fix segfault when checking invalid signatures

This is a rpm-4.14 regression where rpmReadPackageFile() no longer
initialize the header when the pkg is corrupted

2 files changed, 2 insertions, 1 deletions

diff --git a/NEWS b/NEWS
index 81444b7..bb7c2d7 100644
--- a/NEWS
+++ b/NEWS
@@ -1,4 +1,5 @@
 - testsuite:
+  o fix segfault with rpm-4.14 when checking invalid signatures
   o revert workaround perl-5.26 vs librpm bug which results on exit cleanup
 
 Version 5.14 - 7 September 2017
diff --git a/URPM.xs b/URPM.xs
index 8926770..cf2eac6 100644
--- a/URPM.xs
+++ b/URPM.xs
@@ -3136,7 +3136,7 @@ Urpm_verify_signature(filename, prefix=NULL)
   char result[1024];
   rpmRC rc;
   FD_t fd;
-  Header h;
+  Header h = headerNew();
   CODE:
   fd = Fopen(filename, "r");
   if (fd == NULL)