Fenixk19 wrote: > + PSECURITY_DESCRIPTOR local_descriptor; > + if(!descriptor) > + descriptor = &local_descriptor; Why do you try to return anything if a caller doesn't request it passing NULL?