--- url.c.orig	2008-01-28 00:41:56.000000000 +0200
+++ url.c	2008-02-24 14:25:37.000000000 +0200
@@ -2167,6 +2167,7 @@
     data->state.authproblem = FALSE;
 
     Curl_ntlm_cleanup(conn);
+    Curl_cleanup_negotiate (conn->data);
   }
 
   if(conn->handler->disconnect)
--- http_negotiate.c.orig	2008-02-24 13:50:53.000000000 +0200
+++ http_negotiate.c	2008-02-24 16:16:08.000000000 +0200
@@ -309,7 +309,6 @@
     aprintf("%sAuthorization: %s %s\r\n", proxy ? "Proxy-" : "",
             neg_ctx->protocol, encoded);
   free(encoded);
-  gss_release_buffer(&minor_status, &neg_ctx->output_token);
   return (conn->allocptr.userpwd == NULL) ? CURLE_OUT_OF_MEMORY : CURLE_OK;
 }