Index: audit.c
===================================================================
--- audit.c	(revision 39717)
+++ audit.c	(working copy)
@@ -139,12 +139,14 @@
         {
             /* Set it */
             if (InterlockedCompareExchangePointer(&Process->
-                                                  SeAuditProcessCreationInfo,
+                                                  SeAuditProcessCreationInfo.ImageFileName,
                                                   AuditName,
                                                   NULL))
             {
                 /* Someone beat us to it, deallocate our copy */
                 ExFreePool(AuditName);
+                /* Get the audit info, again */
+                AuditName = Process->SeAuditProcessCreationInfo.ImageFileName;
             }
         }