From Huzaifa Sidhpurwala of the Red Hat Security Response Team: Don't free uninitialized memory. See also: bug 5652.