[tfaber] 68911: [NTOS:SE] - Correctly check ACE type in SeFastTraverseCheck. CID 1102005

Author: tfaber
Date: Wed Sep  2 09:19:52 2015
New Revision: 68911

URL: http://svn.reactos.org/svn/reactos?rev=68911&view=rev
Log:
[NTOS:SE]
- Correctly check ACE type in SeFastTraverseCheck. CID 1102005

Modified:
    trunk/reactos/ntoskrnl/se/accesschk.c

Modified: trunk/reactos/ntoskrnl/se/accesschk.c
URL: http://svn.reactos.org/svn/reactos/trunk/reactos/ntoskrnl/se/accesschk.c?rev...
==============================================================================
--- trunk/reactos/ntoskrnl/se/accesschk.c	[iso-8859-1] (original)
+++ trunk/reactos/ntoskrnl/se/accesschk.c	[iso-8859-1] Wed Sep  2 09:19:52 2015
@@ -493,7 +493,7 @@
             continue;

/* If access-allowed ACE */
-        if (Ace->Header.AceType & ACCESS_ALLOWED_ACE_TYPE)
+        if (Ace->Header.AceType == ACCESS_ALLOWED_ACE_TYPE)
         {
             /* Check if all accesses are granted */
             if (!(Ace->Mask & DesiredAccess))
@@ -504,9 +504,9 @@
                 return TRUE;
         }
         /* If access-denied ACE */
-        else if (Ace->Header.AceType & ACCESS_DENIED_ACE_TYPE)
-        {
-            /* Here, only check if it denies all the access wanted and deny if so */
+        else if (Ace->Header.AceType == ACCESS_DENIED_ACE_TYPE)
+        {
+            /* Here, only check if it denies any access wanted and deny if so */
             if (Ace->Mask & DesiredAccess)
                 return FALSE;
         }