Author: cgutman Date: Mon Aug 2 21:22:34 2010 New Revision: 48422
URL: http://svn.reactos.org/svn/reactos?rev=48422&view=rev Log: [NTOS]: Fix kernel memory corruption when dequeuing a PnP event
Modified: trunk/reactos/ntoskrnl/io/pnpmgr/plugplay.c
Modified: trunk/reactos/ntoskrnl/io/pnpmgr/plugplay.c URL: http://svn.reactos.org/svn/reactos/trunk/reactos/ntoskrnl/io/pnpmgr/plugplay... ============================================================================== --- trunk/reactos/ntoskrnl/io/pnpmgr/plugplay.c [iso-8859-1] (original) +++ trunk/reactos/ntoskrnl/io/pnpmgr/plugplay.c [iso-8859-1] Mon Aug 2 21:22:34 2010 @@ -98,7 +98,7 @@ /* Remove a pnp event entry from the tail of the queue */ if (!IsListEmpty(&IopPnpEventQueueHead)) { - ExFreePool(RemoveTailList(&IopPnpEventQueueHead)); + ExFreePool(CONTAINING_RECORD(RemoveTailList(&IopPnpEventQueueHead), PNP_EVENT_ENTRY, ListEntry))); }
/* Signal the next pnp event in the queue */