In pamtacplus.c in pamtacplus before 1.4.1, pamsmacct_mgmt does not zero out the arep data structure.