virtualenv/FFmpeg
1
0
Fork 0
mirror of https://github.com/FFmpeg/FFmpeg.git synced 2025-08-04 22:03:09 +02:00
Code Issues Releases Activity

avcodec/dxvenc: Clear width to linesize not linesize to linesize

Browse Source 
Fixes: use of uninitialized memory
Fixes: 422217206/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_DXV_fuzzer-4786889444098048

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
Michael Niedermayer
2025-07-23 21:25:37 +02:00
parent 909229b880
commit a45755e302
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
libavcodec/dxvenc.c
View File

@ -197,8 +197,9 @@ static int dxv_encode(AVCodecContext *avctx, AVPacket *pkt,
avctx->height); avctx->height);
if (avctx->width != DXV_ALIGN(avctx->width)) { if (avctx->width != DXV_ALIGN(avctx->width)) {
av_assert0(frame->format == AV_PIX_FMT_RGBA);
for (int y = 0; y < avctx->height; y++) { for (int y = 0; y < avctx->height; y++) {
memset(safe_data[0] + y * safe_linesize[0] + frame->linesize[0], 0, safe_linesize[0] - frame->linesize[0]); memset(safe_data[0] + y * safe_linesize[0] + 4*avctx->width, 0, safe_linesize[0] - 4*avctx->width);
} }
} }
if (avctx->height != DXV_ALIGN(avctx->height)) { if (avctx->height != DXV_ALIGN(avctx->height)) {