From 2a699185158967cf3b122bc1be80c9c9c9eeaacf Mon Sep 17 00:00:00 2001
From: Nicolas Williams <nico@twosigma.com>
Date: Mon, 5 Jan 2026 20:18:29 -0600
Subject: [PATCH] kdc: Quiet some MSVC false positive warnings

---
 kdc/fast.c    | 4 ++--
 kdc/krb5tgs.c | 4 ++--
 kdc/mssfu.c   | 4 ++--
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/kdc/fast.c b/kdc/fast.c
index e7110db2f..1f2ba665e 100644
--- a/kdc/fast.c
+++ b/kdc/fast.c
@@ -108,7 +108,7 @@ get_fastuser_crypto(astgs_request_t r,
 		    krb5_crypto *crypto)
 {
     krb5_principal fast_princ;
-    HDB *fast_db;
+    HDB *fast_db = NULL;
     hdb_entry *fast_user = NULL;
     Key *cookie_key = NULL;
     krb5_crypto fast_crypto = NULL;
@@ -851,7 +851,7 @@ _kdc_fast_check_armor_pac(astgs_request_t r, int flags)
     krb5_boolean ad_kdc_issued = FALSE;
     krb5_pac mspac = NULL;
     krb5_principal armor_client_principal = NULL;
-    HDB *armor_db;
+    HDB *armor_db = NULL;
     hdb_entry *armor_client = NULL;
     char *armor_client_principal_name = NULL;
 
diff --git a/kdc/krb5tgs.c b/kdc/krb5tgs.c
index 2587a76ca..a9c90b0e8 100644
--- a/kdc/krb5tgs.c
+++ b/kdc/krb5tgs.c
@@ -1386,7 +1386,7 @@ tgs_build_reply(astgs_request_t priv,
     krb5_principal user2user_princ = NULL;
     char *spn = NULL, *cpn = NULL, *krbtgt_out_n = NULL;
     char *user2user_name = NULL;
-    HDB *user2user_krbtgtdb;
+    HDB *user2user_krbtgtdb = NULL;
     hdb_entry *user2user_krbtgt = NULL;
     HDB *clientdb = NULL;
     HDB *serverdb = NULL;
@@ -1405,7 +1405,7 @@ tgs_build_reply(astgs_request_t priv,
     char **capath = NULL;
     size_t num_capath = 0;
 
-    HDB *krbtgt_outdb;
+    HDB *krbtgt_outdb = NULL;
     hdb_entry *krbtgt_out = NULL;
 
     PrincipalName *s;
diff --git a/kdc/mssfu.c b/kdc/mssfu.c
index 9c13d5d7a..bc70b9e0b 100644
--- a/kdc/mssfu.c
+++ b/kdc/mssfu.c
@@ -109,7 +109,7 @@ validate_protocol_transition(astgs_request_t r)
     KDC_REQ_BODY *b = &r->req.req_body;
     EncTicketPart *ticket = &r->ticket->ticket;
     hdb_entry *s4u_client = NULL;
-    HDB *s4u_clientdb;
+    HDB *s4u_clientdb = NULL;
     int flags = HDB_F_FOR_TGS_REQ;
     krb5_principal s4u_client_name = NULL, s4u_canon_client_name = NULL;
     krb5_pac s4u_pac = NULL;
@@ -349,7 +349,7 @@ validate_constrained_delegation(astgs_request_t r)
     uint64_t s4u_pac_attributes;
     char *s4ucname = NULL, *s4usname = NULL;
     EncTicketPart evidence_tkt;
-    HDB *s4u_clientdb;
+    HDB *s4u_clientdb = NULL;
     hdb_entry *s4u_client = NULL;
     krb5_boolean ad_kdc_issued = FALSE;
     Key *clientkey;