http://web.mit.edu/kerberos/advisories/2011-003-patch.txt

--- src/kdc/do_as_req.c	2011-03-18 05:27:29.000000000 -0400
+++ src/kdc/do_as_req.c.oden	2011-03-18 05:27:44.000000000 -0400
@@ -791,6 +791,8 @@ prepare_error_as (struct kdc_request_sta
                     pad->contents = td[size]->data;
                     pad->length = td[size]->length;
                     pa[size] = pad;
+                    td[size]->data = NULL;
+                    td[size]->length = 0;
                 }
             krb5_free_typed_data(kdc_context, td);
         }