[FFmpeg-devel] [PATCH 4/4] avformat/jpegxl_anim_dec: ensure input padding is zeroed
Kacper Michajłow
kasper93 at gmail.com
Thu Jun 27 03:40:37 EEST 2024
Fixes use of uninitialized value, reported by MSAN.
Found by OSS-Fuzz.
Signed-off-by: Kacper Michajłow <kasper93 at gmail.com>
---
libavformat/jpegxl_anim_dec.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/libavformat/jpegxl_anim_dec.c b/libavformat/jpegxl_anim_dec.c
index ac95d3b961..2338a2e8c0 100644
--- a/libavformat/jpegxl_anim_dec.c
+++ b/libavformat/jpegxl_anim_dec.c
@@ -124,6 +124,8 @@ static int jpegxl_anim_read_header(AVFormatContext *s)
}
}
+ memset(head + headsize, 0, AV_INPUT_BUFFER_PADDING_SIZE);
+
/* offset in bits of the animation header */
ret = ff_jpegxl_parse_codestream_header(head, headsize, &meta, 0);
if (ret < 0 || meta.animation_offset <= 0)
--
2.43.0
More information about the ffmpeg-devel
mailing list