diff --git a/src/legacy.c b/src/legacy.c
index 56f58370..f5954df5 100644
--- a/src/legacy.c
+++ b/src/legacy.c
@@ -472,7 +472,7 @@ void privatekey_free(ssh_private_key prv) {
 ssh_string publickey_from_file(ssh_session session, const char *filename,
     int *type) {
     ssh_key key;
-    ssh_string key_str;
+    ssh_string key_str = NULL;
     int rc;
 
     (void) session; /* unused */
diff --git a/src/server.c b/src/server.c
index 605cd174..4a2ea2cc 100644
--- a/src/server.c
+++ b/src/server.c
@@ -157,7 +157,7 @@ SSH_PACKET_CALLBACK(ssh_packet_kexdh_init){
 static int dh_handshake_server(ssh_session session) {
   ssh_key pubkey;
   ssh_key privkey = NULL;
-  ssh_string pubkey_blob;
+  ssh_string pubkey_blob = NULL;
   ssh_string sig_blob;
   ssh_string f;
   int rc;
@@ -960,7 +960,7 @@ int ssh_message_auth_reply_pk_ok(ssh_message msg, ssh_string algo, ssh_string pu
 
 int ssh_message_auth_reply_pk_ok_simple(ssh_message msg) {
     ssh_string algo;
-    ssh_string pubkey_blob;
+    ssh_string pubkey_blob = NULL;
     int ret;
 
     algo = ssh_string_from_char(msg->auth_request.pubkey->type_c);