[NTOSKRNL:MM]

- Validate virtual address range on pool free
CORE-6929
CORE-6712 #resolve

svn path=/trunk/; revision=58247

diff --git a/reactos/ntoskrnl/mm/ARM3/pool.c b/reactos/ntoskrnl/mm/ARM3/pool.c
index 728949d..e8ade80 100644 (file)
--- a/reactos/ntoskrnl/mm/ARM3/pool.c
+++ b/reactos/ntoskrnl/mm/ARM3/pool.c
@@ -408,8 +408,11 @@ MmDeterminePoolType(IN PVOID PoolAddress)
     //
     // Use a simple bounds check
     //
-    return (PoolAddress >= MmPagedPoolStart) && (PoolAddress <= MmPagedPoolEnd) ?
-            PagedPool : NonPagedPool;
+    if (PoolAddress >= MmPagedPoolStart && PoolAddress <= MmPagedPoolEnd)
+        return PagedPool;
+    else if (PoolAddress >= MmNonPagedPoolStart && PoolAddress <= MmNonPagedPoolEnd)
+        return NonPagedPool;
+    KeBugCheckEx(BAD_POOL_CALLER, 0x42, (ULONG_PTR)PoolAddress, 0, 0);
 }
 
 PVOID