mirror of
https://github.com/reactos/reactos.git
synced 2024-12-28 18:15:11 +00:00
Relax restriction on the segment in NtSetLdtEntries(). Look into diff for details. Thanks to Myria for providing information.
There were no reasons found which can proof that this change could lead to security issues. svn path=/trunk/; revision=23509
This commit is contained in:
parent
4a57b7984a
commit
f792bc36a0
1 changed files with 14 additions and 2 deletions
|
@ -58,8 +58,20 @@ BOOL PspIsDescriptorValid(PLDT_ENTRY ldt_entry)
|
|||
SegLimit=(SegLimit << 12) | 0xfff;
|
||||
}
|
||||
|
||||
return ((Base + SegLimit > (ULONG) MmHighestUserAddress) ||
|
||||
(Base > Base+SegLimit) ? FALSE : TRUE);
|
||||
if ((Base + SegLimit > (ULONG_PTR) MmHighestUserAddress) ||
|
||||
(Base > Base+SegLimit))
|
||||
{
|
||||
DPRINT1("WARNING: Windows would mark this descriptor invalid!");
|
||||
}
|
||||
|
||||
/*
|
||||
Certain "DOS32" programs expect to be able to create DPMI selectors
|
||||
that wrap the address space. Windows NT does not allow user-created
|
||||
selectors to reach into kernel memory. However, there is no security
|
||||
risk in allowing it; the page table will prevent access anyway.
|
||||
*/
|
||||
return (/*(Base + SegLimit > (ULONG_PTR) MmHighestUserAddress) ||
|
||||
(Base > Base+SegLimit) ? FALSE : TRUE*/ TRUE);
|
||||
}
|
||||
|
||||
NTSTATUS STDCALL
|
||||
|
|
Loading…
Reference in a new issue