This does not replicate on my setup, thus this is a blind fix based on ossfuzz trace Fixes: use of uninitialized value Fixes: 71747/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-5427736120721408
Unified · Split
| @@ -129,7 +129,7 @@ static int pic_arrays_init(HEVCLayerContext *l, const HEVCSPS *sps) · 128 unmodified lines | |||
| 129 | l->filter_slice_edges = av_mallocz(ctb_count); | 129 | l->filter_slice_edges = av_mallocz(ctb_count); |
| 130 | l->tab_slice_address = av_malloc_array(pic_size_in_ctb, | 130 | l->tab_slice_address = av_malloc_array(pic_size_in_ctb, |
| 131 | sizeof(*l->tab_slice_address)); | 131 | sizeof(*l->tab_slice_address)); |
| 132 | l->qp_y_tab = av_malloc_array(pic_size_in_ctb, | 132 | l->qp_y_tab = av_calloc(pic_size_in_ctb, |
| 133 | sizeof(*l->qp_y_tab)); | 133 | sizeof(*l->qp_y_tab)); |
| 134 | if (!l->qp_y_tab || !l->filter_slice_edges || !l->tab_slice_address) | 134 | if (!l->qp_y_tab || !l->filter_slice_edges || !l->tab_slice_address) |
| 135 | goto fail; | 135 | goto fail; |