Rewrote check to prevent read of uninitialized data in
rsa_rsassa_pss_verify()

library/rsa.c

diff --git a/library/rsa.c b/library/rsa.c
index 7b78b4e..af07a49 100644
--- a/library/rsa.c
+++ b/library/rsa.c
@@ -1161,7 +1161,7 @@
 
     buf[0] &= 0xFF >> ( siglen * 8 - msb );
 
-    while( *p == 0 && p < buf + siglen )
+    while( p < buf + siglen && *p == 0 )
         p++;
 
     if( p == buf + siglen ||