diff -up openslp-2.0.0/slpd/slpd_process.c.orig openslp-2.0.0/slpd/slpd_process.c
--- openslp-2.0.0/slpd/slpd_process.c.orig	2018-05-09 13:08:06.185104375 +0200
+++ openslp-2.0.0/slpd/slpd_process.c	2018-05-09 13:07:21.017095089 +0200
@@ -462,6 +462,15 @@ static int ProcessSrvRqst(SLPMessage * m
          message->body.srvrqst.srvtype, 23, SLP_DA_SERVICE_TYPE) == 0)
    {
       errorcode = ProcessDASrvRqst(message, sendbuf, errorcode);
+
+      if (result != *sendbuf)
+      {
+         // The pointer stored at *sendbuf can be modified by a realloc
+         // operation in ProcessDASrvRqst().  Fix up the local copy of
+         // that pointer if necessary.
+         result = *sendbuf;
+      }
+
       if (errorcode == 0)
       {
          /* Since we have an errorcode of 0, we were successful,