dlls/ntdll/sec.c

   1 /*
   2  *      Security functions
   3  *
   4  *      Copyright 1996-1998 Marcus Meissner
   5  *      Copyright 2003 CodeWeavers Inc. (Ulrich Czekalla)
   6  *
   7  * This library is free software; you can redistribute it and/or
   8  * modify it under the terms of the GNU Lesser General Public
   9  * License as published by the Free Software Foundation; either
  10  * version 2.1 of the License, or (at your option) any later version.
  11  *
  12  * This library is distributed in the hope that it will be useful,
  13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  15  * Lesser General Public License for more details.
  16  *
  17  * You should have received a copy of the GNU Lesser General Public
  18  * License along with this library; if not, write to the Free Software
  19  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  20  */
  21
  22 #include "config.h"
  23 #include "wine/port.h"
  24
  25 #include <stdarg.h>
  26 #include <stdlib.h>
  27 #include <string.h>
  28 #include <time.h>
  29 #include <ctype.h>
  30 #include <math.h>
  31 #ifdef HAVE_UNISTD_H
  32 # include <unistd.h>
  33 #endif
  34
  35 #include "ntstatus.h"
  36 #define WIN32_NO_STATUS
  37 #include "windef.h"
  38 #include "ntdll_misc.h"
  39 #include "wine/exception.h"
  40 #include "wine/library.h"
  41 #include "wine/unicode.h"
  42 #include "wine/debug.h"
  43
  44 WINE_DEFAULT_DEBUG_CHANNEL(ntdll);
  45
  46 #define NT_SUCCESS(status) (status == STATUS_SUCCESS)
  47
  48 #define SELF_RELATIVE_FIELD(sd,field) ((BYTE *)(sd) + ((SECURITY_DESCRIPTOR_RELATIVE *)(sd))->field)
  49
  50 /* helper function to retrieve active length of an ACL */
  51 static size_t acl_bytesInUse(PACL pAcl)
  52 {
  53     int i;
  54     size_t bytesInUse = sizeof(ACL);
  55     PACE_HEADER ace = (PACE_HEADER) (pAcl + 1);
  56     for (i = 0; i < pAcl->AceCount; i++)
  57     {
  58         bytesInUse += ace->AceSize;
  59         ace = (PACE_HEADER)(((BYTE*)ace)+ace->AceSize);
  60     }
  61     return bytesInUse;
  62 }
  63
  64 /* helper function to copy an ACL */
  65 static BOOLEAN copy_acl(DWORD nDestinationAclLength, PACL pDestinationAcl, PACL pSourceAcl)
  66 {
  67     DWORD size;
  68
  69     if (!pSourceAcl || !RtlValidAcl(pSourceAcl))
  70         return FALSE;
  71
  72     size = pSourceAcl->AclSize;
  73     if (nDestinationAclLength < size)
  74         return FALSE;
  75
  76     memmove(pDestinationAcl, pSourceAcl, size);
  77     return TRUE;
  78 }
  79
  80 /* generically adds an ACE to an ACL */
  81 static NTSTATUS add_access_ace(PACL pAcl, DWORD dwAceRevision, DWORD dwAceFlags,
  82                                DWORD dwAccessMask, PSID pSid, DWORD dwAceType)
  83 {
  84     ACE_HEADER *pAceHeader;
  85     DWORD dwLengthSid;
  86     DWORD dwAceSize;
  87     DWORD *pAccessMask;
  88     DWORD *pSidStart;
  89
  90     if (!RtlValidSid(pSid))
  91         return STATUS_INVALID_SID;
  92
  93     if (pAcl->AclRevision > MAX_ACL_REVISION || dwAceRevision > MAX_ACL_REVISION)
  94         return STATUS_REVISION_MISMATCH;
  95
  96     if (!RtlValidAcl(pAcl))
  97         return STATUS_INVALID_ACL;
  98
  99     if (!RtlFirstFreeAce(pAcl, &pAceHeader))
 100         return STATUS_INVALID_ACL;
 101
 102     if (!pAceHeader)
 103         return STATUS_ALLOTTED_SPACE_EXCEEDED;
 104
 105     /* calculate generic size of the ACE */
 106     dwLengthSid = RtlLengthSid(pSid);
 107     dwAceSize = sizeof(ACE_HEADER) + sizeof(DWORD) + dwLengthSid;
 108     if ((char *)pAceHeader + dwAceSize > (char *)pAcl + pAcl->AclSize)
 109         return STATUS_ALLOTTED_SPACE_EXCEEDED;
 110
 111     /* fill the new ACE */
 112     pAceHeader->AceType = dwAceType;
 113     pAceHeader->AceFlags = dwAceFlags;
 114     pAceHeader->AceSize = dwAceSize;
 115
 116     /* skip past the ACE_HEADER of the ACE */
 117     pAccessMask = (DWORD *)(pAceHeader + 1);
 118     *pAccessMask = dwAccessMask;
 119
 120     /* skip past ACE->Mask */
 121     pSidStart = pAccessMask + 1;
 122     RtlCopySid(dwLengthSid, pSidStart, pSid);
 123
 124     pAcl->AclRevision = max(pAcl->AclRevision, dwAceRevision);
 125     pAcl->AceCount++;
 126
 127     return STATUS_SUCCESS;
 128 }
 129
 130 /*
 131  *      SID FUNCTIONS
 132  */
 133
 134 /******************************************************************************
 135  *  RtlAllocateAndInitializeSid         [NTDLL.@]
 136  *
 137  */
 138 NTSTATUS WINAPI RtlAllocateAndInitializeSid (
 139         PSID_IDENTIFIER_AUTHORITY pIdentifierAuthority,
 140         BYTE nSubAuthorityCount,
 141         DWORD nSubAuthority0, DWORD nSubAuthority1,
 142         DWORD nSubAuthority2, DWORD nSubAuthority3,
 143         DWORD nSubAuthority4, DWORD nSubAuthority5,
 144         DWORD nSubAuthority6, DWORD nSubAuthority7,
 145         PSID *pSid )
 146 {
 147     SID *tmp_sid;
 148
 149     TRACE("(%p, 0x%04x,0x%08x,0x%08x,0x%08x,0x%08x,0x%08x,0x%08x,0x%08x,0x%08x,%p)\n",
 150                 pIdentifierAuthority,nSubAuthorityCount,
 151                 nSubAuthority0, nSubAuthority1, nSubAuthority2, nSubAuthority3,
 152                 nSubAuthority4, nSubAuthority5, nSubAuthority6, nSubAuthority7, pSid);
 153
 154     if (nSubAuthorityCount > 8) return STATUS_INVALID_SID;
 155
 156     if (!(tmp_sid= RtlAllocateHeap( GetProcessHeap(), 0,
 157                                     RtlLengthRequiredSid(nSubAuthorityCount))))
 158         return STATUS_NO_MEMORY;
 159
 160     tmp_sid->Revision = SID_REVISION;
 161
 162     if (pIdentifierAuthority)
 163         tmp_sid->IdentifierAuthority = *pIdentifierAuthority;
 164     tmp_sid->SubAuthorityCount = nSubAuthorityCount;
 165
 166     switch( nSubAuthorityCount )
 167     {
 168         case 8: tmp_sid->SubAuthority[7]= nSubAuthority7;
 169             /* fall through */
 170         case 7: tmp_sid->SubAuthority[6]= nSubAuthority6;
 171             /* fall through */
 172         case 6: tmp_sid->SubAuthority[5]= nSubAuthority5;
 173             /* fall through */
 174         case 5: tmp_sid->SubAuthority[4]= nSubAuthority4;
 175             /* fall through */
 176         case 4: tmp_sid->SubAuthority[3]= nSubAuthority3;
 177             /* fall through */
 178         case 3: tmp_sid->SubAuthority[2]= nSubAuthority2;
 179             /* fall through */
 180         case 2: tmp_sid->SubAuthority[1]= nSubAuthority1;
 181             /* fall through */
 182         case 1: tmp_sid->SubAuthority[0]= nSubAuthority0;
 183         break;
 184     }
 185     *pSid = tmp_sid;
 186     return STATUS_SUCCESS;
 187 }
 188
 189 /******************************************************************************
 190  *  RtlEqualSid         [NTDLL.@]
 191  *
 192  * Determine if two SIDs are equal.
 193  *
 194  * PARAMS
 195  *  pSid1 [I] Source SID
 196  *  pSid2 [I] SID to compare with
 197  *
 198  * RETURNS
 199  *  TRUE, if pSid1 is equal to pSid2,
 200  *  FALSE otherwise.
 201  */
 202 BOOL WINAPI RtlEqualSid( PSID pSid1, PSID pSid2 )
 203 {
 204     if (!RtlValidSid(pSid1) || !RtlValidSid(pSid2))
 205         return FALSE;
 206
 207     if (*RtlSubAuthorityCountSid(pSid1) != *RtlSubAuthorityCountSid(pSid2))
 208         return FALSE;
 209
 210     if (memcmp(pSid1, pSid2, RtlLengthSid(pSid1)) != 0)
 211         return FALSE;
 212
 213     return TRUE;
 214 }
 215
 216 /******************************************************************************
 217  * RtlEqualPrefixSid    [NTDLL.@]
 218  */
 219 BOOL WINAPI RtlEqualPrefixSid (PSID pSid1, PSID pSid2)
 220 {
 221     if (!RtlValidSid(pSid1) || !RtlValidSid(pSid2))
 222         return FALSE;
 223
 224     if (*RtlSubAuthorityCountSid(pSid1) != *RtlSubAuthorityCountSid(pSid2))
 225         return FALSE;
 226
 227     if (memcmp(pSid1, pSid2, RtlLengthRequiredSid(((SID*)pSid1)->SubAuthorityCount - 1)) != 0)
 228         return FALSE;
 229
 230     return TRUE;
 231 }
 232
 233
 234 /******************************************************************************
 235  *  RtlFreeSid          [NTDLL.@]
 236  *
 237  * Free the resources used by a SID.
 238  *
 239  * PARAMS
 240  *  pSid [I] SID to Free.
 241  *
 242  * RETURNS
 243  *  STATUS_SUCCESS.
 244  */
 245 DWORD WINAPI RtlFreeSid(PSID pSid)
 246 {
 247         TRACE("(%p)\n", pSid);
 248         RtlFreeHeap( GetProcessHeap(), 0, pSid );
 249         return STATUS_SUCCESS;
 250 }
 251
 252 /**************************************************************************
 253  * RtlLengthRequiredSid [NTDLL.@]
 254  *
 255  * Determine the amount of memory a SID will use
 256  *
 257  * PARAMS
 258  *   nrofsubauths [I] Number of Sub Authorities in the SID.
 259  *
 260  * RETURNS
 261  *   The size, in bytes, of a SID with nrofsubauths Sub Authorities.
 262  */
 263 DWORD WINAPI RtlLengthRequiredSid(DWORD nrofsubauths)
 264 {
 265         return (nrofsubauths-1)*sizeof(DWORD) + sizeof(SID);
 266 }
 267
 268 /**************************************************************************
 269  *                 RtlLengthSid                         [NTDLL.@]
 270  *
 271  * Determine the amount of memory a SID is using
 272  *
 273  * PARAMS
 274  *  pSid [I] SID to get the size of.
 275  *
 276  * RETURNS
 277  *  The size, in bytes, of pSid.
 278  */
 279 DWORD WINAPI RtlLengthSid(PSID pSid)
 280 {
 281         TRACE("sid=%p\n",pSid);
 282         if (!pSid) return 0;
 283         return RtlLengthRequiredSid(*RtlSubAuthorityCountSid(pSid));
 284 }
 285
 286 /**************************************************************************
 287  *                 RtlInitializeSid                     [NTDLL.@]
 288  *
 289  * Initialise a SID.
 290  *
 291  * PARAMS
 292  *  pSid                 [I] SID to initialise
 293  *  pIdentifierAuthority [I] Identifier Authority
 294  *  nSubAuthorityCount   [I] Number of Sub Authorities
 295  *
 296  * RETURNS
 297  *  Success: TRUE. pSid is initialised with the details given.
 298  *  Failure: FALSE, if nSubAuthorityCount is >= SID_MAX_SUB_AUTHORITIES.
 299  */
 300 BOOL WINAPI RtlInitializeSid(
 301         PSID pSid,
 302         PSID_IDENTIFIER_AUTHORITY pIdentifierAuthority,
 303         BYTE nSubAuthorityCount)
 304 {
 305         int i;
 306         SID* pisid=pSid;
 307
 308         if (nSubAuthorityCount >= SID_MAX_SUB_AUTHORITIES)
 309           return FALSE;
 310
 311         pisid->Revision = SID_REVISION;
 312         pisid->SubAuthorityCount = nSubAuthorityCount;
 313         if (pIdentifierAuthority)
 314           pisid->IdentifierAuthority = *pIdentifierAuthority;
 315
 316         for (i = 0; i < nSubAuthorityCount; i++)
 317           *RtlSubAuthoritySid(pSid, i) = 0;
 318
 319         return TRUE;
 320 }
 321
 322 /**************************************************************************
 323  *                 RtlSubAuthoritySid                   [NTDLL.@]
 324  *
 325  * Return the Sub Authority of a SID
 326  *
 327  * PARAMS
 328  *   pSid          [I] SID to get the Sub Authority from.
 329  *   nSubAuthority [I] Sub Authority number.
 330  *
 331  * RETURNS
 332  *   A pointer to The Sub Authority value of pSid.
 333  */
 334 LPDWORD WINAPI RtlSubAuthoritySid( PSID pSid, DWORD nSubAuthority )
 335 {
 336     return &(((SID*)pSid)->SubAuthority[nSubAuthority]);
 337 }
 338
 339 /**************************************************************************
 340  * RtlIdentifierAuthoritySid    [NTDLL.@]
 341  *
 342  * Return the Identifier Authority of a SID.
 343  *
 344  * PARAMS
 345  *   pSid [I] SID to get the Identifier Authority from.
 346  *
 347  * RETURNS
 348  *   A pointer to the Identifier Authority value of pSid.
 349  */
 350 PSID_IDENTIFIER_AUTHORITY WINAPI RtlIdentifierAuthoritySid( PSID pSid )
 351 {
 352     return &(((SID*)pSid)->IdentifierAuthority);
 353 }
 354
 355 /**************************************************************************
 356  *                 RtlSubAuthorityCountSid              [NTDLL.@]
 357  *
 358  * Get the number of Sub Authorities in a SID.
 359  *
 360  * PARAMS
 361  *   pSid [I] SID to get the count from.
 362  *
 363  * RETURNS
 364  *  A pointer to the Sub Authority count of pSid.
 365  */
 366 LPBYTE WINAPI RtlSubAuthorityCountSid(PSID pSid)
 367 {
 368     return &(((SID*)pSid)->SubAuthorityCount);
 369 }
 370
 371 /**************************************************************************
 372  *                 RtlCopySid                           [NTDLL.@]
 373  */
 374 BOOLEAN WINAPI RtlCopySid( DWORD nDestinationSidLength, PSID pDestinationSid, PSID pSourceSid )
 375 {
 376         if (!pSourceSid || !RtlValidSid(pSourceSid) ||
 377             (nDestinationSidLength < RtlLengthSid(pSourceSid)))
 378           return FALSE;
 379
 380         if (nDestinationSidLength < (((SID*)pSourceSid)->SubAuthorityCount*4+8))
 381           return FALSE;
 382
 383         memmove(pDestinationSid, pSourceSid, ((SID*)pSourceSid)->SubAuthorityCount*4+8);
 384         return TRUE;
 385 }
 386 /******************************************************************************
 387  * RtlValidSid [NTDLL.@]
 388  *
 389  * Determine if a SID is valid.
 390  *
 391  * PARAMS
 392  *   pSid [I] SID to check
 393  *
 394  * RETURNS
 395  *   TRUE if pSid is valid,
 396  *   FALSE otherwise.
 397  */
 398 BOOLEAN WINAPI RtlValidSid( PSID pSid )
 399 {
 400     BOOL ret;
 401     __TRY
 402     {
 403         ret = TRUE;
 404         if (!pSid || ((SID*)pSid)->Revision != SID_REVISION ||
 405             ((SID*)pSid)->SubAuthorityCount > SID_MAX_SUB_AUTHORITIES)
 406         {
 407             ret = FALSE;
 408         }
 409     }
 410     __EXCEPT_PAGE_FAULT
 411     {
 412         WARN("(%p): invalid pointer!\n", pSid);
 413         return FALSE;
 414     }
 415     __ENDTRY
 416     return ret;
 417 }
 418
 419
 420 /*
 421  *      security descriptor functions
 422  */
 423
 424 /**************************************************************************
 425  * RtlCreateSecurityDescriptor                  [NTDLL.@]
 426  *
 427  * Initialise a SECURITY_DESCRIPTOR.
 428  *
 429  * PARAMS
 430  *  lpsd [O] Descriptor to initialise.
 431  *  rev  [I] Revision, must be set to SECURITY_DESCRIPTOR_REVISION.
 432  *
 433  * RETURNS
 434  *  Success: STATUS_SUCCESS.
 435  *  Failure: STATUS_UNKNOWN_REVISION if rev is incorrect.
 436  */
 437 NTSTATUS WINAPI RtlCreateSecurityDescriptor(
 438         PSECURITY_DESCRIPTOR lpsd,
 439         DWORD rev)
 440 {
 441         if (rev!=SECURITY_DESCRIPTOR_REVISION)
 442                 return STATUS_UNKNOWN_REVISION;
 443         memset(lpsd,'\0',sizeof(SECURITY_DESCRIPTOR));
 444         ((SECURITY_DESCRIPTOR*)lpsd)->Revision = SECURITY_DESCRIPTOR_REVISION;
 445         return STATUS_SUCCESS;
 446 }
 447
 448 /**************************************************************************
 449  * RtlCopySecurityDescriptor            [NTDLL.@]
 450  *
 451  * Copies an absolute or sefl-relative SECURITY_DESCRIPTOR.
 452  *
 453  * PARAMS
 454  *  pSourceSD      [O] SD to copy from.
 455  *  pDestinationSD [I] Destination SD.
 456  *
 457  * RETURNS
 458  *  Success: STATUS_SUCCESS.
 459  *  Failure: STATUS_UNKNOWN_REVISION if rev is incorrect.
 460  */
 461 NTSTATUS WINAPI RtlCopySecurityDescriptor(PSECURITY_DESCRIPTOR pSourceSD, PSECURITY_DESCRIPTOR pDestinationSD)
 462 {
 463     PSID Owner, Group;
 464     PACL Dacl, Sacl;
 465     DWORD length;
 466
 467     if (((SECURITY_DESCRIPTOR *)pSourceSD)->Control & SE_SELF_RELATIVE)
 468     {
 469         SECURITY_DESCRIPTOR_RELATIVE *src = pSourceSD;
 470         SECURITY_DESCRIPTOR_RELATIVE *dst = pDestinationSD;
 471
 472         if (src->Revision != SECURITY_DESCRIPTOR_REVISION)
 473             return STATUS_UNKNOWN_REVISION;
 474
 475         *dst = *src;
 476         if (src->Owner)
 477         {
 478             Owner = (PSID)SELF_RELATIVE_FIELD( src, Owner );
 479             length = RtlLengthSid( Owner );
 480             RtlCopySid(length, SELF_RELATIVE_FIELD( dst, Owner ), Owner);
 481         }
 482         if (src->Group)
 483         {
 484             Group = (PSID)SELF_RELATIVE_FIELD( src, Group );
 485             length = RtlLengthSid( Group );
 486             RtlCopySid(length, SELF_RELATIVE_FIELD( dst, Group ), Group);
 487         }
 488         if ((src->Control & SE_SACL_PRESENT) && src->Sacl)
 489         {
 490             Sacl = (PACL)SELF_RELATIVE_FIELD( src, Sacl );
 491             copy_acl(Sacl->AclSize, (PACL)SELF_RELATIVE_FIELD( dst, Sacl ), Sacl);
 492         }
 493         if ((src->Control & SE_DACL_PRESENT) && src->Dacl)
 494         {
 495             Dacl = (PACL)SELF_RELATIVE_FIELD( src, Dacl );
 496             copy_acl(Dacl->AclSize, (PACL)SELF_RELATIVE_FIELD( dst, Dacl ), Dacl);
 497         }
 498     }
 499     else
 500     {
 501         SECURITY_DESCRIPTOR *src = pSourceSD;
 502         SECURITY_DESCRIPTOR *dst = pDestinationSD;
 503
 504         if (src->Revision != SECURITY_DESCRIPTOR_REVISION)
 505             return STATUS_UNKNOWN_REVISION;
 506
 507         *dst = *src;
 508         if (src->Owner)
 509         {
 510             length = RtlLengthSid( src->Owner );
 511             dst->Owner = RtlAllocateHeap(GetProcessHeap(), 0, length);
 512             RtlCopySid(length, dst->Owner, src->Owner);
 513         }
 514         if (src->Group)
 515         {
 516             length = RtlLengthSid( src->Group );
 517             dst->Group = RtlAllocateHeap(GetProcessHeap(), 0, length);
 518             RtlCopySid(length, dst->Group, src->Group);
 519         }
 520         if (src->Control & SE_SACL_PRESENT)
 521         {
 522             length = src->Sacl->AclSize;
 523             dst->Sacl = RtlAllocateHeap(GetProcessHeap(), 0, length);
 524             copy_acl(length, dst->Sacl, src->Sacl);
 525         }
 526         if (src->Control & SE_DACL_PRESENT)
 527         {
 528             length = src->Dacl->AclSize;
 529             dst->Dacl = RtlAllocateHeap(GetProcessHeap(), 0, length);
 530             copy_acl(length, dst->Dacl, src->Dacl);
 531         }
 532     }
 533
 534     return STATUS_SUCCESS;
 535 }
 536
 537 /**************************************************************************
 538  * RtlValidSecurityDescriptor                   [NTDLL.@]
 539  *
 540  * Determine if a SECURITY_DESCRIPTOR is valid.
 541  *
 542  * PARAMS
 543  *  SecurityDescriptor [I] Descriptor to check.
 544  *
 545  * RETURNS
 546  *   Success: STATUS_SUCCESS.
 547  *   Failure: STATUS_INVALID_SECURITY_DESCR or STATUS_UNKNOWN_REVISION.
 548  */
 549 NTSTATUS WINAPI RtlValidSecurityDescriptor(
 550         PSECURITY_DESCRIPTOR SecurityDescriptor)
 551 {
 552         if ( ! SecurityDescriptor )
 553                 return STATUS_INVALID_SECURITY_DESCR;
 554         if ( ((SECURITY_DESCRIPTOR*)SecurityDescriptor)->Revision != SECURITY_DESCRIPTOR_REVISION )
 555                 return STATUS_UNKNOWN_REVISION;
 556
 557         return STATUS_SUCCESS;
 558 }
 559
 560 /**************************************************************************
 561  *  RtlLengthSecurityDescriptor                 [NTDLL.@]
 562  */
 563 ULONG WINAPI RtlLengthSecurityDescriptor(
 564         PSECURITY_DESCRIPTOR pSecurityDescriptor)
 565 {
 566         ULONG size;
 567
 568         if ( pSecurityDescriptor == NULL )
 569                 return 0;
 570
 571         if (((SECURITY_DESCRIPTOR *)pSecurityDescriptor)->Control & SE_SELF_RELATIVE)
 572         {
 573             SECURITY_DESCRIPTOR_RELATIVE *sd = pSecurityDescriptor;
 574             size = sizeof(*sd);
 575             if (sd->Owner) size += RtlLengthSid((PSID)SELF_RELATIVE_FIELD(sd,Owner));
 576             if (sd->Group) size += RtlLengthSid((PSID)SELF_RELATIVE_FIELD(sd,Group));
 577             if ((sd->Control & SE_SACL_PRESENT) && sd->Sacl)
 578                 size += ((PACL)SELF_RELATIVE_FIELD(sd,Sacl))->AclSize;
 579             if ((sd->Control & SE_DACL_PRESENT) && sd->Dacl)
 580                 size += ((PACL)SELF_RELATIVE_FIELD(sd,Dacl))->AclSize;
 581         }
 582         else
 583         {
 584             SECURITY_DESCRIPTOR *sd = pSecurityDescriptor;
 585             size = sizeof(*sd);
 586             if (sd->Owner) size += RtlLengthSid( sd->Owner );
 587             if (sd->Group) size += RtlLengthSid( sd->Group );
 588             if ((sd->Control & SE_SACL_PRESENT) && sd->Sacl) size += sd->Sacl->AclSize;
 589             if ((sd->Control & SE_DACL_PRESENT) && sd->Dacl) size += sd->Dacl->AclSize;
 590         }
 591         return size;
 592 }
 593
 594 /******************************************************************************
 595  *  RtlGetDaclSecurityDescriptor                [NTDLL.@]
 596  *
 597  */
 598 NTSTATUS WINAPI RtlGetDaclSecurityDescriptor(
 599         IN PSECURITY_DESCRIPTOR pSecurityDescriptor,
 600         OUT PBOOLEAN lpbDaclPresent,
 601         OUT PACL *pDacl,
 602         OUT PBOOLEAN lpbDaclDefaulted)
 603 {
 604         SECURITY_DESCRIPTOR* lpsd=pSecurityDescriptor;
 605
 606         TRACE("(%p,%p,%p,%p)\n",
 607         pSecurityDescriptor, lpbDaclPresent, pDacl, lpbDaclDefaulted);
 608
 609         if (lpsd->Revision != SECURITY_DESCRIPTOR_REVISION)
 610           return STATUS_UNKNOWN_REVISION ;
 611
 612         if ( (*lpbDaclPresent = (SE_DACL_PRESENT & lpsd->Control) ? 1 : 0) )
 613         {
 614             if (lpsd->Control & SE_SELF_RELATIVE)
 615             {
 616                 SECURITY_DESCRIPTOR_RELATIVE *sdr = pSecurityDescriptor;
 617                 if (sdr->Dacl) *pDacl = (PACL)SELF_RELATIVE_FIELD( sdr, Dacl );
 618                 else *pDacl = NULL;
 619             }
 620             else *pDacl = lpsd->Dacl;
 621
 622             *lpbDaclDefaulted = (lpsd->Control & SE_DACL_DEFAULTED) != 0;
 623         }
 624         else
 625         {
 626             *pDacl = NULL;
 627             *lpbDaclDefaulted = 0;
 628         }
 629
 630         return STATUS_SUCCESS;
 631 }
 632
 633 /**************************************************************************
 634  *  RtlSetDaclSecurityDescriptor                [NTDLL.@]
 635  */
 636 NTSTATUS WINAPI RtlSetDaclSecurityDescriptor (
 637         PSECURITY_DESCRIPTOR pSecurityDescriptor,
 638         BOOLEAN daclpresent,
 639         PACL dacl,
 640         BOOLEAN dacldefaulted )
 641 {
 642         SECURITY_DESCRIPTOR* lpsd=pSecurityDescriptor;
 643
 644         if (lpsd->Revision!=SECURITY_DESCRIPTOR_REVISION)
 645                 return STATUS_UNKNOWN_REVISION;
 646         if (lpsd->Control & SE_SELF_RELATIVE)
 647                 return STATUS_INVALID_SECURITY_DESCR;
 648
 649         if (!daclpresent)
 650         {
 651                 lpsd->Control &= ~SE_DACL_PRESENT;
 652                 return STATUS_SUCCESS;
 653         }
 654
 655         lpsd->Control |= SE_DACL_PRESENT;
 656         lpsd->Dacl = dacl;
 657
 658         if (dacldefaulted)
 659                 lpsd->Control |= SE_DACL_DEFAULTED;
 660         else
 661                 lpsd->Control &= ~SE_DACL_DEFAULTED;
 662
 663         return STATUS_SUCCESS;
 664 }
 665
 666 /******************************************************************************
 667  *  RtlGetSaclSecurityDescriptor                [NTDLL.@]
 668  *
 669  */
 670 NTSTATUS WINAPI RtlGetSaclSecurityDescriptor(
 671         IN PSECURITY_DESCRIPTOR pSecurityDescriptor,
 672         OUT PBOOLEAN lpbSaclPresent,
 673         OUT PACL *pSacl,
 674         OUT PBOOLEAN lpbSaclDefaulted)
 675 {
 676         SECURITY_DESCRIPTOR* lpsd=pSecurityDescriptor;
 677
 678         TRACE("(%p,%p,%p,%p)\n",
 679         pSecurityDescriptor, lpbSaclPresent, pSacl, lpbSaclDefaulted);
 680
 681         if (lpsd->Revision != SECURITY_DESCRIPTOR_REVISION)
 682           return STATUS_UNKNOWN_REVISION;
 683
 684         if ( (*lpbSaclPresent = (SE_SACL_PRESENT & lpsd->Control) ? 1 : 0) )
 685         {
 686             if (lpsd->Control & SE_SELF_RELATIVE)
 687             {
 688                 SECURITY_DESCRIPTOR_RELATIVE *sdr = pSecurityDescriptor;
 689                 if (sdr->Sacl) *pSacl = (PACL)SELF_RELATIVE_FIELD( sdr, Sacl );
 690                 else *pSacl = NULL;
 691             }
 692             else *pSacl = lpsd->Sacl;
 693
 694             *lpbSaclDefaulted = (lpsd->Control & SE_SACL_DEFAULTED) != 0;
 695         }
 696         return STATUS_SUCCESS;
 697 }
 698
 699 /**************************************************************************
 700  * RtlSetSaclSecurityDescriptor                 [NTDLL.@]
 701  */
 702 NTSTATUS WINAPI RtlSetSaclSecurityDescriptor (
 703         PSECURITY_DESCRIPTOR pSecurityDescriptor,
 704         BOOLEAN saclpresent,
 705         PACL sacl,
 706         BOOLEAN sacldefaulted)
 707 {
 708         SECURITY_DESCRIPTOR* lpsd=pSecurityDescriptor;
 709
 710         if (lpsd->Revision!=SECURITY_DESCRIPTOR_REVISION)
 711                 return STATUS_UNKNOWN_REVISION;
 712         if (lpsd->Control & SE_SELF_RELATIVE)
 713                 return STATUS_INVALID_SECURITY_DESCR;
 714         if (!saclpresent) {
 715                 lpsd->Control &= ~SE_SACL_PRESENT;
 716                 return 0;
 717         }
 718         lpsd->Control |= SE_SACL_PRESENT;
 719         lpsd->Sacl = sacl;
 720         if (sacldefaulted)
 721                 lpsd->Control |= SE_SACL_DEFAULTED;
 722         else
 723                 lpsd->Control &= ~SE_SACL_DEFAULTED;
 724         return STATUS_SUCCESS;
 725 }
 726
 727 /**************************************************************************
 728  * RtlGetOwnerSecurityDescriptor                [NTDLL.@]
 729  */
 730 NTSTATUS WINAPI RtlGetOwnerSecurityDescriptor(
 731         PSECURITY_DESCRIPTOR pSecurityDescriptor,
 732         PSID *Owner,
 733         PBOOLEAN OwnerDefaulted)
 734 {
 735         SECURITY_DESCRIPTOR* lpsd=pSecurityDescriptor;
 736
 737         if ( !lpsd  || !Owner || !OwnerDefaulted )
 738                 return STATUS_INVALID_PARAMETER;
 739
 740         if ( lpsd->Control & SE_OWNER_DEFAULTED )
 741             *OwnerDefaulted = TRUE;
 742         else
 743             *OwnerDefaulted = FALSE;
 744
 745         if (lpsd->Control & SE_SELF_RELATIVE)
 746         {
 747             SECURITY_DESCRIPTOR_RELATIVE *sd = pSecurityDescriptor;
 748             if (sd->Owner) *Owner = (PSID)SELF_RELATIVE_FIELD( sd, Owner );
 749             else *Owner = NULL;
 750         }
 751         else
 752             *Owner = lpsd->Owner;
 753
 754         return STATUS_SUCCESS;
 755 }
 756
 757 /**************************************************************************
 758  *                 RtlSetOwnerSecurityDescriptor                [NTDLL.@]
 759  */
 760 NTSTATUS WINAPI RtlSetOwnerSecurityDescriptor(
 761         PSECURITY_DESCRIPTOR pSecurityDescriptor,
 762         PSID owner,
 763         BOOLEAN ownerdefaulted)
 764 {
 765         SECURITY_DESCRIPTOR* lpsd=pSecurityDescriptor;
 766
 767         if (lpsd->Revision!=SECURITY_DESCRIPTOR_REVISION)
 768                 return STATUS_UNKNOWN_REVISION;
 769         if (lpsd->Control & SE_SELF_RELATIVE)
 770                 return STATUS_INVALID_SECURITY_DESCR;
 771
 772         lpsd->Owner = owner;
 773         if (ownerdefaulted)
 774                 lpsd->Control |= SE_OWNER_DEFAULTED;
 775         else
 776                 lpsd->Control &= ~SE_OWNER_DEFAULTED;
 777         return STATUS_SUCCESS;
 778 }
 779
 780 /**************************************************************************
 781  *                 RtlSetGroupSecurityDescriptor                [NTDLL.@]
 782  */
 783 NTSTATUS WINAPI RtlSetGroupSecurityDescriptor (
 784         PSECURITY_DESCRIPTOR pSecurityDescriptor,
 785         PSID group,
 786         BOOLEAN groupdefaulted)
 787 {
 788         SECURITY_DESCRIPTOR* lpsd=pSecurityDescriptor;
 789
 790         if (lpsd->Revision!=SECURITY_DESCRIPTOR_REVISION)
 791                 return STATUS_UNKNOWN_REVISION;
 792         if (lpsd->Control & SE_SELF_RELATIVE)
 793                 return STATUS_INVALID_SECURITY_DESCR;
 794
 795         lpsd->Group = group;
 796         if (groupdefaulted)
 797                 lpsd->Control |= SE_GROUP_DEFAULTED;
 798         else
 799                 lpsd->Control &= ~SE_GROUP_DEFAULTED;
 800         return STATUS_SUCCESS;
 801 }
 802
 803 /**************************************************************************
 804  *                 RtlGetGroupSecurityDescriptor                [NTDLL.@]
 805  */
 806 NTSTATUS WINAPI RtlGetGroupSecurityDescriptor(
 807         PSECURITY_DESCRIPTOR pSecurityDescriptor,
 808         PSID *Group,
 809         PBOOLEAN GroupDefaulted)
 810 {
 811         SECURITY_DESCRIPTOR* lpsd=pSecurityDescriptor;
 812
 813         if ( !lpsd || !Group || !GroupDefaulted )
 814                 return STATUS_INVALID_PARAMETER;
 815
 816         if ( lpsd->Control & SE_GROUP_DEFAULTED )
 817             *GroupDefaulted = TRUE;
 818         else
 819             *GroupDefaulted = FALSE;
 820
 821         if (lpsd->Control & SE_SELF_RELATIVE)
 822         {
 823             SECURITY_DESCRIPTOR_RELATIVE *sd = pSecurityDescriptor;
 824             if (sd->Group) *Group = (PSID)SELF_RELATIVE_FIELD( sd, Group );
 825             else *Group = NULL;
 826         }
 827         else
 828             *Group = lpsd->Group;
 829
 830         return STATUS_SUCCESS;
 831 }
 832
 833 /**************************************************************************
 834  *                 RtlMakeSelfRelativeSD                [NTDLL.@]
 835  */
 836 NTSTATUS WINAPI RtlMakeSelfRelativeSD(
 837         IN PSECURITY_DESCRIPTOR pAbsoluteSecurityDescriptor,
 838         IN PSECURITY_DESCRIPTOR pSelfRelativeSecurityDescriptor,
 839         IN OUT LPDWORD lpdwBufferLength)
 840 {
 841     DWORD offsetRel;
 842     ULONG length;
 843     SECURITY_DESCRIPTOR* pAbs = pAbsoluteSecurityDescriptor;
 844     SECURITY_DESCRIPTOR_RELATIVE *pRel = pSelfRelativeSecurityDescriptor;
 845
 846     TRACE(" %p %p %p(%d)\n", pAbs, pRel, lpdwBufferLength,
 847         lpdwBufferLength ? *lpdwBufferLength: -1);
 848
 849     if (!lpdwBufferLength || !pAbs)
 850         return STATUS_INVALID_PARAMETER;
 851
 852     length = RtlLengthSecurityDescriptor(pAbs);
 853     if (*lpdwBufferLength < length)
 854     {
 855         *lpdwBufferLength = length;
 856         return STATUS_BUFFER_TOO_SMALL;
 857     }
 858
 859     if (!pRel)
 860         return STATUS_INVALID_PARAMETER;
 861
 862     if (pAbs->Control & SE_SELF_RELATIVE)
 863     {
 864         memcpy(pRel, pAbs, length);
 865         return STATUS_SUCCESS;
 866     }
 867
 868     pRel->Revision = pAbs->Revision;
 869     pRel->Sbz1 = pAbs->Sbz1;
 870     pRel->Control = pAbs->Control | SE_SELF_RELATIVE;
 871
 872     offsetRel = sizeof(SECURITY_DESCRIPTOR_RELATIVE);
 873     if (pAbs->Owner)
 874     {
 875         pRel->Owner = offsetRel;
 876         length = RtlLengthSid(pAbs->Owner);
 877         memcpy((LPBYTE)pRel + offsetRel, pAbs->Owner, length);
 878         offsetRel += length;
 879     }
 880     else
 881     {
 882         pRel->Owner = 0;
 883     }
 884
 885     if (pAbs->Group)
 886     {
 887         pRel->Group = offsetRel;
 888         length = RtlLengthSid(pAbs->Group);
 889         memcpy((LPBYTE)pRel + offsetRel, pAbs->Group, length);
 890         offsetRel += length;
 891     }
 892     else
 893     {
 894         pRel->Group = 0;
 895     }
 896
 897     if (pAbs->Sacl)
 898     {
 899         pRel->Sacl = offsetRel;
 900         length = pAbs->Sacl->AclSize;
 901         memcpy((LPBYTE)pRel + offsetRel, pAbs->Sacl, length);
 902         offsetRel += length;
 903     }
 904     else
 905     {
 906         pRel->Sacl = 0;
 907     }
 908
 909     if (pAbs->Dacl)
 910     {
 911         pRel->Dacl = offsetRel;
 912         length = pAbs->Dacl->AclSize;
 913         memcpy((LPBYTE)pRel + offsetRel, pAbs->Dacl, length);
 914     }
 915     else
 916     {
 917         pRel->Dacl = 0;
 918     }
 919
 920     return STATUS_SUCCESS;
 921 }
 922
 923
 924 /**************************************************************************
 925  *                 RtlSelfRelativeToAbsoluteSD [NTDLL.@]
 926  */
 927 NTSTATUS WINAPI RtlSelfRelativeToAbsoluteSD(
 928         IN PSECURITY_DESCRIPTOR pSelfRelativeSecurityDescriptor,
 929         OUT PSECURITY_DESCRIPTOR pAbsoluteSecurityDescriptor,
 930         OUT LPDWORD lpdwAbsoluteSecurityDescriptorSize,
 931         OUT PACL pDacl,
 932         OUT LPDWORD lpdwDaclSize,
 933         OUT PACL pSacl,
 934         OUT LPDWORD lpdwSaclSize,
 935         OUT PSID pOwner,
 936         OUT LPDWORD lpdwOwnerSize,
 937         OUT PSID pPrimaryGroup,
 938         OUT LPDWORD lpdwPrimaryGroupSize)
 939 {
 940     NTSTATUS status = STATUS_SUCCESS;
 941     SECURITY_DESCRIPTOR* pAbs = pAbsoluteSecurityDescriptor;
 942     SECURITY_DESCRIPTOR_RELATIVE* pRel = pSelfRelativeSecurityDescriptor;
 943
 944     if (!pRel ||
 945         !lpdwAbsoluteSecurityDescriptorSize ||
 946         !lpdwDaclSize ||
 947         !lpdwSaclSize ||
 948         !lpdwOwnerSize ||
 949         !lpdwPrimaryGroupSize ||
 950         ~pRel->Control & SE_SELF_RELATIVE)
 951         return STATUS_INVALID_PARAMETER;
 952
 953     /* Confirm buffers are sufficiently large */
 954     if (*lpdwAbsoluteSecurityDescriptorSize < sizeof(SECURITY_DESCRIPTOR))
 955     {
 956         *lpdwAbsoluteSecurityDescriptorSize = sizeof(SECURITY_DESCRIPTOR);
 957         status = STATUS_BUFFER_TOO_SMALL;
 958     }
 959
 960     if ((pRel->Control & SE_DACL_PRESENT) && pRel->Dacl &&
 961         *lpdwDaclSize  < ((PACL)SELF_RELATIVE_FIELD(pRel,Dacl))->AclSize)
 962     {
 963         *lpdwDaclSize = ((PACL)SELF_RELATIVE_FIELD(pRel,Dacl))->AclSize;
 964         status = STATUS_BUFFER_TOO_SMALL;
 965     }
 966
 967     if ((pRel->Control & SE_SACL_PRESENT) && pRel->Sacl &&
 968         *lpdwSaclSize  < ((PACL)SELF_RELATIVE_FIELD(pRel,Sacl))->AclSize)
 969     {
 970         *lpdwSaclSize = ((PACL)SELF_RELATIVE_FIELD(pRel,Sacl))->AclSize;
 971         status = STATUS_BUFFER_TOO_SMALL;
 972     }
 973
 974     if (pRel->Owner &&
 975         *lpdwOwnerSize < RtlLengthSid((PSID)SELF_RELATIVE_FIELD(pRel,Owner)))
 976     {
 977         *lpdwOwnerSize = RtlLengthSid((PSID)SELF_RELATIVE_FIELD(pRel,Owner));
 978         status = STATUS_BUFFER_TOO_SMALL;
 979     }
 980
 981     if (pRel->Group &&
 982         *lpdwPrimaryGroupSize < RtlLengthSid((PSID)SELF_RELATIVE_FIELD(pRel,Group)))
 983     {
 984         *lpdwPrimaryGroupSize = RtlLengthSid((PSID)SELF_RELATIVE_FIELD(pRel,Group));
 985         status = STATUS_BUFFER_TOO_SMALL;
 986     }
 987
 988     if (status != STATUS_SUCCESS)
 989         return status;
 990
 991     /* Copy structures, and clear the ones we don't set */
 992     pAbs->Revision = pRel->Revision;
 993     pAbs->Control = pRel->Control & ~SE_SELF_RELATIVE;
 994     pAbs->Sacl = NULL;
 995     pAbs->Dacl = NULL;
 996     pAbs->Owner = NULL;
 997     pAbs->Group = NULL;
 998
 999     if ((pRel->Control & SE_SACL_PRESENT) && pRel->Sacl)
1000     {
1001         PACL pAcl = (PACL)SELF_RELATIVE_FIELD( pRel, Sacl );
1002
1003         memcpy(pSacl, pAcl, pAcl->AclSize);
1004         pAbs->Sacl = pSacl;
1005     }
1006
1007     if ((pRel->Control & SE_DACL_PRESENT) && pRel->Dacl)
1008     {
1009         PACL pAcl = (PACL)SELF_RELATIVE_FIELD( pRel, Dacl );
1010         memcpy(pDacl, pAcl, pAcl->AclSize);
1011         pAbs->Dacl = pDacl;
1012     }
1013
1014     if (pRel->Owner)
1015     {
1016         PSID psid = (PSID)SELF_RELATIVE_FIELD( pRel, Owner );
1017         memcpy(pOwner, psid, RtlLengthSid(psid));
1018         pAbs->Owner = pOwner;
1019     }
1020
1021     if (pRel->Group)
1022     {
1023         PSID psid = (PSID)SELF_RELATIVE_FIELD( pRel, Group );
1024         memcpy(pPrimaryGroup, psid, RtlLengthSid(psid));
1025         pAbs->Group = pPrimaryGroup;
1026     }
1027
1028     return status;
1029 }
1030
1031 /******************************************************************************
1032  * RtlGetControlSecurityDescriptor (NTDLL.@)
1033  */
1034 NTSTATUS WINAPI RtlGetControlSecurityDescriptor(
1035     PSECURITY_DESCRIPTOR pSecurityDescriptor,
1036     PSECURITY_DESCRIPTOR_CONTROL pControl,
1037     LPDWORD lpdwRevision)
1038 {
1039     SECURITY_DESCRIPTOR *lpsd = pSecurityDescriptor;
1040
1041     TRACE("(%p,%p,%p)\n",pSecurityDescriptor,pControl,lpdwRevision);
1042
1043     *lpdwRevision = lpsd->Revision;
1044
1045     if (*lpdwRevision != SECURITY_DESCRIPTOR_REVISION)
1046         return STATUS_UNKNOWN_REVISION;
1047
1048     *pControl = lpsd->Control;
1049
1050     return STATUS_SUCCESS;
1051 }
1052
1053 /******************************************************************************
1054  * RtlSetControlSecurityDescriptor (NTDLL.@)
1055  */
1056 NTSTATUS WINAPI RtlSetControlSecurityDescriptor(
1057     PSECURITY_DESCRIPTOR SecurityDescriptor,
1058     SECURITY_DESCRIPTOR_CONTROL ControlBitsOfInterest,
1059     SECURITY_DESCRIPTOR_CONTROL ControlBitsToSet)
1060 {
1061     SECURITY_DESCRIPTOR_CONTROL const immutable
1062        = SE_OWNER_DEFAULTED  | SE_GROUP_DEFAULTED
1063        | SE_DACL_PRESENT     | SE_DACL_DEFAULTED
1064        | SE_SACL_PRESENT     | SE_SACL_DEFAULTED
1065        | SE_RM_CONTROL_VALID | SE_SELF_RELATIVE
1066        ;
1067
1068     SECURITY_DESCRIPTOR *lpsd = SecurityDescriptor;
1069
1070     TRACE("(%p 0x%04x 0x%04x)\n", SecurityDescriptor,
1071           ControlBitsOfInterest, ControlBitsToSet);
1072
1073     if ((ControlBitsOfInterest | ControlBitsToSet) & immutable)
1074         return STATUS_INVALID_PARAMETER;
1075
1076     lpsd->Control |=  (ControlBitsOfInterest &  ControlBitsToSet);
1077     lpsd->Control &= ~(ControlBitsOfInterest & ~ControlBitsToSet);
1078
1079     return STATUS_SUCCESS;
1080 }
1081
1082
1083 /**************************************************************************
1084  *                 RtlAbsoluteToSelfRelativeSD [NTDLL.@]
1085  */
1086 NTSTATUS WINAPI RtlAbsoluteToSelfRelativeSD(
1087     PSECURITY_DESCRIPTOR AbsoluteSecurityDescriptor,
1088     PSECURITY_DESCRIPTOR SelfRelativeSecurityDescriptor,
1089     PULONG BufferLength)
1090 {
1091     SECURITY_DESCRIPTOR *abs = AbsoluteSecurityDescriptor;
1092
1093     TRACE("%p %p %p\n", AbsoluteSecurityDescriptor,
1094           SelfRelativeSecurityDescriptor, BufferLength);
1095
1096     if (abs->Control & SE_SELF_RELATIVE)
1097         return STATUS_BAD_DESCRIPTOR_FORMAT;
1098
1099     return RtlMakeSelfRelativeSD(AbsoluteSecurityDescriptor,
1100         SelfRelativeSecurityDescriptor, BufferLength);
1101 }
1102
1103
1104 /*
1105  *      access control list's
1106  */
1107
1108 /**************************************************************************
1109  *                 RtlCreateAcl                         [NTDLL.@]
1110  *
1111  * NOTES
1112  *    This should return NTSTATUS
1113  */
1114 NTSTATUS WINAPI RtlCreateAcl(PACL acl,DWORD size,DWORD rev)
1115 {
1116         TRACE("%p 0x%08x 0x%08x\n", acl, size, rev);
1117
1118         if (rev < MIN_ACL_REVISION || rev > MAX_ACL_REVISION)
1119                 return STATUS_INVALID_PARAMETER;
1120         if (size<sizeof(ACL))
1121                 return STATUS_BUFFER_TOO_SMALL;
1122         if (size>0xFFFF)
1123                 return STATUS_INVALID_PARAMETER;
1124
1125         memset(acl,'\0',sizeof(ACL));
1126         acl->AclRevision        = rev;
1127         acl->AclSize            = size;
1128         acl->AceCount           = 0;
1129         return STATUS_SUCCESS;
1130 }
1131
1132 /**************************************************************************
1133  *                 RtlFirstFreeAce                      [NTDLL.@]
1134  * looks for the AceCount+1 ACE, and if it is still within the alloced
1135  * ACL, return a pointer to it
1136  */
1137 BOOLEAN WINAPI RtlFirstFreeAce(
1138         PACL acl,
1139         PACE_HEADER *x)
1140 {
1141         PACE_HEADER     ace;
1142         int             i;
1143
1144         *x = 0;
1145         ace = (PACE_HEADER)(acl+1);
1146         for (i=0;i<acl->AceCount;i++) {
1147                 if ((BYTE *)ace >= (BYTE *)acl + acl->AclSize)
1148                         return FALSE;
1149                 ace = (PACE_HEADER)(((BYTE*)ace)+ace->AceSize);
1150         }
1151         if ((BYTE *)ace >= (BYTE *)acl + acl->AclSize)
1152                 return FALSE;
1153         *x = ace;
1154         return TRUE;
1155 }
1156
1157 /**************************************************************************
1158  *                 RtlAddAce                            [NTDLL.@]
1159  */
1160 NTSTATUS WINAPI RtlAddAce(
1161         PACL acl,
1162         DWORD rev,
1163         DWORD xnrofaces,
1164         PACE_HEADER acestart,
1165         DWORD acelen)
1166 {
1167         PACE_HEADER     ace,targetace;
1168         int             nrofaces;
1169
1170         if (!RtlValidAcl(acl))
1171                 return STATUS_INVALID_PARAMETER;
1172         if (!RtlFirstFreeAce(acl,&targetace))
1173                 return STATUS_INVALID_PARAMETER;
1174         nrofaces=0;ace=acestart;
1175         while (((BYTE *)ace - (BYTE *)acestart) < acelen) {
1176                 nrofaces++;
1177                 ace = (PACE_HEADER)(((BYTE*)ace)+ace->AceSize);
1178         }
1179         if ((BYTE *)targetace + acelen > (BYTE *)acl + acl->AclSize) /* too much aces */
1180                 return STATUS_INVALID_PARAMETER;
1181         memcpy(targetace,acestart,acelen);
1182         acl->AceCount+=nrofaces;
1183         if (rev > acl->AclRevision)
1184                 acl->AclRevision = rev;
1185         return STATUS_SUCCESS;
1186 }
1187
1188 /**************************************************************************
1189  *                 RtlDeleteAce                         [NTDLL.@]
1190  */
1191 NTSTATUS  WINAPI RtlDeleteAce(PACL pAcl, DWORD dwAceIndex)
1192 {
1193         NTSTATUS status;
1194         PACE_HEADER pAce;
1195
1196         status = RtlGetAce(pAcl,dwAceIndex,(LPVOID*)&pAce);
1197
1198         if (STATUS_SUCCESS == status)
1199         {
1200                 PACE_HEADER pcAce;
1201                 DWORD len = 0;
1202
1203                 /* skip over the ACE we are deleting */
1204                 pcAce = (PACE_HEADER)(((BYTE*)pAce)+pAce->AceSize);
1205                 dwAceIndex++;
1206
1207                 /* calculate the length of the rest */
1208                 for (; dwAceIndex < pAcl->AceCount; dwAceIndex++)
1209                 {
1210                         len += pcAce->AceSize;
1211                         pcAce = (PACE_HEADER)(((BYTE*)pcAce) + pcAce->AceSize);
1212                 }
1213
1214                 /* slide them all backwards */
1215                 memmove(pAce, ((BYTE*)pAce)+pAce->AceSize, len);
1216                 pAcl->AceCount--;
1217         }
1218
1219         TRACE("pAcl=%p dwAceIndex=%d status=0x%08x\n", pAcl, dwAceIndex, status);
1220
1221         return status;
1222 }
1223
1224 /******************************************************************************
1225  *  RtlAddAccessAllowedAce              [NTDLL.@]
1226  */
1227 NTSTATUS WINAPI RtlAddAccessAllowedAce(
1228         IN OUT PACL pAcl,
1229         IN DWORD dwAceRevision,
1230         IN DWORD AccessMask,
1231         IN PSID pSid)
1232 {
1233         return RtlAddAccessAllowedAceEx( pAcl, dwAceRevision, 0, AccessMask, pSid);
1234 }
1235
1236 /******************************************************************************
1237  *  RtlAddAccessAllowedAceEx            [NTDLL.@]
1238  */
1239 NTSTATUS WINAPI RtlAddAccessAllowedAceEx(
1240         IN OUT PACL pAcl,
1241         IN DWORD dwAceRevision,
1242         IN DWORD AceFlags,
1243         IN DWORD AccessMask,
1244         IN PSID pSid)
1245 {
1246    TRACE("(%p,0x%08x,0x%08x,%p)\n", pAcl, dwAceRevision, AccessMask, pSid);
1247
1248     return add_access_ace(pAcl, dwAceRevision, AceFlags,
1249                           AccessMask, pSid, ACCESS_ALLOWED_ACE_TYPE);
1250 }
1251
1252 /******************************************************************************
1253  *  RtlAddAccessDeniedAce               [NTDLL.@]
1254  */
1255 NTSTATUS WINAPI RtlAddAccessDeniedAce(
1256         IN OUT PACL pAcl,
1257         IN DWORD dwAceRevision,
1258         IN DWORD AccessMask,
1259         IN PSID pSid)
1260 {
1261         return RtlAddAccessDeniedAceEx( pAcl, dwAceRevision, 0, AccessMask, pSid);
1262 }
1263
1264 /******************************************************************************
1265  *  RtlAddAccessDeniedAceEx             [NTDLL.@]
1266  */
1267 NTSTATUS WINAPI RtlAddAccessDeniedAceEx(
1268         IN OUT PACL pAcl,
1269         IN DWORD dwAceRevision,
1270         IN DWORD AceFlags,
1271         IN DWORD AccessMask,
1272         IN PSID pSid)
1273 {
1274    TRACE("(%p,0x%08x,0x%08x,%p)\n", pAcl, dwAceRevision, AccessMask, pSid);
1275
1276     return add_access_ace(pAcl, dwAceRevision, AceFlags,
1277                           AccessMask, pSid, ACCESS_DENIED_ACE_TYPE);
1278 }
1279
1280 /**************************************************************************
1281  *  RtlAddAuditAccessAce     [NTDLL.@]
1282  */
1283 NTSTATUS WINAPI RtlAddAuditAccessAceEx(
1284     IN OUT PACL pAcl,
1285     IN DWORD dwAceRevision,
1286     IN DWORD dwAceFlags,
1287     IN DWORD dwAccessMask,
1288     IN PSID pSid,
1289     IN BOOL bAuditSuccess,
1290     IN BOOL bAuditFailure)
1291 {
1292     TRACE("(%p,%d,0x%08x,0x%08x,%p,%u,%u)\n",pAcl,dwAceRevision,dwAceFlags,dwAccessMask,
1293           pSid,bAuditSuccess,bAuditFailure);
1294
1295     if (bAuditSuccess)
1296         dwAceFlags |= SUCCESSFUL_ACCESS_ACE_FLAG;
1297
1298     if (bAuditFailure)
1299         dwAceFlags |= FAILED_ACCESS_ACE_FLAG;
1300
1301     return add_access_ace(pAcl, dwAceRevision, dwAceFlags,
1302                           dwAccessMask, pSid, SYSTEM_AUDIT_ACE_TYPE);
1303 }
1304
1305 /**************************************************************************
1306  *  RtlAddAuditAccessAce     [NTDLL.@]
1307  */
1308 NTSTATUS WINAPI RtlAddAuditAccessAce(
1309     IN OUT PACL pAcl,
1310     IN DWORD dwAceRevision,
1311     IN DWORD dwAccessMask,
1312     IN PSID pSid,
1313     IN BOOL bAuditSuccess,
1314     IN BOOL bAuditFailure)
1315 {
1316     return RtlAddAuditAccessAceEx(pAcl, dwAceRevision, 0, dwAccessMask, pSid, bAuditSuccess, bAuditFailure);
1317 }
1318
1319 /******************************************************************************
1320  *  RtlValidAcl         [NTDLL.@]
1321  */
1322 BOOLEAN WINAPI RtlValidAcl(PACL pAcl)
1323 {
1324         BOOLEAN ret;
1325         TRACE("(%p)\n", pAcl);
1326
1327         __TRY
1328         {
1329                 PACE_HEADER     ace;
1330                 int             i;
1331
1332                 if (pAcl->AclRevision < MIN_ACL_REVISION ||
1333                     pAcl->AclRevision > MAX_ACL_REVISION)
1334                     ret = FALSE;
1335                 else
1336                 {
1337                     ace = (PACE_HEADER)(pAcl+1);
1338                     ret = TRUE;
1339                     for (i=0;i<=pAcl->AceCount;i++)
1340                     {
1341                         if ((char *)ace > (char *)pAcl + pAcl->AclSize)
1342                         {
1343                             ret = FALSE;
1344                             break;
1345                         }
1346                         if (i != pAcl->AceCount)
1347                             ace = (PACE_HEADER)(((BYTE*)ace)+ace->AceSize);
1348                     }
1349                 }
1350         }
1351         __EXCEPT_PAGE_FAULT
1352         {
1353                 WARN("(%p): invalid pointer!\n", pAcl);
1354                 return FALSE;
1355         }
1356         __ENDTRY
1357         return ret;
1358 }
1359
1360 /******************************************************************************
1361  *  RtlGetAce           [NTDLL.@]
1362  */
1363 NTSTATUS WINAPI RtlGetAce(PACL pAcl,DWORD dwAceIndex,LPVOID *pAce )
1364 {
1365         PACE_HEADER ace;
1366
1367         TRACE("(%p,%d,%p)\n",pAcl,dwAceIndex,pAce);
1368
1369         if (dwAceIndex >= pAcl->AceCount)
1370                 return STATUS_INVALID_PARAMETER;
1371
1372         ace = (PACE_HEADER)(pAcl + 1);
1373         for (;dwAceIndex;dwAceIndex--)
1374                 ace = (PACE_HEADER)(((BYTE*)ace)+ace->AceSize);
1375
1376         *pAce = ace;
1377
1378         return STATUS_SUCCESS;
1379 }
1380
1381 /*
1382  *      misc
1383  */
1384
1385 /******************************************************************************
1386  *  RtlAdjustPrivilege          [NTDLL.@]
1387  *
1388  * Enables or disables a privilege from the calling thread or process.
1389  *
1390  * PARAMS
1391  *  Privilege     [I] Privilege index to change.
1392  *  Enable        [I] If TRUE, then enable the privilege otherwise disable.
1393  *  CurrentThread [I] If TRUE, then enable in calling thread, otherwise process.
1394  *  Enabled       [O] Whether privilege was previously enabled or disabled.
1395  *
1396  * RETURNS
1397  *  Success: STATUS_SUCCESS.
1398  *  Failure: NTSTATUS code.
1399  *
1400  * SEE ALSO
1401  *  NtAdjustPrivilegesToken, NtOpenThreadToken, NtOpenProcessToken.
1402  *
1403  */
1404 NTSTATUS WINAPI
1405 RtlAdjustPrivilege(ULONG Privilege,
1406                    BOOLEAN Enable,
1407                    BOOLEAN CurrentThread,
1408                    PBOOLEAN Enabled)
1409 {
1410     TOKEN_PRIVILEGES NewState;
1411     TOKEN_PRIVILEGES OldState;
1412     ULONG ReturnLength;
1413     HANDLE TokenHandle;
1414     NTSTATUS Status;
1415
1416     TRACE("(%d, %s, %s, %p)\n", Privilege, Enable ? "TRUE" : "FALSE",
1417         CurrentThread ? "TRUE" : "FALSE", Enabled);
1418
1419     if (CurrentThread)
1420     {
1421         Status = NtOpenThreadToken(GetCurrentThread(),
1422                                    TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY,
1423                                    FALSE,
1424                                    &TokenHandle);
1425     }
1426     else
1427     {
1428         Status = NtOpenProcessToken(GetCurrentProcess(),
1429                                     TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY,
1430                                     &TokenHandle);
1431     }
1432
1433     if (!NT_SUCCESS(Status))
1434     {
1435         WARN("Retrieving token handle failed (Status %x)\n", Status);
1436         return Status;
1437     }
1438
1439     OldState.PrivilegeCount = 1;
1440
1441     NewState.PrivilegeCount = 1;
1442     NewState.Privileges[0].Luid.LowPart = Privilege;
1443     NewState.Privileges[0].Luid.HighPart = 0;
1444     NewState.Privileges[0].Attributes = (Enable) ? SE_PRIVILEGE_ENABLED : 0;
1445
1446     Status = NtAdjustPrivilegesToken(TokenHandle,
1447                                      FALSE,
1448                                      &NewState,
1449                                      sizeof(TOKEN_PRIVILEGES),
1450                                      &OldState,
1451                                      &ReturnLength);
1452     NtClose (TokenHandle);
1453     if (Status == STATUS_NOT_ALL_ASSIGNED)
1454     {
1455         TRACE("Failed to assign all privileges\n");
1456         return STATUS_PRIVILEGE_NOT_HELD;
1457     }
1458     if (!NT_SUCCESS(Status))
1459     {
1460         WARN("NtAdjustPrivilegesToken() failed (Status %x)\n", Status);
1461         return Status;
1462     }
1463
1464     if (OldState.PrivilegeCount == 0)
1465         *Enabled = Enable;
1466     else
1467         *Enabled = (OldState.Privileges[0].Attributes & SE_PRIVILEGE_ENABLED);
1468
1469     return STATUS_SUCCESS;
1470 }
1471
1472 /******************************************************************************
1473  *  RtlImpersonateSelf          [NTDLL.@]
1474  *
1475  * Makes an impersonation token that represents the process user and assigns
1476  * to the current thread.
1477  *
1478  * PARAMS
1479  *  ImpersonationLevel [I] Level at which to impersonate.
1480  *
1481  * RETURNS
1482  *  Success: STATUS_SUCCESS.
1483  *  Failure: NTSTATUS code.
1484  */
1485 NTSTATUS WINAPI
1486 RtlImpersonateSelf(SECURITY_IMPERSONATION_LEVEL ImpersonationLevel)
1487 {
1488     NTSTATUS Status;
1489     OBJECT_ATTRIBUTES ObjectAttributes;
1490     HANDLE ProcessToken;
1491     HANDLE ImpersonationToken;
1492
1493     TRACE("(%08x)\n", ImpersonationLevel);
1494
1495     Status = NtOpenProcessToken( NtCurrentProcess(), TOKEN_DUPLICATE,
1496                                  &ProcessToken);
1497     if (Status != STATUS_SUCCESS)
1498         return Status;
1499
1500     InitializeObjectAttributes( &ObjectAttributes, NULL, 0, NULL, NULL );
1501
1502     Status = NtDuplicateToken( ProcessToken,
1503                                TOKEN_IMPERSONATE,
1504                                &ObjectAttributes,
1505                                ImpersonationLevel,
1506                                TokenImpersonation,
1507                                &ImpersonationToken );
1508     if (Status != STATUS_SUCCESS)
1509     {
1510         NtClose( ProcessToken );
1511         return Status;
1512     }
1513
1514     Status = NtSetInformationThread( GetCurrentThread(),
1515                                      ThreadImpersonationToken,
1516                                      &ImpersonationToken,
1517                                      sizeof(ImpersonationToken) );
1518
1519     NtClose( ImpersonationToken );
1520     NtClose( ProcessToken );
1521
1522     return Status;
1523 }
1524
1525 /******************************************************************************
1526  *  NtImpersonateAnonymousToken      [NTDLL.@]
1527  */
1528 NTSTATUS WINAPI
1529 NtImpersonateAnonymousToken(HANDLE thread)
1530 {
1531     FIXME("(%p): stub\n", thread);
1532     return STATUS_NOT_IMPLEMENTED;
1533 }
1534
1535 /******************************************************************************
1536  *  NtAccessCheck               [NTDLL.@]
1537  *  ZwAccessCheck               [NTDLL.@]
1538  *
1539  * Checks that a user represented by a token is allowed to access an object
1540  * represented by a security descriptor.
1541  *
1542  * PARAMS
1543  *  SecurityDescriptor [I] The security descriptor of the object to check.
1544  *  ClientToken        [I] Token of the user accessing the object.
1545  *  DesiredAccess      [I] The desired access to the object.
1546  *  GenericMapping     [I] Mapping used to transform access rights in the SD to their specific forms.
1547  *  PrivilegeSet       [I/O] Privileges used during the access check.
1548  *  ReturnLength       [O] Number of bytes stored into PrivilegeSet.
1549  *  GrantedAccess      [O] The actual access rights granted.
1550  *  AccessStatus       [O] The status of the access check.
1551  *
1552  * RETURNS
1553  *  NTSTATUS code.
1554  *
1555  * NOTES
1556  *  DesiredAccess may be MAXIMUM_ALLOWED, in which case the function determines
1557  *  the maximum access rights allowed by the SD and returns them in
1558  *  GrantedAccess.
1559  *  The SecurityDescriptor must have a valid owner and groups present,
1560  *  otherwise the function will fail.
1561  */
1562 NTSTATUS WINAPI
1563 NtAccessCheck(
1564     PSECURITY_DESCRIPTOR SecurityDescriptor,
1565     HANDLE ClientToken,
1566     ACCESS_MASK DesiredAccess,
1567     PGENERIC_MAPPING GenericMapping,
1568     PPRIVILEGE_SET PrivilegeSet,
1569     PULONG ReturnLength,
1570     PULONG GrantedAccess,
1571     NTSTATUS *AccessStatus)
1572 {
1573     NTSTATUS status;
1574
1575     TRACE("(%p, %p, %08x, %p, %p, %p, %p, %p)\n",
1576         SecurityDescriptor, ClientToken, DesiredAccess, GenericMapping,
1577         PrivilegeSet, ReturnLength, GrantedAccess, AccessStatus);
1578
1579     if (!PrivilegeSet || !ReturnLength)
1580         return STATUS_ACCESS_VIOLATION;
1581
1582     SERVER_START_REQ( access_check )
1583     {
1584         struct security_descriptor sd;
1585         PSID owner;
1586         PSID group;
1587         PACL sacl;
1588         PACL dacl;
1589         BOOLEAN defaulted, present;
1590         DWORD revision;
1591         SECURITY_DESCRIPTOR_CONTROL control;
1592
1593         req->handle = wine_server_obj_handle( ClientToken );
1594         req->desired_access = DesiredAccess;
1595         req->mapping_read = GenericMapping->GenericRead;
1596         req->mapping_write = GenericMapping->GenericWrite;
1597         req->mapping_execute = GenericMapping->GenericExecute;
1598         req->mapping_all = GenericMapping->GenericAll;
1599
1600         /* marshal security descriptor */
1601         RtlGetControlSecurityDescriptor( SecurityDescriptor, &control, &revision );
1602         sd.control = control & ~SE_SELF_RELATIVE;
1603         RtlGetOwnerSecurityDescriptor( SecurityDescriptor, &owner, &defaulted );
1604         sd.owner_len = RtlLengthSid( owner );
1605         RtlGetGroupSecurityDescriptor( SecurityDescriptor, &group, &defaulted );
1606         sd.group_len = RtlLengthSid( group );
1607         RtlGetSaclSecurityDescriptor( SecurityDescriptor, &present, &sacl, &defaulted );
1608         sd.sacl_len = ((present && sacl) ? acl_bytesInUse(sacl) : 0);
1609         RtlGetDaclSecurityDescriptor( SecurityDescriptor, &present, &dacl, &defaulted );
1610         sd.dacl_len = ((present && dacl) ? acl_bytesInUse(dacl) : 0);
1611
1612         wine_server_add_data( req, &sd, sizeof(sd) );
1613         wine_server_add_data( req, owner, sd.owner_len );
1614         wine_server_add_data( req, group, sd.group_len );
1615         wine_server_add_data( req, sacl, sd.sacl_len );
1616         wine_server_add_data( req, dacl, sd.dacl_len );
1617
1618         wine_server_set_reply( req, PrivilegeSet->Privilege, *ReturnLength - FIELD_OFFSET( PRIVILEGE_SET, Privilege ) );
1619
1620         status = wine_server_call( req );
1621
1622         *ReturnLength = FIELD_OFFSET( PRIVILEGE_SET, Privilege ) + reply->privileges_len;
1623         PrivilegeSet->PrivilegeCount = reply->privileges_len / sizeof(LUID_AND_ATTRIBUTES);
1624
1625         if (status == STATUS_SUCCESS)
1626         {
1627             *AccessStatus = reply->access_status;
1628             *GrantedAccess = reply->access_granted;
1629         }
1630     }
1631     SERVER_END_REQ;
1632
1633     return status;
1634 }
1635
1636 /******************************************************************************
1637  *  NtSetSecurityObject         [NTDLL.@]
1638  *  ZwSetSecurityObject         [NTDLL.@]
1639  *
1640  * Sets specified parts of the object's security descriptor.
1641  *
1642  * PARAMS
1643  *  Handle              [I] Handle to the object to change security descriptor of.
1644  *  SecurityInformation [I] Specifies which parts of the security descriptor to set.
1645  *  SecurityDescriptor  [I] New parts of a security descriptor for the object.
1646  *
1647  * RETURNS
1648  *  NTSTATUS code.
1649  *
1650  */
1651 NTSTATUS WINAPI NtSetSecurityObject(HANDLE Handle,
1652         SECURITY_INFORMATION SecurityInformation,
1653         PSECURITY_DESCRIPTOR SecurityDescriptor)
1654 {
1655     NTSTATUS status;
1656     struct security_descriptor sd;
1657     PACL dacl = NULL, sacl = NULL;
1658     PSID owner = NULL, group = NULL;
1659     BOOLEAN defaulted, present;
1660     DWORD revision;
1661     SECURITY_DESCRIPTOR_CONTROL control;
1662
1663     TRACE("%p 0x%08x %p\n", Handle, SecurityInformation, SecurityDescriptor);
1664
1665     if (!SecurityDescriptor) return STATUS_ACCESS_VIOLATION;
1666
1667     memset( &sd, 0, sizeof(sd) );
1668     status = RtlGetControlSecurityDescriptor( SecurityDescriptor, &control, &revision );
1669     if (status != STATUS_SUCCESS) return status;
1670     sd.control = control & ~SE_SELF_RELATIVE;
1671
1672     if (SecurityInformation & OWNER_SECURITY_INFORMATION)
1673     {
1674         status = RtlGetOwnerSecurityDescriptor( SecurityDescriptor, &owner, &defaulted );
1675         if (status != STATUS_SUCCESS) return status;
1676         if (!(sd.owner_len = RtlLengthSid( owner )))
1677             return STATUS_INVALID_SECURITY_DESCR;
1678     }
1679
1680     if (SecurityInformation & GROUP_SECURITY_INFORMATION)
1681     {
1682         status = RtlGetGroupSecurityDescriptor( SecurityDescriptor, &group, &defaulted );
1683         if (status != STATUS_SUCCESS) return status;
1684         if (!(sd.group_len = RtlLengthSid( group )))
1685             return STATUS_INVALID_SECURITY_DESCR;
1686     }
1687
1688     if (SecurityInformation & SACL_SECURITY_INFORMATION)
1689     {
1690         status = RtlGetSaclSecurityDescriptor( SecurityDescriptor, &present, &sacl, &defaulted );
1691         if (status != STATUS_SUCCESS) return status;
1692         sd.sacl_len = (sacl && present) ? acl_bytesInUse(sacl) : 0;
1693         sd.control |= SE_SACL_PRESENT;
1694     }
1695
1696     if (SecurityInformation & DACL_SECURITY_INFORMATION)
1697     {
1698         status = RtlGetDaclSecurityDescriptor( SecurityDescriptor, &present, &dacl, &defaulted );
1699         if (status != STATUS_SUCCESS) return status;
1700         sd.dacl_len = (dacl && present) ? acl_bytesInUse(dacl) : 0;
1701         sd.control |= SE_DACL_PRESENT;
1702     }
1703
1704     SERVER_START_REQ( set_security_object )
1705     {
1706         req->handle = wine_server_obj_handle( Handle );
1707         req->security_info = SecurityInformation;
1708
1709         wine_server_add_data( req, &sd, sizeof(sd) );
1710         wine_server_add_data( req, owner, sd.owner_len );
1711         wine_server_add_data( req, group, sd.group_len );
1712         wine_server_add_data( req, sacl, sd.sacl_len );
1713         wine_server_add_data( req, dacl, sd.dacl_len );
1714         status = wine_server_call( req );
1715     }
1716     SERVER_END_REQ;
1717
1718     return status;
1719 }
1720
1721 /******************************************************************************
1722  * RtlConvertSidToUnicodeString (NTDLL.@)
1723  *
1724  * The returned SID is used to access the USER registry hive usually
1725  *
1726  * the native function returns something like
1727  * "S-1-5-21-0000000000-000000000-0000000000-500";
1728  */
1729 NTSTATUS WINAPI RtlConvertSidToUnicodeString(
1730        PUNICODE_STRING String,
1731        PSID pSid,
1732        BOOLEAN AllocateString)
1733 {
1734     static const WCHAR formatW[] = {'-','%','u',0};
1735     WCHAR buffer[2 + 10 + 10 + 10 * SID_MAX_SUB_AUTHORITIES];
1736     WCHAR *p = buffer;
1737     const SID *sid = pSid;
1738     DWORD i, len;
1739
1740     *p++ = 'S';
1741     p += sprintfW( p, formatW, sid->Revision );
1742     p += sprintfW( p, formatW, MAKELONG( MAKEWORD( sid->IdentifierAuthority.Value[5],
1743                                                    sid->IdentifierAuthority.Value[4] ),
1744                                          MAKEWORD( sid->IdentifierAuthority.Value[3],
1745                                                    sid->IdentifierAuthority.Value[2] )));
1746     for (i = 0; i < sid->SubAuthorityCount; i++)
1747         p += sprintfW( p, formatW, sid->SubAuthority[i] );
1748
1749     len = (p + 1 - buffer) * sizeof(WCHAR);
1750
1751     String->Length = len - sizeof(WCHAR);
1752     if (AllocateString)
1753     {
1754         String->MaximumLength = len;
1755         if (!(String->Buffer = RtlAllocateHeap( GetProcessHeap(), 0, len )))
1756             return STATUS_NO_MEMORY;
1757     }
1758     else if (len > String->MaximumLength) return STATUS_BUFFER_OVERFLOW;
1759
1760     memcpy( String->Buffer, buffer, len );
1761     return STATUS_SUCCESS;
1762 }
1763
1764 /******************************************************************************
1765  * RtlQueryInformationAcl (NTDLL.@)
1766  */
1767 NTSTATUS WINAPI RtlQueryInformationAcl(
1768     PACL pAcl,
1769     LPVOID pAclInformation,
1770     DWORD nAclInformationLength,
1771     ACL_INFORMATION_CLASS dwAclInformationClass)
1772 {
1773     NTSTATUS status = STATUS_SUCCESS;
1774
1775     TRACE("pAcl=%p pAclInfo=%p len=%d, class=%d\n",
1776         pAcl, pAclInformation, nAclInformationLength, dwAclInformationClass);
1777
1778     switch (dwAclInformationClass)
1779     {
1780         case AclRevisionInformation:
1781         {
1782             PACL_REVISION_INFORMATION paclrev = pAclInformation;
1783
1784             if (nAclInformationLength < sizeof(ACL_REVISION_INFORMATION))
1785                 status = STATUS_INVALID_PARAMETER;
1786             else
1787                 paclrev->AclRevision = pAcl->AclRevision;
1788
1789             break;
1790         }
1791
1792         case AclSizeInformation:
1793         {
1794             PACL_SIZE_INFORMATION paclsize = pAclInformation;
1795
1796             if (nAclInformationLength < sizeof(ACL_SIZE_INFORMATION))
1797                 status = STATUS_INVALID_PARAMETER;
1798             else
1799             {
1800                 paclsize->AceCount = pAcl->AceCount;
1801                 paclsize->AclBytesInUse = acl_bytesInUse(pAcl);
1802                 if (pAcl->AclSize < paclsize->AclBytesInUse)
1803                 {
1804                     WARN("Acl uses %d bytes, but only has %d allocated!  Returning smaller of the two values.\n", pAcl->AclSize, paclsize->AclBytesInUse);
1805                     paclsize->AclBytesFree = 0;
1806                     paclsize->AclBytesInUse = pAcl->AclSize;
1807                 }
1808                 else
1809                     paclsize->AclBytesFree = pAcl->AclSize - paclsize->AclBytesInUse;
1810             }
1811
1812             break;
1813         }
1814
1815         default:
1816             WARN("Unknown AclInformationClass value: %d\n", dwAclInformationClass);
1817             status = STATUS_INVALID_PARAMETER;
1818     }
1819
1820     return status;
1821 }
1822
1823 BOOL WINAPI RtlConvertToAutoInheritSecurityObject(
1824         PSECURITY_DESCRIPTOR pdesc,
1825         PSECURITY_DESCRIPTOR cdesc,
1826         PSECURITY_DESCRIPTOR* ndesc,
1827         GUID* objtype,
1828         BOOL isdir,
1829         PGENERIC_MAPPING genmap )
1830 {
1831     FIXME("%p %p %p %p %d %p - stub\n", pdesc, cdesc, ndesc, objtype, isdir, genmap);
1832
1833     return FALSE;
1834 }