libcl/security:sddl_decode_acl: expand a comment

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/libcli/security/sddl.c b/libcli/security/sddl.c
index 032048544a01053c2b4669ae74567d800e80f41a..80db182ff9cfe34f0281e2c2c35cf1ef4d1d2cf7 100644 (file)
--- a/libcli/security/sddl.c
+++ b/libcli/security/sddl.c
@@ -822,7 +822,11 @@ static struct security_acl *sddl_decode_acl(struct security_descriptor *sd,
        sddl += len;
 
        if (sddl[0] != '(') {
-               /* it is empty apart from the flags. */
+               /*
+                * it is empty apart from the flags
+                * (or the flags are bad, and we will find out when
+                * we try to parse the next bit as a top-level fragment)
+                */
                *sddlp = sddl;
                return acl;
        }