Author: cgutman
Date: Mon Aug 2 21:22:34 2010
New Revision: 48422
URL: http://svn.reactos.org/svn/reactos?rev=48422&view=rev
Log:
[NTOS]: Fix kernel memory corruption when dequeuing a PnP event
Modified:
trunk/reactos/ntoskrnl/io/pnpmgr/plugplay.c
Modified: trunk/reactos/ntoskrnl/io/pnpmgr/plugplay.c
URL: http://svn.reactos.org/svn/reactos/trunk/reactos/ntoskrnl/io/pnpmgr/plugpla…
==============================================================================
--- trunk/reactos/ntoskrnl/io/pnpmgr/plugplay.c [iso-8859-1] (original)
+++ trunk/reactos/ntoskrnl/io/pnpmgr/plugplay.c [iso-8859-1] Mon Aug 2 21:22:34 2010
@@ -98,7 +98,7 @@
/* Remove a pnp event entry from the tail of the queue */
if (!IsListEmpty(&IopPnpEventQueueHead))
{
- ExFreePool(RemoveTailList(&IopPnpEventQueueHead));
+ ExFreePool(CONTAINING_RECORD(RemoveTailList(&IopPnpEventQueueHead), PNP_EVENT_ENTRY, ListEntry)));
}
/* Signal the next pnp event in the queue */