Content-Type: text/html; charset="gb2312" Content-Transfer-Encoding: quoted-printable X-RT-Original-Encoding: gb2312 Content-Length: 826
Hi Team,

In resolve_target_cache() of krb5-1.16.1/src/clients/ksu/main.c,
When calls get_configured_defccname(), will store the allocated memory to target,
later if calling gen_sym() fails, this function returns without freeing the memory target points to.

The fix is to call "goto cleanup" instead of "return retval".

Could someone help to take a look?

Thanks,
Bean