krb5_kt_get_entry() allows a NULL principal to be given ("match all"). The get method of the HDB-as-keytab keytab did not know this, and could dereference a NULL as a result.