diff --git a/iked/ikev2_pld.c b/iked/ikev2_pld.c
index 05ed27a0..fcf19e34 100644
--- a/iked/ikev2_pld.c
+++ b/iked/ikev2_pld.c
@@ -1048,9 +1048,10 @@ ikev2_pld_notify(struct iked *env, struct ikev2_payload *pld,
 {
 	struct ikev2_notify	 n;
 	const struct iked_sa	*sa = msg->msg_sa;
-	uint8_t			*buf, md[SHA_DIGEST_LENGTH];
-	uint32_t		 spi32;
-	uint64_t		 spi64;
+	uint8_t			*buf;
+	uint8_t 		 md[SHA_DIGEST_LENGTH] = {0};
+	uint32_t		 spi32 = 0;
+	uint64_t		 spi64 = 0;
 	struct iked_spi		*rekey;
 	uint16_t		 type;
 	uint16_t		 signature_hash;