I've created issue #7089 (with fix) for the lack of buffer initialization in the mechglue gss_get_name_attribute, and issue #7090 for the minor cleanup issue if the second data_to_gss call fails. Changing the status of this issue to review.