Rob Shearman : server: Make sure to always initialise req_sd. owner_len and req_sd. group_len in the handler for the get_security_object call.