From dae4714960ba5c7156caf5a7d0b841041ddab98f Mon Sep 17 00:00:00 2001
From: Sir Richard <sir_richard@svn.reactos.org>
Date: Tue, 2 Nov 2010 14:58:10 +0000
Subject: [PATCH] [NTOS]: Fix a bug in the MDL Code which would dereference a
 completely bogus page frame index.

svn path=/trunk/; revision=49440
---
 reactos/ntoskrnl/mm/ARM3/mdlsup.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/reactos/ntoskrnl/mm/ARM3/mdlsup.c b/reactos/ntoskrnl/mm/ARM3/mdlsup.c
index 6d63db132b7..b3449a366dc 100644
--- a/reactos/ntoskrnl/mm/ARM3/mdlsup.c
+++ b/reactos/ntoskrnl/mm/ARM3/mdlsup.c
@@ -1343,7 +1343,7 @@ MmUnlockPages(IN PMDL Mdl)
             InterlockedExchangeAddSizeT(&MmSystemLockPagesCount, -1);
             
             /* Do the last dereference, we're done here */
-            MiDecrementReferenceCount(Pfn1, *MdlPages);
+            MiDecrementReferenceCount(Pfn1, MiGetPfnEntryIndex(Pfn1));
         }
         else
         {