[FFmpeg-cvslog] swscale/slice: clear allocated memory in alloc_lines()
Michael Niedermayer
git at videolan.org
Mon Dec 2 04:28:17 EET 2024
ffmpeg | branch: master | Michael Niedermayer <michael at niedermayer.cc> | Sat Oct 19 00:08:03 2024 +0200| [aeec39f3c1be82863efe64ce95242de58e075e8f] | committer: Michael Niedermayer
swscale/slice: clear allocated memory in alloc_lines()
Fixes: use of uninitialized memory in hScale16To15_c()
Fixes: 373924007/clusterfuzz-testcase-minimized-ffmpeg_SWS_fuzzer-5841199968092160
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>
> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=aeec39f3c1be82863efe64ce95242de58e075e8f
---
libswscale/slice.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/libswscale/slice.c b/libswscale/slice.c
index 72e88be318..2f660db4b6 100644
--- a/libswscale/slice.c
+++ b/libswscale/slice.c
@@ -60,7 +60,7 @@ static int alloc_lines(SwsSlice *s, int size, int width)
for (j = 0; j < n; ++j) {
// chroma plane line U and V are expected to be contiguous in memory
// by mmx vertical scaler code
- s->plane[i].line[j] = av_malloc(size * 2 + 32);
+ s->plane[i].line[j] = av_mallocz(size * 2 + 32);
if (!s->plane[i].line[j]) {
free_lines(s);
return AVERROR(ENOMEM);
More information about the ffmpeg-cvslog
mailing list