https://git.reactos.org/?p=reactos.git;a=commitdiff;h=c869c4778d2d3df26ce15f821fff181c7be42eb9
commit c869c4778d2d3df26ce15f821fff181c7be42eb9 Author: George Bișoc <[email protected]> AuthorDate: Sat Jul 3 17:20:48 2021 +0200 Commit: George Bișoc <[email protected]> CommitDate: Sat Jul 3 17:20:48 2021 +0200 [NTOS:SE] Assign the control flag bits to the newly created security descriptor We allocate memory pool for a new security descriptor with specific info filled by the caller but we don't set the control flag bits for the newly allocated descriptor, which is wrong. Originally spotted by Vadim Galyant. CORE-17650 --- ntoskrnl/se/sd.c | 1 + 1 file changed, 1 insertion(+) diff --git a/ntoskrnl/se/sd.c b/ntoskrnl/se/sd.c index dca0db419ff..8ede6fbf4ea 100644 --- a/ntoskrnl/se/sd.c +++ b/ntoskrnl/se/sd.c @@ -962,6 +962,7 @@ SeSetSecurityDescriptorInfoEx( Current += SaclLength; } + NewSd->Control |= Control; *ObjectsSecurityDescriptor = NewSd; return STATUS_SUCCESS; }
