seg fault in eap-ttls

[duffy]

hi list!
i found something wrong in eap_ttls from today's master. this is my 
output...

duffy



6) Found Auth-Type = EAP
(6) # Executing group from file /etc/raddb/sites-enabled/default
(6)   group authenticate {
(6)  - entering group authenticate {...}
(6) eap : Expiring EAP session with state 0x60afcad3650bdfed
(6) eap : Finished EAP session with state 0x60afcad3650bdfed
(6) eap : Previous EAP request found for state 0x60afcad3650bdfed, 
released from the list
(6) eap : Peer sent TTLS (21)
(6) eap : EAP TTLS (21)
(6) eap : Calling eap_ttls to process EAP data
(6) eap_ttls : Authenticate
(6) eap_ttls : processing EAP-TLS
(6) eap_ttls : eaptls_verify returned 7
(6) eap_ttls : Done initial handshake
(6) eap_ttls : eaptls_process returned 7
(6) eap_ttls : Session established.  Proceeding to decode tunneled 
attributes.

Program received signal SIGSEGV, Segmentation fault.
paircursorc (cursor=0x7fffffffcbc0, node=0x7fffffffcbf0) at 
src/lib/valuepair.c:233
233                     cursor->next = cursor->current->next;
Missing separate debuginfos, use: debuginfo-install 
freeradius-3.0.0-16.el6.x86_64

(gdb) info frame
Stack level 0, frame at 0x7fffffffca30:
  rip = 0x7ffff73b52c0 in paircursorc (src/lib/valuepair.c:233); saved 
rip 0x7fffeebc4717
  called by frame at 0x7fffffffcc40
  source language c.
  Arglist at 0x7fffffffca20, args: cursor=0x7fffffffcbc0, 
node=0x7fffffffcbf0
  Locals at 0x7fffffffca20, Previous frame's sp is 0x7fffffffca30
  Saved registers:
   rip at 0x7fffffffca28
(gdb) info args
cursor = 0x7fffffffcbc0
node = 0x7fffffffcbf0
(gdb)