zero access mask should give ACCESS_DENIED

diff --git a/source4/ntvfs/posix/pvfs_acl.c b/source4/ntvfs/posix/pvfs_acl.c
index 57a463aba6d8a485ce9b7f56b58363585a4dd86b..06a4e690041a190bcdaaf5fd2122019f7a79aac7 100644 (file)
--- a/source4/ntvfs/posix/pvfs_acl.c
+++ b/source4/ntvfs/posix/pvfs_acl.c
@@ -511,6 +511,10 @@ NTSTATUS pvfs_access_check(struct pvfs_state *pvfs,
        NTSTATUS status;
        struct security_descriptor *sd;
 
+       if (*access_mask == 0) {
+               return NT_STATUS_ACCESS_DENIED;
+       }
+
        if (pvfs_read_only(pvfs, *access_mask)) {
                return NT_STATUS_ACCESS_DENIED;
        }