diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2024-08-14 16:34:19 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2024-08-18 23:05:40 +0200 |
| commit | 7e5410eadb51645e67d91708494c7566771f9015 (patch) | |
| tree | efc9552e789b9f9b5736324860e0e2758cab61c8 | |
| parent | 67947f2a1cbfe6ee83dfaf2a068b041d06802320 (diff) | |
| download | ffmpeg-7e5410eadb51645e67d91708494c7566771f9015.tar.gz | |
avformat/iamf_parse: clear padding
Fixes: use of uninitialized value
Fixes: 70929/clusterfuzz-testcase-minimized-ffmpeg_dem_IAMF_fuzzer-5931276639469568
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: James Almer <jamrial@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavformat/iamf_parse.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/libavformat/iamf_parse.c b/libavformat/iamf_parse.c index bc8d726b53..080c1a457a 100644 --- a/libavformat/iamf_parse.c +++ b/libavformat/iamf_parse.c @@ -1081,6 +1081,7 @@ int ff_iamfdec_read_descriptors(IAMFContext *c, AVIOContext *pb, size = avio_read(pb, header, FFMIN(MAX_IAMF_OBU_HEADER_SIZE, max_size)); if (size < 0) return size; + memset(header + size, 0, AV_INPUT_BUFFER_PADDING_SIZE); len = ff_iamf_parse_obu_header(header, size, &obu_size, &start_pos, &type, NULL, NULL); if (len < 0 || obu_size > max_size) { |