[PATCH v3 5/8] Check for LockMemoryPrivilege when creating large page mappings.

[Vibhav Pant]

From: Vibhav Pant

In create_mapping, if the caller requires that the file be backed up by large pages, ensure that
they hold the SeLockMemoryPrivilege.
---
 server/mapping.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/server/mapping.c b/server/mapping.c
index 2280360f6cd..6b239e11807 100644
--- a/server/mapping.c
+++ b/server/mapping.c
@@ -1362,6 +1362,12 @@ DECL_HANDLER(create_mapping)

if (!objattr) return;

+    if ((req->flags & SEC_LARGE_PAGES) && !thread_single_check_privilege( current, SeLockMemoryPrivilege ))
+    {
+        set_error( STATUS_PRIVILEGE_NOT_HELD );
+        return;
+    }
+
     if ((mapping = create_mapping( root, &name, objattr->attributes, req->size, req->flags,
                                    req->file_handle, req->file_access, sd )))
     {