server: Make sure to always initialise req_sd.owner_len and req_sd.group_len in the handler for the get_security_object call.
diff --git a/server/handle.c b/server/handle.c
index 763870e..30facbe 100644
--- a/server/handle.c
+++ b/server/handle.c
@@ -641,10 +641,14 @@
owner = sd_get_owner( sd );
if (req->security_info & OWNER_SECURITY_INFORMATION)
req_sd.owner_len = sd->owner_len;
+ else
+ req_sd.owner_len = 0;
group = sd_get_group( sd );
if (req->security_info & GROUP_SECURITY_INFORMATION)
req_sd.group_len = sd->group_len;
+ else
+ req_sd.group_len = 0;
req_sd.control |= SE_SACL_PRESENT;
sacl = sd_get_sacl( sd, &present );