acc_ctx_new() can return an error condition without establishing a SPNEGO context structure. This can cause a null pointer dereference in cleanup code in spnego_gss_accept_sec_context(). http://src.mit.edu/fisheye/changelog/krb5/?cs=22084 Commit By: tlyu Revision: 22084 Changed Files: U trunk/src/lib/gssapi/spnego/spnego_mech.c