get initialized as a side-effect after allocating a new decoder, but not when the decoder was reused.
decoder. There's no danger of information leak here, so it isn't required. Doing memzero() takes a lot of time with large dictionaries, which could make it easier to construct DoS attack to consume too much CPU time.