diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2024-08-03 19:11:33 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2024-08-14 18:21:00 +0200 |
| commit | cba4e2e40dec1ff2ce534fec87c7e3e8bef7ff9b (patch) | |
| tree | e27ea0449a0075dc00b6a124cfc47cd7458fc1dd | |
| parent | a0f22218f74e3af73492e05e6696546b0da8d40e (diff) | |
| download | ffmpeg-cba4e2e40dec1ff2ce534fec87c7e3e8bef7ff9b.tar.gz | |
avcodec/mvha: Clear remaining space after inflate()
Fixes: use-of-uninitialized-value
Fixes: 70838/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_MVHA_fuzzer-4878509466517504
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
| -rw-r--r-- | libavcodec/mvha.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/libavcodec/mvha.c b/libavcodec/mvha.c index 24dd88e854..4aad56640e 100644 --- a/libavcodec/mvha.c +++ b/libavcodec/mvha.c @@ -183,6 +183,8 @@ static int decode_frame(AVCodecContext *avctx, AVFrame *frame, av_log(avctx, AV_LOG_ERROR, "Inflate error: %d\n", ret); return AVERROR_EXTERNAL; } + if (zstream->avail_out > 0) + memset(zstream->next_out, 0, zstream->avail_out); } } } else if (type == MKTAG('H','U','F','Y')) { |