I'm still tracing through the spnego_mech.c logic to evaluate the bug reports, but I noticed an obvious problem with the patch: the first hunk dereferences acc_NegState, which is not a pointer.