Help with Crash issue

[cards]

I am getting a crash in ircsprintf.c at line 289 ( if ((*str = *p1)) )
when I use the follwing
remove_user_from_channel(sptr, chptr);

sprt is coming from the HOOKTYPE_UMODE_CHANGE
chptr is set via lp->chptr

I can sendnotice to sptr chptr->name ( sendnotice(sptr, "Channel: %s", chptr->chname); )

Please tell me what I am doing wrong for remove_user_from_channel.

Thanks,
Cards

[cards]

Nevermind. As Syzop warned me. It was a read-after-free issue