Bug in string_to_sid?

[J.W. Hoogervorst]

I think there is a bug in string_to_sid (util_sid.c). It starts allocating P
(with strdup), then
does next_token a few times, and finaly it does a SAFE_FREE(p).

Now, my smbd crashes consistently on this last SAFE_FREE. I found this stops
as soon
as I put an q=p just after the strdup, and do the SAFE_FREE with that.
Hopefully someone
who has some more knowledge of C than me can find a proper fix for this
problem...
(My C is a bit rusty; I only remember hello_world ;-)

P.S. I'm not on the list, so please cc me.

Jeroen