diff --git a/lib/krb5/rd_priv.c b/lib/krb5/rd_priv.c
index 0f75aaf05..150453b87 100644
--- a/lib/krb5/rd_priv.c
+++ b/lib/krb5/rd_priv.c
@@ -50,6 +50,9 @@ krb5_rd_priv(krb5_context context,
     krb5_keyblock *key;
     krb5_crypto crypto;
 
+    if (outdata)
+	krb5_data_zero(outdata);
+
     if ((auth_context->flags & 
 	 (KRB5_AUTH_CONTEXT_RET_TIME | KRB5_AUTH_CONTEXT_RET_SEQUENCE)) &&
 	outdata == NULL)
@@ -158,7 +161,7 @@ krb5_rd_priv(krb5_context context,
 	 (KRB5_AUTH_CONTEXT_RET_TIME | KRB5_AUTH_CONTEXT_RET_SEQUENCE))) {
 	/* if these fields are not present in the priv-part, silently
            return zero */
-	memset(outdata, 0, sizeof(*outdata));
+	krb5_data_zero(outdata);
 	if(part.timestamp)
 	    outdata->timestamp = *part.timestamp;
 	if(part.usec)