diff --git a/library/ecdsa.c b/library/ecdsa.c
index 35713a6..9220633 100644
--- a/library/ecdsa.c
+++ b/library/ecdsa.c
@@ -651,7 +651,7 @@
                                     unsigned char *sig, size_t *slen )
 {
     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;
-    unsigned char buf[MBEDTLS_ECDSA_MAX_LEN];
+    unsigned char buf[MBEDTLS_ECDSA_MAX_LEN] = {0};
     unsigned char *p = buf + sizeof( buf );
     size_t len = 0;