Re: GetTokenInformation() and FreeSid() at port/exec.c

>> At present, a specific error, crash or trouble seems not to have 
>> happened.

The reason its not crashing is that most, if not all, windows allocation 
functions know which addresses belong to them.  FreeSid is actually 
documented as returning NULL on success.  On failure it returns the 
address you tried to free.

Although the FreeSid call causes no harm because its defensive, there is 
still the issue of leaking the TOKEN_USER structure.

-- 
Andrew Chernow
eSilo, LLC
every bit counts
http://www.esilo.com/