#80 Ovaldi.exe stops working - regkeyauditedpermissions_test

Version 5.6
closed-fixed
Danny Haynes
5
2009-10-12
2009-10-12
Danny Haynes
No

Ovaldi.exe stops working when evaluating a definition that contains the
win-def:regkeyauditedpermissions_test on Windows Vista.

Discussion

  • Danny Haynes
    Danny Haynes
    2009-10-12

    Ovaldi.exe would stop working because the heap would become corrupted. This would also cause Windows to trigger a breakpoint when run in debug mode. The heap would become corrupted because the PSID obtained from the WindowsCommon::GetSIDForTrusteeName() method would be freed using LocalFree() instead of free(). This was an issue because the PSID obtained from the WindowsCommon::GetSIDForTrusteeName() method was allocated using realloc().

     
  • Danny Haynes
    Danny Haynes
    2009-10-12

    • status: open --> closed-fixed