Hi Team,

In resolve_target_cache() of krb5-1.16.1/src/clients/ksu/main.c,

When calls get_configured_defccname(), will store the allocated memory to target,

later if calling gen_sym() fails, this function returns without freeing the memory target points to.

The fix is to call "goto cleanup" instead of "return retval".

Could someone help to take a look?

Thanks,

Bean