fix: use descriptor types for proper alignment

Signed-off-by: Tomasz Andrzejak <andreiltd@gmail.com>

Author: andreiltd

src/hyperlight_host/src/sandbox/file_mapping.rs

@@ -295,7 +295,10 @@ pub(crate) fn prepare_file_cow(
         use std::os::windows::io::AsRawHandle;
 
         use windows::Win32::Foundation::HANDLE;
-        use windows::Win32::Security::{PSECURITY_DESCRIPTOR, SECURITY_ATTRIBUTES};
+        use windows::Win32::Security::{
+            PSECURITY_DESCRIPTOR, SECURITY_ATTRIBUTES, SECURITY_DESCRIPTOR,
+            SECURITY_DESCRIPTOR_REVISION1,
+        };
         use windows::Win32::System::Memory::{
             CreateFileMappingW, FILE_MAP_READ, MapViewOfFile, PAGE_READONLY,
         };
@@ -319,11 +322,14 @@ pub(crate) fn prepare_file_cow(
         // MapViewOfFileNuma2. File-backed sections created with the
         // default DACL fail with ERROR_ACCESS_DENIED when mapped
         // cross-process on modern Windows.
-        let mut sd_bytes = [0u8; 40]; // SECURITY_DESCRIPTOR_MIN_LENGTH
+        // https://microsoft.github.io/windows-docs-rs/doc/windows/Win32/Security/struct.SECURITY_DESCRIPTOR.html
+        // https://microsoft.github.io/windows-docs-rs/doc/windows/Win32/System/SystemServices/constant.SECURITY_DESCRIPTOR_REVISION1.html
+        let mut sd = SECURITY_DESCRIPTOR::default();
+        let psd = PSECURITY_DESCRIPTOR(&mut sd as *mut _ as *mut _);
         unsafe {
-            let psd = PSECURITY_DESCRIPTOR(sd_bytes.as_mut_ptr() as *mut _);
             windows::Win32::Security::InitializeSecurityDescriptor(
-                psd, 1, // SECURITY_DESCRIPTOR_REVISION
+                psd,
+                SECURITY_DESCRIPTOR_REVISION1,
             )
             .map_err(|e| {
                 HyperlightError::Error(format!("InitializeSecurityDescriptor failed: {e}"))
@@ -334,7 +340,7 @@ pub(crate) fn prepare_file_cow(
         }
         let sa = SECURITY_ATTRIBUTES {
             nLength: std::mem::size_of::<SECURITY_ATTRIBUTES>() as u32,
-            lpSecurityDescriptor: sd_bytes.as_mut_ptr() as *mut _,
+            lpSecurityDescriptor: psd.0,
             bInheritHandle: false.into(),
         };