From a31b680c53e160be9e32a733928cfeb601017dc5 Mon Sep 17 00:00:00 2001
From: Aleksandar Andrejevic <aandrejevic@reactos.org>
Date: Sat, 31 May 2014 01:17:00 +0000
Subject: [PATCH] [NTOSKRNL] Don't allow saving keys which are located directly
 in the master hive.

svn path=/trunk/; revision=63508
---
 reactos/ntoskrnl/config/cmapi.c | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/reactos/ntoskrnl/config/cmapi.c b/reactos/ntoskrnl/config/cmapi.c
index e52f572b0ed..a75f0286e18 100644
--- a/reactos/ntoskrnl/config/cmapi.c
+++ b/reactos/ntoskrnl/config/cmapi.c
@@ -2307,6 +2307,13 @@ CmSaveKey(IN PCM_KEY_CONTROL_BLOCK Kcb,
         goto Cleanup;
     }
 
+    if (Kcb->KeyHive == &CmiVolatileHive->Hive)
+    {
+        /* Keys that are directly in the master hive can't be saved */
+        Status = STATUS_ACCESS_DENIED;
+        goto Cleanup;
+    }
+
     /* Create a new hive that will hold the key */
     Status = CmpInitializeHive(&KeyHive,
                                HINIT_CREATE,
-- 
2.17.1