One more test can't hurt.

svn path=/trunk/; revision=17140

diff --git a/reactos/ntoskrnl/mm/anonmem.c b/reactos/ntoskrnl/mm/anonmem.c
index 6d21202..93bae50 100644 (file)
--- a/reactos/ntoskrnl/mm/anonmem.c
+++ b/reactos/ntoskrnl/mm/anonmem.c
@@ -562,6 +562,13 @@ NtAllocateVirtualMemory(IN HANDLE ProcessHandle,
       return STATUS_INVALID_PAGE_PROTECTION;
    }
 
+   /* Check for valid Zero bits */
+   if (ZeroBits > 21)
+   {
+      DPRINT1("Too many zero bits\n");
+      return STATUS_INVALID_PARAMETER_3;
+   }
+
    /* Check for valid Allocation Types */
    if ((AllocationType &~ (MEM_COMMIT | MEM_RESERVE | MEM_RESET | MEM_PHYSICAL |
                            MEM_TOP_DOWN | MEM_WRITE_WATCH)))