In src/lib/gssapi/mech/glue/g_initialize.c if build_mechSet() successfully locks g_mechListLock but fails to lock g_mechSetLock, you would leak the first lock. It's unlikely and we haven't actually seen it happen.