Version-Release number of selected component (if applicable):
pam-0.99.6.2-3.16.fc6; the code is identical in pam-0.99.7.1-3.fc7.

Description of problem:
Reading pam_sm_open_session () in pam_xauth:
...
                putenv (xauthority); /* The environment owns this string now. */
...

        free(xauthority);

Steps to reproduce:
Replace userhelper by a wrapper script that runs real userhelper under valgrind,
then run wireshark through consolehelper.