420static krb5_error_code validate_tgt(struct krb5_req *kr)
  421{
  422    krb5_error_code kerr;
  423    krb5_error_code kt_err;
Declaring variable "principal" without initializer.
  424    char *principal;
...
  461    /* Close the keytab here.  Even though we're using cursors, the file
  462     * handle is stored in the krb5_keytab structure, and it gets
  463     * overwritten when the verify_init_creds() call below creates its own
  464     * cursor, creating a leak. */
  465    kerr = krb5_kt_end_seq_get(kr->ctx, keytab, &cursor);
At conditional (7): "kerr != 0" taking the true branch.
  466    if (kerr != 0) {
At conditional (8): "1 <= debug_level" taking the true branch.
At conditional (9): "debug_timestamps" taking the true branch.
  467        DEBUG(1, ("krb5_kt_end_seq_get failed, not verifying TGT.\n"));
  468        goto done;
  469    }
...
Using uninitialized value "principal".
  505    if (principal != NULL) {
  506        sss_krb5_free_unparsed_name(kr->ctx, principal);
  507    }