PR #24465 opened by michaelni URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24465 Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24465.patch
Fixes: use of uninitialized memory Fixes: poc.avi Fixes: ROv3JuiJJEdT Found-by: Umar Pathan (Umar0x) >From 20f60e3ec01e3a90af4df69e338566b997347cf4 Mon Sep 17 00:00:00 2001 From: Umar Pathan <[email protected]> Date: Mon, 7 Sep 2026 00:32:19 +0200 Subject: [PATCH] avcodec/mscc: avcodec/mscc: allocate the RLE buffer with av_mallocz to avoid heap disclosure Fixes: use of uninitialized memory Fixes: poc.avi Fixes: ROv3JuiJJEdT Found-by: Umar Pathan (Umar0x) --- libavcodec/mscc.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavcodec/mscc.c b/libavcodec/mscc.c index ba48fc08d9..bc87169065 100644 --- a/libavcodec/mscc.c +++ b/libavcodec/mscc.c @@ -233,7 +233,7 @@ static av_cold int decode_init(AVCodecContext *avctx) return AVERROR(ENOMEM); s->uncomp_size = avctx->height * stride; - if (!(s->uncomp_buf = av_malloc(s->uncomp_size))) + if (!(s->uncomp_buf = av_mallocz(s->uncomp_size))) return AVERROR(ENOMEM); return ff_inflate_init(&s->zstream, avctx); -- 2.52.0 _______________________________________________ ffmpeg-devel mailing list -- [email protected] To unsubscribe send an email to [email protected]
