From f14431ec1647492c5cd302c26b1fecd46c3edfaa Mon Sep 17 00:00:00 2001 From: Thomas Faber Date: Wed, 2 Sep 2015 09:19:52 +0000 Subject: [PATCH] [NTOS:SE] - Correctly check ACE type in SeFastTraverseCheck. CID 1102005 svn path=/trunk/; revision=68911 --- reactos/ntoskrnl/se/accesschk.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/reactos/ntoskrnl/se/accesschk.c b/reactos/ntoskrnl/se/accesschk.c index f2288aeedb3..592885974bf 100644 --- a/reactos/ntoskrnl/se/accesschk.c +++ b/reactos/ntoskrnl/se/accesschk.c @@ -493,7 +493,7 @@ SeFastTraverseCheck(IN PSECURITY_DESCRIPTOR SecurityDescriptor, continue; /* If access-allowed ACE */ - if (Ace->Header.AceType & ACCESS_ALLOWED_ACE_TYPE) + if (Ace->Header.AceType == ACCESS_ALLOWED_ACE_TYPE) { /* Check if all accesses are granted */ if (!(Ace->Mask & DesiredAccess)) @@ -504,9 +504,9 @@ SeFastTraverseCheck(IN PSECURITY_DESCRIPTOR SecurityDescriptor, return TRUE; } /* If access-denied ACE */ - else if (Ace->Header.AceType & ACCESS_DENIED_ACE_TYPE) + else if (Ace->Header.AceType == ACCESS_DENIED_ACE_TYPE) { - /* Here, only check if it denies all the access wanted and deny if so */ + /* Here, only check if it denies any access wanted and deny if so */ if (Ace->Mask & DesiredAccess) return FALSE; } -- 2.17.1