[ros-kernel] Possible SECURITY_DESCRIPTOR cache problem

[Eric Kohl]

"Mike Nordell" <tamlin at algonet.se> wrote:


> I've experienced intermittent crashes at startup in
> RtlLengthSecurityDescriptor, coming from ObpCompareSecurityDescriptors,
> ObpAddSecurityDescriptor, ObCreateObject ...
>
> >From what I can see, the problem is Sd, second argument to the call to
> ObpCompareSecurityDescriptors; line 242 of sdcache.c. It is flagged as
> SE_SELF_RELATIVE, but the memory at address
> "(ULONG)Owner + (ULONG)SecurityDescriptor" (in
RtlLengthSecurityDescriptor)
> is not valid.

I haven't seen such crashes yet. Can you reproduce the crashes?


> I could speculate in a couple of reasons this might be, but I'd prefer the
> SD cache author to pipe in. Could it be an entry in the cache that is
> changed, or even deleted, outside the cache's knowledge?

Yes, that's possible because the cache entries are not write-protected.


Regards,
Eric