crash in 1.0.5

[Norbert Wegener]

freeradius crashes in 1.0.5 with:
in radius.conf:

 passwd nwfiles {
        filename = /etc/raddb/gug    
        format = "~User-Category:*User-Name"
        }

 /etc/raddb/gug
##########################################################
newgroup:*Norbert Wegener TCGID=ZZZZZ1EC
##########################################################

and a users file
##########################################################
"Norbert Wegener TCGID=ZZZZZ1EC" User-Category=="newgroup"
        Fall-Through = Yes,

DEFAULT User-Category== "newgroup"
        Service-Type = Framed-User,
        Framed-Protocol = PPP,
        Cisco-AVPair += "ip:addr-pool=newgroup",
        Fall-Through = No,


DEFAULT Auth-Type == Reject

##########################################################
freeradius crashes in 1.0.5, when starting a connection, the 
configuration files are read. When a clients start a connection,
gdb shows:
(gdb) bt
#0  rad_mangle (data=0x812afc0, request=<value optimized out>) at 
rlm_preprocess.c:186
#1  0x403432c4 in preprocess_authorize (instance=0x812afc0, 
request=0x81320a0) at rlm_preprocess.c:497
#2  0x0805655c in modcall (component=1, c=0x812b6c0, request=0x81320a0) 
at modcall.c:219
#3  0x0805677f in modcall (component=1, c=0x812c938, request=0x81320a0) 
at modcall.c:252
#4  0x08054d30 in indexed_modcall (comp=1, idx=1, request=0x81320a0) at 
modules.c:469
#5  0x0805281e in rad_authenticate (request=0x81320a0) at auth.c:592
#6  0x0804c156 in rad_respond (request=0x81320a0, fun=0x8052790 
<rad_authenticate>) at radiusd.c:1642
#7  0x0804db80 in main (argc=4, argv=0xbffff534) at radiusd.c:1427

We use certificates and eap tls.
If you need more information, please let me know.
Norbert Wegener