virtualenv/FFmpeg
1
0
Fork 0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2025-08-04 22:03:09 +02:00
Code Issues Releases Activity

avcodec/hevc/hevcdec: Clean sao_pixel_buffer_v on allocation

Browse Source 
Fixes: use of uninitialized memory
Fixes: 378102648/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-5896308499480576

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
Michael Niedermayer
2025-07-23 13:05:29 +02:00
parent fa197924a6
commit 7a21c37f75
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
libavcodec/hevc/hevcdec.c
View File

@ -152,10 +152,10 @@ static int pic_arrays_init(HEVCLayerContext *l, const HEVCSPS *sps)
int w = sps->width >> sps->hshift[c_idx]; int w = sps->width >> sps->hshift[c_idx];
int h = sps->height >> sps->vshift[c_idx]; int h = sps->height >> sps->vshift[c_idx];
l->sao_pixel_buffer_h[c_idx] = l->sao_pixel_buffer_h[c_idx] =
av_malloc((w * 2 * sps->ctb_height) << av_mallocz((w * 2 * sps->ctb_height) <<
sps->pixel_shift); sps->pixel_shift);
l->sao_pixel_buffer_v[c_idx] = l->sao_pixel_buffer_v[c_idx] =
av_malloc((h * 2 * sps->ctb_width) << av_mallocz((h * 2 * sps->ctb_width) <<
sps->pixel_shift); sps->pixel_shift);
if (!l->sao_pixel_buffer_h[c_idx] || if (!l->sao_pixel_buffer_h[c_idx] ||
!l->sao_pixel_buffer_v[c_idx]) !l->sao_pixel_buffer_v[c_idx])