SeReleaseSecurityDescriptor
VOID __stdcall SeReleaseSecurityDescriptor(VOID *CapturedSecurityDescriptor, CHAR RequestorMode, UINT8 ForceCapture){
if( !RequestorMode && ForceCapture == 1 || RequestorMode == 1 )
{
if( CapturedSecurityDescriptor )
ExFreePoolWithTag(CapturedSecurityDescriptor, 0);
}
}Referenced by:
AlpcpConnectPort
CmpCopySaclToVirtualKey
CmpCreateKeyBody
IopAllocRealFileObject
NtCreateWnfStateName
NtOpenObjectAuditAlarm
NtSetSecurityObject
ObCreateObjectEx
ObDeleteCapturedInsertInfo
ObInsertObjectEx
ObOpenObjectByNameEx
ObReferenceObjectByNameEx
ObpCaptureObjectCreateInformation
ObpFreeObject
ObpInsertOrLocateNamedObject
SeAccessCheckByTypeWithAdminlessChecks
SeTokenDefaultDaclChangedAuditAlarm
SepAccessCheckAndAuditAlarmWithAdminlessChecks