import from HEAD:

	otp_authenticate(): malloc raw_state before using it

diff --cc src/modules/rlm_otp/otp_rlm.c
index 81e57de,cc891b1..6e1a1d3
--- 1/src/modules/rlm_otp/otp_rlm.c
--- 2/src/modules/rlm_otp/otp_rlm.c
+++ b/src/modules/rlm_otp/otp_rlm.c
@@@ -498,9 -498,11 +498,11 @@@ otp_authenticate(void *instance, REQUES
           * Verify the state.
           */
  
-         /* ASCII decode */
          rad_state = rad_malloc(e_length + 1);
 -        (void) memcpy(rad_state, vp->vp_strvalue, vp->length);
+         raw_state = rad_malloc(e_length / 2);
+ 
+         /* ASCII decode */
 +        (void) memcpy(rad_state, vp->strvalue, vp->length);
          rad_state[e_length] = '\0';
          (void) otp_keystring2keyblock(rad_state, raw_state);
          free(rad_state);