libcli:security: Return early if there are no aces to duplicate

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Wed Dec 12 22:18:52 CET 2018 on sn-devel-144

diff --git a/libcli/security/security_descriptor.c b/libcli/security/security_descriptor.c
index 02c3212fa63f5a57809d94c00dc3ee317f057cd4..7b7a13d421d8dd0080ec11afb0a565ed908f4bba 100644 (file)
--- a/libcli/security/security_descriptor.c
+++ b/libcli/security/security_descriptor.c
@@ -67,15 +67,20 @@ struct security_acl *security_acl_dup(TALLOC_CTX *mem_ctx,
                return NULL;
        }
 
+       *nacl = (struct security_acl) {
+               .revision = oacl->revision,
+               .size     = oacl->size,
+               .num_aces = oacl->num_aces,
+       };
+       if (nacl->num_aces == 0) {
+               return nacl;
+       }
+
        nacl->aces = (struct security_ace *)talloc_memdup (nacl, oacl->aces, sizeof(struct security_ace) * oacl->num_aces);
-       if ((nacl->aces == NULL) && (oacl->num_aces > 0)) {
+       if (nacl->aces == NULL) {
                goto failed;
        }
 
-       nacl->revision = oacl->revision;
-       nacl->size = oacl->size;
-       nacl->num_aces = oacl->num_aces;
-       
        return nacl;
 
  failed: