libcli/security: sddl_conditional_ace: check a talloc_new()

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/libcli/security/sddl_conditional_ace.c b/libcli/security/sddl_conditional_ace.c
index ea4a35cfa576a255a67cc90aadcfe194a7b22809..e6aadb1d394655d167122f7607787306e8393877 100644 (file)
--- a/libcli/security/sddl_conditional_ace.c
+++ b/libcli/security/sddl_conditional_ace.c
@@ -3381,6 +3381,9 @@ char *sddl_resource_attr_from_claim(
        }
 
        tmp_ctx = talloc_new(mem_ctx);
+       if (tmp_ctx == NULL) {
+               return NULL;
+       }
        ctx.mem_ctx = tmp_ctx;
 
        ok = claim_v1_to_ace_token(tmp_ctx, claim, &tok);