Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.411 (Entity 5.404) Subject: krb4's vts_long() and vts_short() corrupt memory X-RT-Original-Encoding: iso-8859-1 Content-Length: 280 krb4's vts_long() and vts_short() modify the passed in pointer so that the caller can no longer free it -- they return a pointer to the middle of the buffer. Also, they both write to the beginning of the buffer passed in, not appending data to the end like they should be doing.