Content-Type: text/plain; charset="gb2312"
Content-Transfer-Encoding: base64
X-RT-Original-Encoding: gb2312
Content-Length: 383

Hi Team,

In resolve_target_cache() of krb5-1.16.1/src/clients/ksu/main.c,
When calls get_configured_defccname(), will store the allocated memory to target,
later if calling gen_sym() fails, this function returns without freeing the memory target points to.

The fix is to call "goto cleanup" instead of "return retval".

Could someone help to take a look?

Thanks,
Bean