John Callaghan <jpc at msu.edu> writes: > If you supply a password to get_password (via ka_authenticate), then the > unintialized variable buf is passed to afs_string_to_key instead of password. Yes, yo are correct. I've applied you patch (and pulled it upto the 0.35 branch). Love