--- samba-3.4.4/source3/modules/vfs_cap.c	2010-01-04 22:01:25.000000000 +0900
+++ vfs_cap.c	2010-01-13 10:34:51.000000000 +0900
@@ -600,12 +600,13 @@
 	size_t len = 0;
 
 	for (p1 = from; *p1; len++) {
-		if (is_hex(from)) {
+		if (is_hex(p1)) {
 			p1 += 3;
 		} else {
 			p1++;
 		}
 	}
+	len++;
 
 	to = TALLOC_ARRAY(ctx, char, len);
 	if (!to) {