Browse Source

avformat/mpc8: clear buffer padding area

Fixes use of uninitialized memory
Fixes: msan_uninit-mem_7fa6a48cd1d5_8853_sv8_notags.mpc
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
tags/n2.2-rc1
Michael Niedermayer 12 years ago
parent
commit
e33b6ccfa7
1 changed files with 2 additions and 0 deletions
  1. +2
    -0
      libavformat/mpc8.c

+ 2
- 0
libavformat/mpc8.c View File

@@ -157,6 +157,8 @@ static void mpc8_parse_seektable(AVFormatContext *s, int64_t off)
if(!(buf = av_malloc(size + FF_INPUT_BUFFER_PADDING_SIZE)))
return;
avio_read(s->pb, buf, size);
memset(buf+size, 0, FF_INPUT_BUFFER_PADDING_SIZE);

init_get_bits(&gb, buf, size * 8);
size = gb_get_v(&gb);
if(size > UINT_MAX/4 || size > c->samples/1152){


Loading…
Cancel
Save