From 706dca18d0a849dc867f3a6e2b8909e23d2b28ad Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Sat, 11 Jan 2014 20:23:51 +0100 Subject: [PATCH] avcodec/hevc: use av_mallocz() for allocating tab_ipm Fixes use of uninitialized memory and out of stack array read Fixes: signal_sigsegv_ecc526_7846_WPP_C_ericsson_MAIN_2.bit Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer (cherry picked from commit 0999f1613bc48ed9d6578a3ad7bcd17610e07fbf) Conflicts: libavcodec/hevc.c --- libavcodec/hevc.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavcodec/hevc.c b/libavcodec/hevc.c index a16b045a35..8b15ec58b0 100644 --- a/libavcodec/hevc.c +++ b/libavcodec/hevc.c @@ -109,7 +109,7 @@ static int pic_arrays_init(HEVCContext *s) if (!s->skip_flag || !s->tab_ct_depth) goto fail; - s->tab_ipm = av_malloc(pic_size_in_min_pu); + s->tab_ipm = av_mallocz(pic_size_in_min_pu); s->cbf_luma = av_malloc(pic_width_in_min_tu * pic_height_in_min_tu); s->is_pcm = av_malloc(pic_size_in_min_pu); if (!s->tab_ipm || !s->cbf_luma || !s->is_pcm)