Re: GetTokenInformation() and FreeSid() at port/exec.c

>> At present, a specific error, crash or trouble seems not to have
>> happened.

The reason its not crashing is that most, if not all, windows allocation
functions know which addresses belong to them.  FreeSid is actually
documented as returning NULL on success.  On failure it returns the
address you tried to free.

Although the FreeSid call causes no harm because its defensive, there is
still the issue of leaking the TOKEN_USER structure.

--
Andrew Chernow
eSilo, LLC
every bit counts
http://www.esilo.com/