diff --git a/clients/tools/common.c b/clients/tools/common.c
index 15f0b55b5d..84f73e9144 100644
--- a/clients/tools/common.c
+++ b/clients/tools/common.c
@@ -997,7 +997,7 @@ void
 tool_bind( LDAP *ld )
 {
 #ifdef LDAP_CONTROL_PASSWORDPOLICYREQUEST
-	LDAPControl *sctrls[2];
+	LDAPControl *sctrls[2] = { NULL };
 	if ( ppolicy ) {
 		LDAPControl c;
 		c.ldctl_oid = LDAP_CONTROL_PASSWORDPOLICYREQUEST;