[NTOSKRNL] Only allow SYSTEM to call NtSetUuidSeed()
authorPierre Schweitzer <pierre@reactos.org>
Tue, 18 Dec 2018 22:08:19 +0000 (23:08 +0100)
committerPierre Schweitzer <pierre@reactos.org>
Tue, 18 Dec 2018 22:12:41 +0000 (23:12 +0100)
commit6ca1c55c6e849cd1430a47cf866527b89bcc2ddf
tree6edae42994d54cf539b9addf389bf7c8e62a7b4b
parent36c1b87a0bf9befdf662ac1f8e7f08b7d89748de
[NTOSKRNL] Only allow SYSTEM to call NtSetUuidSeed()

Also, validate input buffer before attempting any operation on it.
This will avoid userland applications to be able to trigger an invalid
read in the kernel (and thus a BSOD).

Regarding access restriction, see:
https://stackoverflow.com/questions/1254244/need-access-to-ntsetuuidseed-from-a-non-localsystem-process

CORE-15460
ntoskrnl/ex/uuid.c