In the KDC, get_preauth_hint_list had two bugs initializing the preauth array. It was allocating 21 extra entries instead of two due to a typo (harmless), and it was only zeroing up through one extra entry (harmful). Adjust the code to use calloc to avoid further disagreements of this nature. https://github.com/krb5/krb5/commit/704e18e821c217c65f3c1ae2103d7d5e9b9e78f7 Commit By: ghudson Revision: 22369 Changed Files: U trunk/src/kdc/kdc_preauth.c