clang picked up on a path in which krberror is not set and passed as an argument to krb5_free_error(). Essentially if the clearresult length < 2 but everything decodes - you can hit this path... https://github.com/krb5/krb5/commit/ccdee10e6b9c218f3e82e5987d716bfb7cbb1c90 Commit By: epeisach Revision: 22409 Changed Files: U trunk/src/lib/krb5/krb/chpw.c