From: Andrew Tridgell <tridge@samba.org>
Date: Thu, 25 Sep 2008 00:31:57 +0000 (-0700)
Subject: zero access mask should give ACCESS_DENIED
X-Git-Tag: samba-4.0.0alpha6~769^2~228^2~173
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d3c6c71ff2d5499be152785a49ad128641330b40;p=thirdparty%2Fsamba.git

zero access mask should give ACCESS_DENIED
---

diff --git a/source4/ntvfs/posix/pvfs_acl.c b/source4/ntvfs/posix/pvfs_acl.c
index 57a463aba6d..06a4e690041 100644
--- a/source4/ntvfs/posix/pvfs_acl.c
+++ b/source4/ntvfs/posix/pvfs_acl.c
@@ -511,6 +511,10 @@ NTSTATUS pvfs_access_check(struct pvfs_state *pvfs,
 	NTSTATUS status;
 	struct security_descriptor *sd;
 
+	if (*access_mask == 0) {
+		return NT_STATUS_ACCESS_DENIED;
+	}
+
 	if (pvfs_read_only(pvfs, *access_mask)) {
 		return NT_STATUS_ACCESS_DENIED;
 	}