kdc_fast_response_handle_padata() replaces rep->padata, causing the old value to be leaked. As a minimal fix, free the old value of rep->padata before replacing it. http://src.mit.edu/fisheye/changelog/krb5/?cs=24724 Commit By: ghudson Revision: 24724 Changed Files: U trunk/src/kdc/fast_util.c