diff options
| author | Kacper Michajłow <kasper93@gmail.com> | 2024-06-27 02:40:35 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2024-08-05 23:17:46 +0200 |
| commit | 5dfc0cc84129758b4eab2acdc3e186c3116deacd (patch) | |
| tree | b7cf0e0b9c32a4bc2468928ee91fd7f5bfb26bc7 /libavcodec | |
| parent | 2b5f000d3f6f9e737e918a5438e6c881f65e70e2 (diff) | |
| download | ffmpeg-5dfc0cc84129758b4eab2acdc3e186c3116deacd.tar.gz | |
avcodec/parser: ensure input padding is zeroed
Fixes use of uninitialized value, reported by MSAN.
Found by OSS-Fuzz.
Signed-off-by: Kacper Michajłow <kasper93@gmail.com>
Fixes: 70852/clusterfuzz-testcase-minimized-ffmpeg_IO_DEMUXER_fuzzer-5179190066872320
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavcodec')
| -rw-r--r-- | libavcodec/parser.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/libavcodec/parser.c b/libavcodec/parser.c index af17ee9c15..426cc314fb 100644 --- a/libavcodec/parser.c +++ b/libavcodec/parser.c @@ -236,6 +236,7 @@ int ff_combine_frame(ParseContext *pc, int next, } pc->buffer = new_buffer; memcpy(&pc->buffer[pc->index], *buf, *buf_size); + memset(&pc->buffer[pc->index + *buf_size], 0, AV_INPUT_BUFFER_PADDING_SIZE); pc->index += *buf_size; return -1; } |