| Previous | Next |
| STATUS_FILE_INVALID | STATUS_INSUFFICIENT_RESOURCES |
STATUS_ALLOTTED_SPACE_EXCEEDED
The security object cannot grow inside its allotted buffer
Access tokens and related security objects reserve dynamic storage for information such as the default discretionary ACL and primary group. TOKEN_STATISTICS exposes both the charged and currently available dynamic space. This status can occur when an update would exceed that reservation while existing handles still reference the object.
This is not a general out-of-memory result. Retrying the same in-place update will not enlarge the existing object. Create a new token or security descriptor with the required contents, then replace the reference through the supported API rather than modifying undocumented memory.
What to inspect
- Record TOKEN_STATISTICS.DynamicCharged and DynamicAvailable when token data is involved.
- Measure the complete ACL or group structure after canonical serialization.
- Use token duplication or a newly allocated self-relative security descriptor instead of patching the existing buffer.
References
- Microsoft: TOKEN_STATISTICS
- Microsoft Open Specifications: SDDL and ACE syntax
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.