Hi.
Per Coverity.
The function *CreateRestrictedProcess* is responsible to create a
restricted token
Coverity complains that the handle origToken can be leaked.
In case of failure of the functions *AllocateAndInitializeSid* or
*GetPrivilegesToDelete*
the handle origToken must be released.
Trivial patch attached.
best regards,
Ranier Vilela