Windows Driver: Protect captured subject context during processing of user access token.

This commit is contained in:
Mounir IDRASSI committed 2015-08-31 00:30:56 +02:00
1 parent 2f2cb6b7ae
commit dc6c279339
1 file changed
+2
+2
View File
@@ -2653,6 +2653,7 @@ NTSTATUS MountDevice (PDEVICE_OBJECT DeviceObject, MOUNT_STRUCT *mount)
PACCESS_TOKEN accessToken; PACCESS_TOKEN accessToken;
SeCaptureSubjectContext (&subContext); SeCaptureSubjectContext (&subContext);
SeLockSubjectContext(&subContext);
accessToken = SeQuerySubjectContextToken (&subContext); accessToken = SeQuerySubjectContextToken (&subContext);
if (!accessToken) if (!accessToken)
@@ -2678,6 +2679,7 @@ NTSTATUS MountDevice (PDEVICE_OBJECT DeviceObject, MOUNT_STRUCT *mount)
} }
} }
SeUnlockSubjectContext(&subContext);
SeReleaseSubjectContext (&subContext); SeReleaseSubjectContext (&subContext);
if (NT_SUCCESS (ntStatus)) if (NT_SUCCESS (ntStatus))