initialize the octet string to empty so that we don't free garbage on error

diff --git a/lib/dns/spnego.c b/lib/dns/spnego.c
index d70130bb244b6868bfd2d54db848d414702c3fb6..4136cbb020fb2662305b1f79f730b236625b1d78 100644 (file)
--- a/lib/dns/spnego.c
+++ b/lib/dns/spnego.c
@@ -1000,6 +1000,9 @@ decode_octet_string(const unsigned char *p, size_t len,
        int e;
        size_t slen;
 
+       k->data = NULL;
+       k->length = 0;
+
        e = der_match_tag(p, len, ASN1_C_UNIV, PRIM, UT_OctetString, &l);
        if (e)
                return (e);