[ros-dev] [ros-diffs] [gadamopoulos] 51115: [ntoskrnl] - Implement calling OkayToCloseProcedure callouts to win32k for desktop and window station objects - Fix a bug that caused ObpCloseHandle to return success even whe...

[Olaf Siejka]

If you care about it, fix it... or just pass info how to do it.

If you dont care, why did you write that in the first place?

There is something here i do not understand.

2011/3/22 Alex Ionescu <ionucu at videotron.ca>

> It's hilarious how this new code has the exact same Windows security bug I
> gave a talk about at BlackHat 2-3 years ago (which Microsoft fixed in
> Vista).
>
> It's sad how this code ignores the exported PsSetProcessWindowStation API
> and relevant EPROCESS field.
>
> It's awesome how nothing changes whenever I prop up to see the "progress".
>
> --
> Best regards,
>  Alex Ionesc
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.reactos.org/pipermail/ros-dev/attachments/20110322/76d9e35e/attachment.htm>