The "opaque" data belongs to handler, not to reply

diff --git a/src/modules/rlm_eap/types/rlm_eap_md5/rlm_eap_md5.c b/src/modules/rlm_eap/types/rlm_eap_md5/rlm_eap_md5.c
index 1882073..f2bbf26 100644 (file)
--- a/src/modules/rlm_eap/types/rlm_eap_md5/rlm_eap_md5.c
+++ b/src/modules/rlm_eap/types/rlm_eap_md5/rlm_eap_md5.c
@@ -73,7 +73,7 @@ static int md5_initiate(UNUSED void *instance, eap_handler_t *handler)
        /*
         *      Keep track of the challenge.
         */
-       handler->opaque = talloc_array(reply, uint8_t, reply->value_size);
+       handler->opaque = talloc_array(handler, uint8_t, reply->value_size);
        rad_assert(handler->opaque != NULL);
        memcpy(handler->opaque, reply->value, reply->value_size);
        handler->free_opaque = NULL;