tok_type can never be -1
check gssEapRadiusAddAttr(REALM_NAME) return code
do not ignore sequenceCheck() return value
don't set major = GSS_S_FAILURE twice
zeroAndReleasePassword must be called with non-NULL buffer
gss_trailerlen = 0 not used
assert name non-NULL before dereferencing
gssHeaderLength redundantly initialized
take length of display_value, not value