On 9/13/2013 12:16, Dmitry Timoshkov wrote:
Nikolay Sivov bunglehead@gmail.com wrote:
It looks like it belongs to kernel32/tests.
Since actual access checks are done by ntdll APIs I believe that ntdll/tests is appropriate place, kernel32 file APIs are just wrappers around the tested functionality.
It doesn't matter what it uses internally. You're testing kernel32 calls.