[reactos] 01/01: [NTOS:SE] Assign the control flag bits to the newly created security descriptor

[George Bișoc]

https://git.reactos.org/?p=reactos.git;a=commitdiff;h=c869c4778d2d3df26ce15…

commit c869c4778d2d3df26ce15f821fff181c7be42eb9
Author:     George Bișoc <george.bisoc(a)reactos.org>
AuthorDate: Sat Jul 3 17:20:48 2021 +0200
Commit:     George Bișoc <george.bisoc(a)reactos.org>
CommitDate: Sat Jul 3 17:20:48 2021 +0200

    [NTOS:SE] Assign the control flag bits to the newly created security descriptor
    
    We allocate memory pool for a new security descriptor with specific info filled by the
caller but we don't set the control flag bits for the newly allocated descriptor,
which is wrong. Originally spotted by Vadim Galyant.
    CORE-17650
---
 ntoskrnl/se/sd.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ntoskrnl/se/sd.c b/ntoskrnl/se/sd.c
index dca0db419ff..8ede6fbf4ea 100644
--- a/ntoskrnl/se/sd.c
+++ b/ntoskrnl/se/sd.c
@@ -962,6 +962,7 @@ SeSetSecurityDescriptorInfoEx(
         Current += SaclLength;
     }
 
+    NewSd->Control |= Control;
     *ObjectsSecurityDescriptor = NewSd;
     return STATUS_SUCCESS;
 }