[krbdev.mit.edu #5876] init_rtree() assertion triggered in kvno

[Jeffrey Altman via RT]

The following is a stack trace when assert(ts->kdcs > 1); was triggered.
 I have a crash dump containing only stack information and no process
memory.  (Issue 956262-4-0434615306).  The sources match kfw 3.2.2 (krb5
1.6.3)

krb5_64!init_rtree(struct tr_state * ts = 0x00000000`0012f820, struct
krb5_principal_data * client = 0x00000000`0015c980, struct
krb5_principal_data * server = 0x00000000`0015ca70)+0xd7
[k:\temp\kfw\build\pismere\athena\auth\krb5\src\lib\krb5\krb\gc_frm_kdc.c
@ 346]

krb5_64!do_traversal(struct _krb5_context * ctx = 0x00000000`0028f570,
struct _krb5_ccache * ccache = 0x00000000`0015d540, struct
krb5_principal_data * client = 0x00000000`0015c980, struct
krb5_principal_data * server = 0x00000000`0015ca70, struct _krb5_creds *
out_cc_tgt = 0x00000000`0012fa80, struct _krb5_creds ** out_tgt =
0x00000000`0012fbe0, struct _krb5_creds *** out_kdc_tgts =
0x00000000`0012fcb0)+0x9c
[k:\temp\kfw\build\pismere\athena\auth\krb5\src\lib\krb5\krb\gc_frm_kdc.c
@ 710]

krb5_64!krb5_get_cred_from_kdc_opt(struct _krb5_context * context =
0x00000000`0028f570, struct _krb5_ccache * ccache = 0x00000000`0015d540,
struct _krb5_creds * in_cred = 0x00000000`0012fdd0, struct _krb5_creds
** out_cred = 0x00000000`0012fda8, struct _krb5_creds *** tgts =
0x00000000`0012fcb0, int kdcopt = 0)+0xbf1
[k:\temp\kfw\build\pismere\athena\auth\krb5\src\lib\krb5\krb\gc_frm_kdc.c
@ 1085]

krb5_64!krb5_get_cred_from_kdc(struct _krb5_context * context =
0x00000000`0028f570, struct _krb5_ccache * ccache = 0x00000000`0015d540,
struct _krb5_creds * in_cred = 0x00000000`0012fdd0, struct _krb5_creds
** out_cred = 0x00000000`0012fda8, struct _krb5_creds *** tgts =
0x00000000`0012fcb0)+0x43
[k:\temp\kfw\build\pismere\athena\auth\krb5\src\lib\krb5\krb\gc_frm_kdc.c
@ 1187]

krb5_64!krb5_get_credentials(struct _krb5_context * context =
0x00000000`0028f570, int options = 0, struct _krb5_ccache * ccache =
0x00000000`0015d540, struct _krb5_creds * in_creds =
0x00000000`0012fdd0, struct _krb5_creds ** out_creds =
0x00000000`0012fda8)+0x1a5
[k:\temp\kfw\build\pismere\athena\auth\krb5\src\lib\krb5\krb\get_creds.c
@ 144]

kvno!do_v5_kvno(int count = 1, char ** names = 0x00000000`00156ae8, char
* ccachestr = 0x00000000`00000000 "", char * etypestr =
0x00000000`00000000 "", char * keytab_name = 0x00000000`00000000 "",
char * sname = 0x00000000`00000000 "")+0x398
[k:\temp\kfw\build\pismere\athena\auth\krb5\src\clients\kvno\kvno.c @ 268]

kvno!main(int argc = 2, char ** argv = 0x00000000`00156ae0)+0x22f
[k:\temp\kfw\build\pismere\athena\auth\krb5\src\clients\kvno\kvno.c @ 119]