Very conveniently in git:
Found using the Clang Static Analyzer. Signed-off-by: Justus Winter <justus@g10code.com>
D337: 725_gnupg-nullptr.patch
D316: 657_free_akl.patch