diff --git a/source4/torture/raw/acls.c b/source4/torture/raw/acls.c
index 9d9b6b130f3..64977f5a719 100644
--- a/source4/torture/raw/acls.c
+++ b/source4/torture/raw/acls.c
@@ -140,7 +140,7 @@ static bool test_sd(struct torture_context *tctx, struct smbcli_state *cli)
 	int fnum = -1;
 	union smb_fileinfo q;
 	union smb_setfileinfo set;
-	struct security_ace ace;
+	struct security_ace ace = {};
 	struct security_descriptor *sd;
 	struct dom_sid *test_sid;
 
diff --git a/source4/torture/raw/streams.c b/source4/torture/raw/streams.c
index 0c493f5f1f2..415f223ef3f 100644
--- a/source4/torture/raw/streams.c
+++ b/source4/torture/raw/streams.c
@@ -1901,7 +1901,7 @@ static bool test_stream_permissions(struct torture_context *tctx,
 	int fnum = -1;
 	union smb_fileinfo q;
 	union smb_setfileinfo set;
-	struct security_ace ace;
+	struct security_ace ace = {};
 	struct security_descriptor *sd;
 
 	torture_assert(tctx, torture_setup_dir(cli, BASEDIR),
diff --git a/source4/torture/rpc/samr_accessmask.c b/source4/torture/rpc/samr_accessmask.c
index 07b8d44f6c2..1ed0d673c71 100644
--- a/source4/torture/rpc/samr_accessmask.c
+++ b/source4/torture/rpc/samr_accessmask.c
@@ -251,7 +251,7 @@ static bool test_samr_connect_user_acl(struct torture_context *tctx,
 	struct policy_handle uch;
 	struct samr_QuerySecurity qs;
 	struct samr_SetSecurity ss;
-	struct security_ace ace;
+	struct security_ace ace = {};
 	struct security_descriptor *sd;
 	struct sec_desc_buf sdb, *sdbuf = NULL;
 	bool ret = true;
diff --git a/source4/torture/rpc/spoolss.c b/source4/torture/rpc/spoolss.c
index 0c71ed0073b..05a0aef7e43 100644
--- a/source4/torture/rpc/spoolss.c
+++ b/source4/torture/rpc/spoolss.c
@@ -2019,7 +2019,7 @@ static bool test_PrinterInfo_SDs(struct torture_context *tctx,
 	/* set modified sd level 3, query level 2 */
 
 	for (i=0; i < 93; i++) {
-		struct security_ace a;
+		struct security_ace a = {};
 		const char *sid_string = talloc_asprintf(tctx, "S-1-5-32-9999%i", i);
 		a.type = SEC_ACE_TYPE_ACCESS_ALLOWED;
 		a.flags = 0;