This is an automated email from the git hooks/post-receive script.
Git pushed a commit to branch master
in repository ffmpeg.
The following commit(s) were added to refs/heads/master by this push:
new 263a85e2a2 avcodec/mscc: avcodec/mscc: allocate the RLE buffer with
av_mallocz to avoid heap disclosure
263a85e2a2 is described below
commit 263a85e2a2127396f8a2b0c329ec798e1ea015ad
Author: Umar Pathan <[email protected]>
AuthorDate: Mon Sep 7 00:32:19 2026 +0200
Commit: michaelni <[email protected]>
CommitDate: Mon Sep 28 03:48:31 2026 +0000
avcodec/mscc: avcodec/mscc: allocate the RLE buffer with av_mallocz to
avoid heap disclosure
Fixes: use of uninitialized memory
Fixes: poc.avi
Fixes: ROv3JuiJJEdT
Found-by: Umar Pathan (Umar0x)
---
libavcodec/mscc.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/libavcodec/mscc.c b/libavcodec/mscc.c
index ba48fc08d9..bc87169065 100644
--- a/libavcodec/mscc.c
+++ b/libavcodec/mscc.c
@@ -233,7 +233,7 @@ static av_cold int decode_init(AVCodecContext *avctx)
return AVERROR(ENOMEM);
s->uncomp_size = avctx->height * stride;
- if (!(s->uncomp_buf = av_malloc(s->uncomp_size)))
+ if (!(s->uncomp_buf = av_mallocz(s->uncomp_size)))
return AVERROR(ENOMEM);
return ff_inflate_init(&s->zstream, avctx);
--
To stop receiving notification emails like this one, please contact
[email protected].
_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]
