avformat/jvdec: clear packet padding after downsize
Fixes: use of uninitialized memeory Fixes: msan_uninit-mem_7fbf26b5fefe_5981_intro.jv Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
This commit is contained in:
@@ -190,6 +190,7 @@ static int read_packet(AVFormatContext *s, AVPacket *pkt)
|
|||||||
pkt->data[4] = jvf->video_type;
|
pkt->data[4] = jvf->video_type;
|
||||||
if ((size = avio_read(pb, pkt->data + JV_PREAMBLE_SIZE, size)) < 0)
|
if ((size = avio_read(pb, pkt->data + JV_PREAMBLE_SIZE, size)) < 0)
|
||||||
return AVERROR(EIO);
|
return AVERROR(EIO);
|
||||||
|
memset(pkt->data + JV_PREAMBLE_SIZE + size, 0, FF_INPUT_BUFFER_PADDING_SIZE);
|
||||||
|
|
||||||
pkt->size = size + JV_PREAMBLE_SIZE;
|
pkt->size = size + JV_PREAMBLE_SIZE;
|
||||||
pkt->stream_index = 1;
|
pkt->stream_index = 1;
|
||||||
|
Reference in New Issue
Block a user