comctl32: Make parameters of expect_band_content() match the corresponding types of REBARBANDINFO and fix one format string.

server: Make sure to always initialise req_sd.owner_len and req_sd.group_len in the handler for the get_security_object call.