diff --git a/lib/gssapi/krb5/unwrap.c b/lib/gssapi/krb5/unwrap.c
index 7c5de22f4..7910a86ca 100644
--- a/lib/gssapi/krb5/unwrap.c
+++ b/lib/gssapi/krb5/unwrap.c
@@ -372,13 +372,13 @@ OM_uint32 _gsskrb5_unwrap
   if (qop_state != NULL)
       *qop_state = GSS_C_QOP_DEFAULT;
 
+  GSSAPI_KRB5_INIT (&context);
+
   if (ctx->more_flags & IS_CFX)
       return _gssapi_unwrap_cfx (minor_status, ctx, context,
 				 input_message_buffer, output_message_buffer,
 				 conf_state, qop_state);
 
-  GSSAPI_KRB5_INIT (&context);
-
   HEIMDAL_MUTEX_lock(&ctx->ctx_id_mutex);
   ret = _gsskrb5i_get_token_key(ctx, context, &key);
   HEIMDAL_MUTEX_unlock(&ctx->ctx_id_mutex);