"dtcm: Coverity 88006" fixed this for buf, but not for string in the same function (and we may as well initialise string_head for consistency too).
This was an incorrect fix in "dtcm: Coverity 88382".
"dtcm: Coverity 89051" fixed an instance of this on the previous line, but not this one.