Better fix: Delay setting 'outbuf' until after the header buffer might have been allocated locally, and set it in both code paths instead of just the confidentiality-requested code path. http://src.mit.edu/fisheye/changelog/krb5/?cs=22082 Commit By: raeburn Revision: 22082 Changed Files: U trunk/src/lib/gssapi/krb5/k5sealv3iov.c