s4:drsuapi/getncchanges: return WERR_NOMEM if talloc_array() fails