diff --git a/servers/slapd/result.c b/servers/slapd/result.c
index cbd50098a9..ad2f22afb9 100644
--- a/servers/slapd/result.c
+++ b/servers/slapd/result.c
@@ -144,7 +144,7 @@ struct berval **get_entry_referrals(
 
 	if( i < 1 ) return NULL;
 
-	refs = ch_malloc( i + 1 );
+	refs = ch_malloc( (i + 1) * sizeof(struct berval *));
 
 	for( i=0, j=0; attr->a_vals[i] != NULL; i++ ) {
 		unsigned k;