Skip to main content

Module security

Module security 

Source
Expand description

Owned capture of a caller’s lpSecurityAttributes.

A SECURITY_ATTRIBUTES is not a value. It points at a security descriptor, and that descriptor may itself be absolute: a structure of raw pointers to an owner SID, a group SID, a DACL and a SACL that are quite possibly on the caller’s stack. Carrying one to another thread by copying the struct would carry a set of dangling pointers.

Capture therefore normalises to the self-relative form, in which every part lives at an offset inside one contiguous blob, and owns that blob.

Structs§

SecurityAttributes
An owned capture of a caller’s lpSecurityAttributes argument.
SecurityCaptureError
A synchronous failure while capturing a caller’s security attributes.
SecurityDescriptor
An owned, self-relative copy of a caller’s security descriptor.

Enums§

AclState
What a descriptor says about one of its access-control lists.
SecurityCaptureFailure
Why a caller’s security attributes could not be captured.