In src/md5.c, there’s a case where `memset` is called with `sizeof(ctx)` which is a pointer variable, and thus isn’t doing what’s expected.