Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.420 (Entity 5.420) RT-Send-CC: X-RT-Original-Encoding: iso-8859-1 Content-Length: 634 First patch looks fine; I adapted it to the current code (which was changed fairly heavily by Luke) and will commit shortly. I don't understand the second patch. The first hunk appears to be for Apple-specific code, so I'm ignoring that. The other hunks move a free(reply.enc_part.ciphertext.data) into the errorout label. But (a) that move seems unnecessary, since in the old location the data was freed immediately after it was allocated (i.e. on successful return from krb5_encode_kdc_rep), and (b) that move seems incorrect, since "goto errout" can happen in cases where reply.enc_part.ciphertext.data hasn't been initialized.