| Previous | Next |
| STATUS_INVALID_SID | STATUS_PROCEDURE_NOT_FOUND |
STATUS_INVALID_SECURITY_DESCR
The security descriptor buffer is malformed
A security descriptor combines owner, group, DACL, SACL, control bits, and ACL pointers or offsets. This status means that structure cannot be accepted as a valid descriptor for the operation.
The failure can come from a self-relative versus absolute descriptor mismatch, invalid control flags, bad ACL offsets, missing owner data, or corruption while serializing/deserializing security data.
What to inspect
- Validate whether the descriptor is absolute or self-relative as expected by the API.
- Check owner, group, DACL, SACL, and control flags before passing the buffer.
- If the descriptor came from storage or the network, preserve the original bytes for comparison with the decoded form.
References
- Microsoft: Security descriptors
- Microsoft: Windows security model for driver developers
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.