diff --git a/lib/gssapi/accept_sec_context.c b/lib/gssapi/accept_sec_context.c
index 17f9857b0..b4d572676 100644
--- a/lib/gssapi/accept_sec_context.c
+++ b/lib/gssapi/accept_sec_context.c
@@ -78,6 +78,8 @@ gsskrb5_is_cfx(gss_ctx_id_t context_handle, int *is_cfx)
     krb5_keyblock *key;
     int acceptor = (context_handle->more_flags & LOCAL) == 0;
 
+    *is_cfx = 0;
+
     if (acceptor) {
 	if (context_handle->auth_context->local_subkey)
 	    key = context_handle->auth_context->local_subkey;
diff --git a/lib/gssapi/krb5/accept_sec_context.c b/lib/gssapi/krb5/accept_sec_context.c
index 17f9857b0..b4d572676 100644
--- a/lib/gssapi/krb5/accept_sec_context.c
+++ b/lib/gssapi/krb5/accept_sec_context.c
@@ -78,6 +78,8 @@ gsskrb5_is_cfx(gss_ctx_id_t context_handle, int *is_cfx)
     krb5_keyblock *key;
     int acceptor = (context_handle->more_flags & LOCAL) == 0;
 
+    *is_cfx = 0;
+
     if (acceptor) {
 	if (context_handle->auth_context->local_subkey)
 	    key = context_handle->auth_context->local_subkey;