kdc_fast_response_handle_padata() replaces rep->padata, causing the old value to be leaked. As a minimal fix, free the old value of rep->padata before replacing it. https://github.com/krb5/krb5/commit/05bccaa5a0d4eba3845fb26a0914ffe891f154ca Commit By: ghudson Revision: 24724 Changed Files: U trunk/src/kdc/fast_util.c