- Liam Healy filed the debian bug report #480044
  (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480044) identifying a
  segfault when using krb5 ftp, but the krb4 code had the same problem.
diff --git a/CHANGES b/CHANGES
index f68c4f8..51b5bbe 100644
--- a/CHANGES
+++ b/CHANGES
@@ -7,6 +7,11 @@
                                   Changelog
 
 
+Daniel Stenberg (7 May 2008)
+- Liam Healy filed the debian bug report #480044
+  (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480044) identifying a
+  segfault when using krb5 ftp, but the krb4 code had the same problem.
+
 Yang Tse (7 May 2008)
 - Christopher Palow provided the patch (edited by me) that introduces the
   use of microsecond resolution keys for internal splay trees.
diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index 4ceb3f9..f2565fa 100644
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -31,6 +31,7 @@
  o libcurl sometimes sent body twice when using CURLAUTH_ANY
  o configure detecting debug-enabled c-ares
  o microsecond resolution keys for internal splay trees
+ o krb4 and krb5 ftp segfault
 
 This release includes the following known bugs:
 
@@ -52,6 +53,6 @@
  Michal Marek, Daniel Fandrich, Scott Barrett, Alexey Simak, Daniel Black,
  Rafa Muyo, Andre Guibert de Bruet, Brock Noland, Sandor Feldi, Stefan Krause,
  David Shaw, Norbert Frese, Bart Whiteley, Jean-Francois Bertrand, Ben Van Hof,
- Yuriy Sosov, Christopher Palow, Yang Tse
+ Yuriy Sosov, Christopher Palow, Yang Tse, Liam Healy
 
         Thanks! (and sorry if I forgot to mention someone)
diff --git a/lib/ftp.c b/lib/ftp.c
index 649da81..ba24376 100644
--- a/lib/ftp.c
+++ b/lib/ftp.c
@@ -622,9 +622,13 @@
   struct timeval now = Curl_tvnow();
   size_t nread;
   int cache_skip=0;
+  int value_to_be_ignored=0;
 
   if(ftpcode)
     *ftpcode = 0; /* 0 for errors */
+  else
+    /* make the pointer point to something for the rest of this function */
+    ftpcode = &value_to_be_ignored;
 
   *nreadp=0;