From f67f469ce101e48301de790b5c31f8d4e712e0ea Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Fri, 23 Nov 2012 10:58:49 +0100 Subject: s4:dsdb/descriptor: the old nTSecurityDescriptor is always expected there on modify Signed-off-by: Stefan Metzmacher Reviewed-by: Michael Adam --- source4/dsdb/samdb/ldb_modules/descriptor.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'source4') diff --git a/source4/dsdb/samdb/ldb_modules/descriptor.c b/source4/dsdb/samdb/ldb_modules/descriptor.c index 4b4704b664..96bc356485 100644 --- a/source4/dsdb/samdb/ldb_modules/descriptor.c +++ b/source4/dsdb/samdb/ldb_modules/descriptor.c @@ -714,6 +714,9 @@ static int descriptor_modify(struct ldb_module *module, struct ldb_request *req) } old_sd = ldb_msg_find_ldb_val(current_res->msgs[0], "nTSecurityDescriptor"); + if (old_sd == NULL) { + return ldb_operr(ldb); + } sd = get_new_descriptor(module, dn, req, objectclass, parent_sd, -- cgit