reactos/ntoskrnl/se
Hermès Bélusca-Maïto 3370652dfc
[NTOS:SE] Fix locking in SepDuplicateToken() and SepPerformTokenFiltering() (#4523)
Shared locking must be used on the source token as it is accessed for
reading only. This fixes in particular the kmtest SeTokenFiltering that
would hang otherwise on a (wrong) exclusive locking.

- SepPerformTokenFiltering(): Always shared-lock the source token.
  Its callers (NtFilterToken and SeFilterToken) just need to sanitize and
  put the parameters in correct form before calling this helper function.

- Sync comments in NtFilterToken() with SeFilterToken().
2022-05-23 19:30:35 +02:00
..
access.c [NTOS:SE] Enable support for principal and restricted SIDs 2022-05-06 10:09:53 +02:00
accesschk.c [NTOS:SE] Deny access to the caller if access is not allowed by the object 2022-05-06 10:09:53 +02:00
acl.c [NTOS:SE] SepCaptureAcl(): Add missing validation of the captured ACL (#4523) 2022-05-23 19:30:34 +02:00
audit.c [FORMATTING] Remove trailing whitespace. Addendum to 34593d93. 2021-09-13 03:52:22 +02:00
priv.c [NTOS:SE] Assign the captured SID and/or privileges to NULL manually on token filtering 2022-02-10 09:51:58 +01:00
sd.c [NTOS:SE] SeValidSecurityDescriptor(): Add missing validation aspects (#4523) 2022-05-23 19:30:33 +02:00
semgr.c [FORMATTING] Remove trailing whitespace. Addendum to 34593d93. 2021-09-13 03:52:22 +02:00
sid.c [NTOS:SE] Implement SepGetSidFromAce 2022-05-06 10:09:53 +02:00
sqos.c [FORMATTING] Remove trailing whitespace. Addendum to 34593d93. 2021-09-13 03:52:22 +02:00
srm.c [FORMATTING] Remove trailing whitespace. Addendum to 34593d93. 2021-09-13 03:52:22 +02:00
token.c [NTOS:SE] Fix locking in SepDuplicateToken() and SepPerformTokenFiltering() (#4523) 2022-05-23 19:30:35 +02:00