Browse Source

avcodec/iff: warn about truncated input to decode_byterun() and clear remaining output

Fixes use of uninitialized memory
Fixes: msan_uninit-mem_7fe205e395ed_8988_test.iff
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
tags/n2.2-rc1
Michael Niedermayer 12 years ago
parent
commit
b3f44eafa5
1 changed files with 4 additions and 0 deletions
  1. +4
    -0
      libavcodec/iff.c

+ 4
- 0
libavcodec/iff.c View File

@@ -499,6 +499,10 @@ static int decode_byterun(uint8_t *dst, int dst_size,
}
x += length;
}
if (x < dst_size) {
av_log(NULL, AV_LOG_WARNING, "decode_byterun ended before plane size\n");
memset(dst+x, 0, dst_size - x);
}
return buf - buf_start;
}



Loading…
Cancel
Save