[SDK:RTL] Fix the ACE revision check in RtlpAddKnownObjectAce

Object ACEs are supported starting from Revision 4, the current code checks
if the revision is above Revision 4. An Object ACE has to be strictly set on that revision,
whereas Object ACLs can be of any revision starting from ACL_REVISION4.
This commit is contained in:
George Bișoc 2023-07-05 20:31:23 +02:00 committed by unknown
parent c175c4f47d
commit cad780e17c
No known key found for this signature in database
GPG key ID: 688C4FBE25D7DEF6

View file

@ -173,7 +173,7 @@ RtlpAddKnownObjectAce(IN PACL Acl,
if (!RtlValidSid(Sid)) return STATUS_INVALID_SID;
/* Check the validity of the revision */
if ((Acl->AclRevision > ACL_REVISION4) || (Revision > ACL_REVISION4))
if ((Acl->AclRevision > ACL_REVISION4) || (Revision != ACL_REVISION4))
{
return STATUS_REVISION_MISMATCH;
}