From 9d8fd0f2bba8edef6069d7c18c982465f1420ecd Mon Sep 17 00:00:00 2001
From: Philippe Teuwen <phil@teuwen.org>
Date: Fri, 14 May 2021 11:08:50 +0200
Subject: [PATCH] mbedtls: stack warning fix, cf
 17bce5fb5a66831b2c8fb5563ec81f0be27089c7

---
 common/mbedtls/ecdsa.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/common/mbedtls/ecdsa.c b/common/mbedtls/ecdsa.c
index cabfd4021..71068682e 100644
--- a/common/mbedtls/ecdsa.c
+++ b/common/mbedtls/ecdsa.c
@@ -703,8 +703,9 @@ int mbedtls_ecdsa_verify(mbedtls_ecp_group *grp,
 int ecdsa_signature_to_asn1(const mbedtls_mpi *r, const mbedtls_mpi *s,
                             unsigned char *sig, size_t *slen) {
     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;
-    unsigned char buf[MBEDTLS_ECDSA_MAX_LEN];
-    unsigned char *p = buf + sizeof(buf);
+
+    unsigned char buf[MBEDTLS_ECDSA_MAX_LEN] = {0};
+    unsigned char *p = buf + sizeof(buf) - 1;
     size_t len = 0;
 
     MBEDTLS_ASN1_CHK_ADD(len, mbedtls_asn1_write_mpi(&p, buf, s));