From d9701360d04fd5d2220dce6c46e201724529db63 Mon Sep 17 00:00:00 2001
From: Daniel <dhaavi@users.noreply.github.com>
Date: Thu, 17 Aug 2023 15:24:22 +0200
Subject: [PATCH] Detect ALE packet info via socket auth flag

---
 pm_kext/src/pm_kernel.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pm_kext/src/pm_kernel.c b/pm_kext/src/pm_kernel.c
index 10fa173..fb86072 100644
--- a/pm_kext/src/pm_kernel.c
+++ b/pm_kext/src/pm_kernel.c
@@ -352,7 +352,7 @@ NTSTATUS driverDeviceControl(__in PDEVICE_OBJECT pDeviceObject, __inout PIRP Irp
                 Irp->IoStatus.Information = size;
                 IoCompleteRequest(Irp, IO_NO_INCREMENT);
 
-                if(dentry->packet->processID != 0) {
+                if ((dentry->packet->flags & PM_STATUS_SOCKET_AUTH) > 0) {
                     // Packet comes from the ALE layer and it's not saved in cache. It's not needed anymore.
                     portmasterFree(dentry->packet);
                 }