clang picked up on a path in which krberror is not set and passed as an argument to krb5_free_error(). Essentially if the clearresult length < 2 but everything decodes - you can hit this path... http://src.mit.edu/fisheye/changelog/krb5/?cs=22409 Commit By: epeisach Revision: 22409 Changed Files: U trunk/src/lib/krb5/krb/chpw.c