From 49aa39283b5da2ce1669bb252c6544ed9383fd5d Mon Sep 17 00:00:00 2001
From: simon <simon@FreeBSD.org>
Date: Thu, 14 Feb 2008 11:44:31 +0000
Subject: Fix sendfile(2) write-only file permission bypass.

Security:	FreeBSD-SA-08:03.sendfile
Submitted by:	kib
---
 sys/kern/kern_descrip.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'sys/kern/kern_descrip.c')

diff --git a/sys/kern/kern_descrip.c b/sys/kern/kern_descrip.c
index 7e53062..27a5289 100644
--- a/sys/kern/kern_descrip.c
+++ b/sys/kern/kern_descrip.c
@@ -2050,7 +2050,7 @@ _fgetvp(struct thread *td, int fd, struct vnode **vpp, int flags)
 	int error;
 
 	*vpp = NULL;
-	if ((error = _fget(td, fd, &fp, 0, 0)) != 0)
+	if ((error = _fget(td, fd, &fp, flags, 0)) != 0)
 		return (error);
 	if (fp->f_vnode == NULL) {
 		error = EINVAL;
-- 
cgit v1.1