Fix buffer overrun in ExFreePoolWithTag when dealing with a PoolType other than NonPagedPool and PagedPool. Spotted by Amine Khaldi.

svn path=/trunk/; revision=45134
This commit is contained in:
Timo Kreuzer 2010-01-18 16:43:58 +00:00
parent 29193e1051
commit b90d243037

View file

@ -520,7 +520,7 @@ ExFreePoolWithTag(IN PVOID P,
// for this pool type
//
BlockSize = Entry->BlockSize;
PoolType = (Entry->PoolType & 3) - 1;
PoolType = (Entry->PoolType - 1) & BASE_POOL_TYPE_MASK;
PoolDesc = PoolVector[PoolType];
//