diff --git a/common/password-hash.c b/common/password-hash.c
index b0cd13e1..d249e11d 100644
--- a/common/password-hash.c
+++ b/common/password-hash.c
@@ -43,7 +43,7 @@ pbkdf2_sha256_derive_key (const char *data_in, int in_len,
 {
     int iteration = params->iteration;
 
-    unsigned char salt_bin[32];
+    unsigned char salt_bin[32] = {0};
     hex_to_rawdata (salt, salt_bin, 32);
 
     PKCS5_PBKDF2_HMAC (data_in, in_len,