Not sure this is an acceptable patch. Certainly not required, but maybe good practice?
# cvs diff -Nup finger.c Index: finger.c =================================================================== RCS file: /cvs/src/usr.bin/finger/finger.c,v retrieving revision 1.18 diff -N -u -p finger.c --- finger.c 12 Nov 2009 15:33:21 -0000 1.18 +++ finger.c 10 Dec 2009 00:33:02 -0000 @@ -246,6 +246,8 @@ net: for (pn = nethead; pn; pn = pn->next) { } free(used); + used = NULL; + if (entries == 0) return;