[NTOSKRNL] Properly delete VACB in CcRosCreateVacb() when mapping fails.

Spotted by Thomas.

CORE-14478
CORE-14502

diff --git a/ntoskrnl/cc/view.c b/ntoskrnl/cc/view.c
index 9cc45bd..ba87c5e 100644 (file)
--- a/ntoskrnl/cc/view.c
+++ b/ntoskrnl/cc/view.c
@@ -831,18 +831,20 @@ CcRosCreateVacb (
     }
 #endif
 
+    /* Reference it to allow release */
+    CcRosVacbIncRefCount(current);
+
     Status = CcRosMapVacbInKernelSpace(current);
     if (!NT_SUCCESS(Status))
     {
         RemoveEntryList(&current->CacheMapVacbListEntry);
         RemoveEntryList(&current->VacbLruListEntry);
-        CcRosReleaseVacbLock(current);
+        CcRosReleaseVacb(SharedCacheMap, current, FALSE,
+                         FALSE, FALSE);
+        CcRosVacbDecRefCount(current);
         ExFreeToNPagedLookasideList(&VacbLookasideList, current);
     }
 
-    /* Reference it to allow release */
-    CcRosVacbIncRefCount(current);
-
     return Status;
 }