s4:dsdb: Skip allocation of empty device SIDs array

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/source4/dsdb/samdb/samdb.c b/source4/dsdb/samdb/samdb.c
index 81576829a7506bac782a74c539dd536900073e0f..42375a8437ba58154388581bfebde98dacb49724 100644 (file)
--- a/source4/dsdb/samdb/samdb.c
+++ b/source4/dsdb/samdb/samdb.c
@@ -247,7 +247,7 @@ NTSTATUS security_token_create(TALLOC_CTX *mem_ctx,
                }
        }
 
-       if (authentication_was_compounded) {
+       if (authentication_was_compounded && num_device_sids) {
                ptoken->device_sids = talloc_array(ptoken, struct dom_sid, num_device_sids);
                if (ptoken->device_sids == NULL) {
                        talloc_free(ptoken);