The SPNEGO implementation in krb5-1.7 and later could crash due to assertion failure when receiving some sorts of invalid GSS-API tokens. http://src.mit.edu/fisheye/changelog/krb5/?cs=23832 Commit By: tlyu Revision: 23832 Changed Files: U trunk/src/lib/gssapi/spnego/spnego_mech.c