diff options
author | Michael Niedermayer <michaelni@gmx.at> | 2013-12-21 12:52:23 +0100 |
---|---|---|
committer | Michael Niedermayer <michaelni@gmx.at> | 2013-12-21 23:27:09 +0100 |
commit | b797a00f634686b6a1752cbb55a7c95d361fa838 (patch) | |
tree | 5f2c272638c1ef5df18d39aafbff41004c27eef4 /libavformat/rmdec.c | |
parent | ea1e630c47e70672a7933c048090601ce09c8195 (diff) | |
download | ffmpeg-b797a00f634686b6a1752cbb55a7c95d361fa838.tar.gz |
avformat/rmdec: zero string destination before use
Fixes use of uninitialized memory
Fixes: msan_uninit-mem_7f9677850d99_4635_crashed.rm
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Diffstat (limited to 'libavformat/rmdec.c')
-rw-r--r-- | libavformat/rmdec.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/libavformat/rmdec.c b/libavformat/rmdec.c index b0876fe5bd..a8af378a8e 100644 --- a/libavformat/rmdec.c +++ b/libavformat/rmdec.c @@ -185,6 +185,7 @@ static int rm_read_audio_stream_info(AVFormatContext *s, AVIOContext *pb, avio_read(pb, buf, 4); buf[4] = 0; } else { + AV_WL32(buf, 0); get_str8(pb, buf, sizeof(buf)); /* desc */ ast->deint_id = AV_RL32(buf); get_str8(pb, buf, sizeof(buf)); /* desc */ |