Always initialize the output token in gss_init_sec_context as required by RFC 2744 section 5.19. The krb5 code did this but the generic code didn't, causing a double-free in OpenSSH. Commit By: rra Revision: 18114 Changed Files: U trunk/src/lib/gssapi/mechglue/g_init_sec_context.c