From b29800911a4c6b840904af2b7f912b6f8ad2b88f Mon Sep 17 00:00:00 2001
From: jailbird777 <jailbird@fdf.net>
Date: Tue, 1 Jun 2021 22:34:44 -0500
Subject: [PATCH] librb mbedTLS: der_pubkey is used out of scope

---
 librb/src/mbedtls.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/librb/src/mbedtls.c b/librb/src/mbedtls.c
index 116127a7..b65cc66a 100644
--- a/librb/src/mbedtls.c
+++ b/librb/src/mbedtls.c
@@ -370,13 +370,13 @@ rb_make_certfp(const mbedtls_x509_crt *const peer_cert, uint8_t certfp[const RB_
 	int ret;
 	void* data = peer_cert->raw.p;
 	size_t datalen = peer_cert->raw.len;
+	unsigned char der_pubkey[8192];
 
 	if(spki)
 	{
 		// Compiler may complain about dropping const qualifier on the cast below
 		// See <https://github.com/ARMmbed/mbedtls/issues/396> -- this is okay
 
-		unsigned char der_pubkey[8192];
 		if((ret = mbedtls_pk_write_pubkey_der((mbedtls_pk_context *)&peer_cert->pk,
 		                                       der_pubkey, sizeof der_pubkey)) < 0)
 		{