libssh2: avoid risking using an uninitialized local struct field

Reported-by: Joshua Rogers
Closes #19043

diff --git a/lib/vssh/libssh2.c b/lib/vssh/libssh2.c
index dfdb8526d610a5ccd47707329c79b847b35321b0..ee468bb35958429c1de3e63e877d5c4dba57bc7e 100644 (file)
--- a/lib/vssh/libssh2.c
+++ b/lib/vssh/libssh2.c
@@ -1428,6 +1428,7 @@ sftp_download_stat(struct Curl_easy *data,
     data->req.size = -1;
     data->req.maxdownload = -1;
     Curl_pgrsSetDownloadSize(data, -1);
+    attrs.filesize = 0; /* might be uninitialized but will be read below */
   }
   else {
     curl_off_t size = attrs.filesize;