[FFmpeg-cvslog] hevc: use av_mallocz() for allocating tab_ipm

Michael Niedermayer git at videolan.org
Tue Mar 11 11:39:21 CET 2014


ffmpeg | branch: release/2.2 | Michael Niedermayer <michaelni at gmx.at> | Sat Jan 11 20:23:51 2014 +0100| [d79cb6947e4a9c42ac20925dd920d3a0910d9a26] | committer: Reinhard Tartler

hevc: use av_mallocz() for allocating tab_ipm

Fixes use of uninitialized memory and out of stack array read.
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind

(cherry picked from commit 6cc94e971933cd38c452172bb048bf760e65cc3e)

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d79cb6947e4a9c42ac20925dd920d3a0910d9a26
---

 libavcodec/hevc.c |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavcodec/hevc.c b/libavcodec/hevc.c
index 65ad6d9..f8f7e64 100644
--- a/libavcodec/hevc.c
+++ b/libavcodec/hevc.c
@@ -212,7 +212,7 @@ static int pic_arrays_init(HEVCContext *s, const HEVCSPS *sps)
         goto fail;
 
     s->cbf_luma = av_malloc(sps->min_tb_width * sps->min_tb_height);
-    s->tab_ipm  = av_malloc(min_pu_size);
+    s->tab_ipm  = av_mallocz(min_pu_size);
     s->is_pcm   = av_malloc(min_pu_size);
     if (!s->tab_ipm || !s->cbf_luma || !s->is_pcm)
         goto fail;



More information about the ffmpeg-cvslog mailing list