On Tue, Feb 06, 2018 at 01:26:41PM +0000, maya%netbsd.org@localhost wrote: > BN_clear_free will null deref on this error path I think oops, I"m relying on ctags and went into the heimdal BN_clear_free instead which does this, and not the openssl which does NULL test.