One more test can't hurt.
Modified: trunk/reactos/ntoskrnl/mm/anonmem.c
_____
Modified: trunk/reactos/ntoskrnl/mm/anonmem.c
--- trunk/reactos/ntoskrnl/mm/anonmem.c 2005-08-07 07:11:03 UTC (rev
17139)
+++ trunk/reactos/ntoskrnl/mm/anonmem.c 2005-08-07 07:14:52 UTC (rev
17140)
@@ -562,6 +562,13 @@
return STATUS_INVALID_PAGE_PROTECTION;
}
+ /* Check for valid Zero bits */
+ if (ZeroBits > 21)
+ {
+ DPRINT1("Too many zero bits\n");
+ return STATUS_INVALID_PARAMETER_3;
+ }
+
/* Check for valid Allocation Types */
if ((AllocationType &~ (MEM_COMMIT | MEM_RESERVE | MEM_RESET |
MEM_PHYSICAL |
MEM_TOP_DOWN | MEM_WRITE_WATCH)))