From 91a44b438cbd96e7abe58193416595f283c02e21 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jean-Pierre=20Andr=C3=A9?= Date: Fri, 20 Sep 2013 16:14:55 +0200 Subject: [PATCH] Allowed DACLs to to not have any ACE Windows server 2012 apparently uses files with no ACEs in their DACL, thus denying any access to any process except system backup. Such DACLs should however be considered valid. --- libntfs-3g/acls.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libntfs-3g/acls.c b/libntfs-3g/acls.c index 7d162105..e7623102 100644 --- a/libntfs-3g/acls.c +++ b/libntfs-3g/acls.c @@ -639,7 +639,7 @@ BOOL ntfs_valid_descr(const char *securattr, unsigned int attrsz) && ((offgroup + 2) < attrsz) && (!offdacl || ((offdacl >= sizeof(SECURITY_DESCRIPTOR_RELATIVE)) - && (offdacl+sizeof(ACL) < attrsz))) + && (offdacl+sizeof(ACL) <= attrsz))) && (!offsacl || ((offsacl >= sizeof(SECURITY_DESCRIPTOR_RELATIVE)) && (offsacl+sizeof(ACL) <= attrsz)))