virtualenv/FFmpeg
1
0
Fork 0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2025-08-10 06:10:52 +02:00
Code Issues Releases Activity

avformat/rmdec: check that buf if completely filled

Browse Source 
Fixes: use of uninitialized value
Fixes: 70988/clusterfuzz-testcase-minimized-ffmpeg_dem_IVR_fuzzer-5298245077630976

Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
Michael Niedermayer
2024-08-16 14:47:42 +02:00
parent 9de721de70
commit 9578c135d0
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
libavformat/rmdec.c
View File

@@ -188,7 +188,8 @@ static int rm_read_audio_stream_info(AVFormatContext *s, AVIOContext *pb,
st->codecpar->ch_layout.nb_channels = avio_rb16(pb); st->codecpar->ch_layout.nb_channels = avio_rb16(pb);
if (version == 5) { if (version == 5) {
ast->deint_id = avio_rl32(pb); ast->deint_id = avio_rl32(pb);
avio_read(pb, buf, 4); if (avio_read(pb, buf, 4) != 4)
return AVERROR_INVALIDDATA;
buf[4] = 0; buf[4] = 0;
} else { } else {
AV_WL32(buf, 0); AV_WL32(buf, 0);