http://bugs.winehq.org/show_bug.cgi?id=18071
--- Comment #8 from Alex cerebro.alexiel@gmail.com 2010-06-01 09:28:50 --- I've submitted a test to WineTestBot (https://testbot.winehq.org/JobDetails.pl?Key=2414)
and what I understand is that a security descriptor may be NULL if at least one pointer is not NULL. Otherwise, it returns ERROR_INVALID_ARGUMENT.
So I guess doing what comment #3 suggests is not sufficient. We should check that the "at least" condition and then allocate what's needed.
But before sending a patch, I'd have your opinion. So what do you think ?