hevc: use av_mallocz() for allocating tab_ipm
Fixes use of uninitialized memory and out of stack array read. Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
This commit is contained in:
committed by
Vittorio Giovara
parent
920c01adce
commit
6cc94e9719
@@ -212,7 +212,7 @@ static int pic_arrays_init(HEVCContext *s, const HEVCSPS *sps)
|
|||||||
goto fail;
|
goto fail;
|
||||||
|
|
||||||
s->cbf_luma = av_malloc(sps->min_tb_width * sps->min_tb_height);
|
s->cbf_luma = av_malloc(sps->min_tb_width * sps->min_tb_height);
|
||||||
s->tab_ipm = av_malloc(min_pu_size);
|
s->tab_ipm = av_mallocz(min_pu_size);
|
||||||
s->is_pcm = av_malloc(min_pu_size);
|
s->is_pcm = av_malloc(min_pu_size);
|
||||||
if (!s->tab_ipm || !s->cbf_luma || !s->is_pcm)
|
if (!s->tab_ipm || !s->cbf_luma || !s->is_pcm)
|
||||||
goto fail;
|
goto fail;
|
||||||
|
Reference in New Issue
Block a user