$NetBSD: patch-ab,v 1.5 1999/12/30 22:51:29 jlam Exp $

--- auth/rfc1938.c.orig	Thu Oct  7 17:21:07 1999
+++ auth/rfc1938.c	Thu Dec 30 17:23:44 1999
@@ -109,7 +109,7 @@
      * If the user is not in the OTP db, only post a fatal error if
      * we are running alone (since they may just use a normal passwd).
      */
-    if (rfc1938challenge(&rfc1938, pw->pw_name, challenge) != 0) {
+    if (rfc1938challenge(&rfc1938, pw->pw_name, challenge, sizeof(challenge)) != 0) {
 	if (IS_ONEANDONLY(auth)) {
 	    (void) fprintf(stderr,
 			   "%s: You do not exist in the %s database.\n",