Author: tfaber Date: Sun Jun 23 22:10:47 2013 New Revision: 59325
URL: http://svn.reactos.org/svn/reactos?rev=59325&view=rev Log: [NTOS:SE] - Fix pool corruption of the nastiest sort. Big thanks to Amine. Also thanks to MS for idiotic unsafe typedefs.
Modified: trunk/reactos/ntoskrnl/se/token.c
Modified: trunk/reactos/ntoskrnl/se/token.c URL: http://svn.reactos.org/svn/reactos/trunk/reactos/ntoskrnl/se/token.c?rev=593... ============================================================================== --- trunk/reactos/ntoskrnl/se/token.c [iso-8859-1] (original) +++ trunk/reactos/ntoskrnl/se/token.c [iso-8859-1] Sun Jun 23 22:10:47 2013 @@ -657,7 +657,7 @@ */
uLength = sizeof(SID_AND_ATTRIBUTES) * AccessToken->UserAndGroupCount; - uLength += RtlLengthSid(User); + uLength += RtlLengthSid(User->Sid); for (i = 0; i < GroupCount; i++) uLength += RtlLengthSid(Groups[i].Sid);