The variable sp is never initialized. If the first argument to the function is null, the code falls through to freeing sp if valid. However, sp is never set. http://src.mit.edu/fisheye/changelog/krb5/?cs=22402 Commit By: epeisach Revision: 22402 Changed Files: U trunk/src/lib/kadm5/srv/server_acl.c