[ros-kernel] Possible SECURITY_DESCRIPTOR cache problem

[Filip Navara]

Filip Navara wrote:

> I have a method to reproduce such (or very similar) crash every time. 
> I'll write about it more tomorrow.

I take that back. I found out the cause of the crash I was seeing and 
it's differnet from the crash Mike had. My stack trace:

kernel32:CreateToolhelp32Snapshot
...
io/create.c:358 - IoCreateFile
ob/object.c:457 - ObCreateObject
se/semgr.c:382 - SeAssignSecurity
se/sid.c:567 - RtlLengthSid

Now if you look at CreateToolhelp32Snapshot you'll see the function is 
(ignoring the code is completely wrong) not initializing the 
OBJECT_ATTRIBUTES structure and the security descriptor pointer 
(uninitialized memory) is then passed to CreateFile -> NtCreateFile -> 
... resulting in obvious crash when accessing it.

Regards,
Filip