From: Daniel Stenberg <daniel@haxx.se>
Date: Mon, 13 Oct 2025 07:40:38 +0000 (+0200)
Subject: libssh2: avoid risking using an uninitialized local struct field
X-Git-Tag: rc-8_17_0-2~92
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=f1828b54047dba804d04e4c0ebd402c6e9a11533;p=thirdparty%2Fcurl.git

libssh2: avoid risking using an uninitialized local struct field

Reported-by: Joshua Rogers
Closes #19043
---

diff --git a/lib/vssh/libssh2.c b/lib/vssh/libssh2.c
index dfdb8526d6..ee468bb359 100644
--- a/lib/vssh/libssh2.c
+++ b/lib/vssh/libssh2.c
@@ -1428,6 +1428,7 @@ sftp_download_stat(struct Curl_easy *data,
     data->req.size = -1;
     data->req.maxdownload = -1;
     Curl_pgrsSetDownloadSize(data, -1);
+    attrs.filesize = 0; /* might be uninitialized but will be read below */
   }
   else {
     curl_off_t size = attrs.filesize;