The upstream author did answer: Use alloca is wrong, since it could be overwritten when pam_get_data is called. The correct fix would be to replace alloca with malloc.
Thorsten -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]