--- src/radius.c        18 Dec 2005 11:09:32 -0000      1.29
+++ src/radius.c        15 Jan 2006 03:30:44 -0000
@@ -1167,6 +1167,7 @@
              case RAD_MICROSOFT_MS_CHAP_DOMAIN:
                Freee(MB_AUTH, a->params.msdomain);
                tmpval = rad_cvt_string(data, len);
+               a->params.msdomain = Malloc(MB_AUTH, len + 1);
                memcpy(a->params.msdomain, tmpval, len + 1);
                free(tmpval);
                Log(LG_RADIUS, ("[%s] RADIUS: %s: RAD_MICROSOFT_MS_CHAP_DOMAIN: %s",