Allowed SACLs to to not have any ACE
Accept security descriptors in which the SACL is present though it does not contain any ACE. Such security descriptors have been found in Windows installation files.edge.strict_endians
parent
2223b8796c
commit
c31c7463e8
|
@ -642,7 +642,7 @@ BOOL ntfs_valid_descr(const char *securattr, unsigned int attrsz)
|
|||
&& (offdacl+sizeof(ACL) < attrsz)))
|
||||
&& (!offsacl
|
||||
|| ((offsacl >= sizeof(SECURITY_DESCRIPTOR_RELATIVE))
|
||||
&& (offsacl+sizeof(ACL) < attrsz)))
|
||||
&& (offsacl+sizeof(ACL) <= attrsz)))
|
||||
&& !(phead->owner & const_cpu_to_le32(3))
|
||||
&& !(phead->group & const_cpu_to_le32(3))
|
||||
&& !(phead->dacl & const_cpu_to_le32(3))
|
||||
|
|
Loading…
Reference in New Issue