History

avcodec/ilbcdec: Clear cbvec when used with create_augmented_vector()

Fixes: use of uninitialized memory Fixes: 42538134/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ILBC_fuzzer-6322020827070464

Michael Niedermayer committed 1 year ago

Commit a6762671 parent bd55bf81 file · +2 −0Browse files

Showing the changes to libavcodec (1 of 1 file). Show all

Unified · Split

libavcodec/ilbcdec.c+2−0
@@ -675,6 +675,7 @@ static void get_codebook(int16_t * cbvec, /* (o) Constructed codebook vector * · 674 unmodified lines
675675 /* get vector */
676676 memcpy(cbvec, mem + lMem - k, cbveclen * 2);
677677 } else if (index < base_size) {
678+ memset(cbvec, 0, cbveclen * 2);
678679
679680 /* Calculate lag */
680681
@@ -701,6 +702,7 @@ static void get_codebook(int16_t * cbvec, /* (o) Constructed codebook vector * · 20 unmodified lines
701702
702703 filter_mafq12(&mem[memIndTest + 4], cbvec, kCbFiltersRev, CB_FILTERLEN, cbveclen);
703704 } else {
705+ memset(cbvec, 0, cbveclen * 2);
704706 /* interpolated vectors */
705707 /* Stuff zeros outside memory buffer */
706708 memIndTest = lMem - cbveclen - CB_FILTERLEN;

Keyboard shortcuts

General

Show keyboard shortcuts
?
Focus the current search
/

Issues and pull requests

Open filters
f

Issues, pull requests and Inbox

Select next item
j↓
Select previous item
k↑
Open selected item
Enter
Dismiss filters or clear selection
Esc

Repository code

Go to file
t