Fix 0xD6 bugcheck found with verifier
Fix 0xD6 bugcheck found with verifier

PdoAddRevision() reads beyond the end of an allocation when copying the old
revision table to the new one. This is becaause it is incorrectly using the
Count stack variable rather then the Count field in the Pdo structure. This
patch fixes the problem.

Signed-off-by: Paul Durrant <dba6cd059c0054f8a3c62ba902cd9d7238853ee4@citrix.com>

omeg/xenbus,rneilturner/xenbus,MarkKMueller/xenbus,MarkKMueller/xenbus,QubesOS/qubes-vmm-xen-win-pvdrivers-xenbus,rneilturner/xenbus,QubesOS/qubes-vmm-xen-win-pvdrivers-xenbus,omeg/xenbus,QubesOS/qubes-vmm-xen-win-pvdrivers-xenbus,omeg/xenbus,MarkKMueller/xenbus,rneilturner/xenbus