Hello, I think src/lib/gssapi/generic/util_canonhost.c (g_canonicalize_host) leaks the memory of buffer `haddr' if `gethostbyaddr' fails to resolve. I am working with krb5-1.7.1 but version 1.8.3 seems not to have changed in that respect. Cheers, Markus