6249699 PAM may access pointers after free() Summary: All comments in bug apply. Patch: http://icculus.org/~eviltypeguy/6249699.patch Solution: The solution was to remove the calls to free_env for the two cases documented since the goto for each case sends execution to the 'out:' block. The 'out:' block already takes care of freeing traverse if necessary. Furthemore, the code in the 'out:' block was reimplementing the same thing that the free_env function already provided. As such, the duplicated code was removed and free_env was opted to be used instead. Most of this change was pedantic and cleanup since double free was prevented from harm by definition checks prior to calling free. Testing: No testing beyond compilation and code review has been done. I am unsure how to test this particular change.