Allowed SACLs to to not have any ACE

Accept security descriptors in which the SACL is present though it does not
contain any ACE. Such security descriptors have been found in Windows
installation files.
edge.strict_endians
Jean-Pierre André 2012-09-12 09:36:21 +02:00
parent 2223b8796c
commit c31c7463e8
1 changed files with 1 additions and 1 deletions

View File

@ -642,7 +642,7 @@ BOOL ntfs_valid_descr(const char *securattr, unsigned int attrsz)
&& (offdacl+sizeof(ACL) < attrsz)))
&& (!offsacl
|| ((offsacl >= sizeof(SECURITY_DESCRIPTOR_RELATIVE))
&& (offsacl+sizeof(ACL) < attrsz)))
&& (offsacl+sizeof(ACL) <= attrsz)))
&& !(phead->owner & const_cpu_to_le32(3))
&& !(phead->group & const_cpu_to_le32(3))
&& !(phead->dacl & const_cpu_to_le32(3))