in pack mode the array is passed into decode_plane() without being initialized or used Fixes: use of uninitialized memory Fixes: 438780119/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_UTVIDEO_DEC_fuzzer-5464037027807232
Unified · Split
| @@ -585,7 +585,7 @@ static int decode_frame(AVCodecContext *avctx, AVFrame *frame, · 584 unmodified lines | |||
| 585 | int buf_size = avpkt->size; | 585 | int buf_size = avpkt->size; |
| 586 | UtvideoContext *c = avctx->priv_data; | 586 | UtvideoContext *c = avctx->priv_data; |
| 587 | int i, j; | 587 | int i, j; |
| 588 | const uint8_t *plane_start[5]; | 588 | const uint8_t *plane_start[5] = {NULL}; |
| 589 | int plane_size, max_slice_size = 0, slice_start, slice_end, slice_size; | 589 | int plane_size, max_slice_size = 0, slice_start, slice_end, slice_size; |
| 590 | int ret; | 590 | int ret; |
| 591 | GetByteContext gb; | 591 | GetByteContext gb; |