Nack.
You still have unchecked talloc_strdup() calls in this patch in
select_principal_from_keytab().
I don't think so, all talloc_strdup() calls in that function are checked for
NULL output. But there was a tiny glitch, which is fixed in attached patch.
Jan