Comment 0 for bug 1700077

aac_send_raw_srb() allocates a variable named reply on the stack and later copies its contents to userspace. However not all branches of the code initializes all fields of reply, representing a possible information leak. The memory should be zeroed out initially to prevent this.