Browse Source

avformat/iff: shrink packets to the initialized data

Fixes use of uninitialized data
Fixes: msan_uninit-mem_7f65b9788da6_388_24.iff
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
tags/n2.2-rc1
Michael Niedermayer 11 years ago
parent
commit
2b31a9c613
1 changed files with 2 additions and 0 deletions
  1. +2
    -0
      libavformat/iff.c

+ 2
- 0
libavformat/iff.c View File

@@ -462,6 +462,8 @@ static int iff_read_packet(AVFormatContext *s,
buf = pkt->data;
bytestream_put_be16(&buf, 2);
ret = avio_read(pb, buf, iff->body_size);
if (ret>=0 && ret < iff->body_size)
av_shrink_packet(pkt, ret + 2);
} else {
av_assert0(0);
}


Loading…
Cancel
Save