoskrnl/se/accesschk.c?rev=68911&r1=68910&r2=68911&view=diff
==============================================================================
--- trunk/reactos/ntoskrnl/se/accesschk.c       [iso-8859-1] (original)
+++ trunk/reactos/ntoskrnl/se/accesschk.c       [iso-8859-1] Wed Sep  2 
09:19:52 2015
@@ -493,7 +493,7 @@
             continue;
 
         /* If access-allowed ACE */
-        if (Ace->Header.AceType & ACCESS_ALLOWED_ACE_TYPE)
+        if (Ace->Header.AceType == ACCESS_ALLOWED_ACE_TYPE)
         {
             /* Check if all accesses are granted */
             if (!(Ace->Mask & DesiredAccess))
@@ -504,9 +504,9 @@
                 return TRUE;
         }
         /* If access-denied ACE */
-        else if (Ace->Header.AceType & ACCESS_DENIED_ACE_TYPE)
-        {
-            /* Here, only check if it denies all the access wanted and deny if 
so */
+        else if (Ace->Header.AceType == ACCESS_DENIED_ACE_TYPE)
+        {
+            /* Here, only check if it denies any access wanted and deny if so 
*/
             if (Ace->Mask & DesiredAccess)
                 return FALSE;
         }