avcodec/cbs_sei: Always zero-initialize SEI payload

Fixes: Use-of-uninitialized value Fixes: clusterfuzz-testcase-minimized-ffmpeg_BSF_H264_METADATA_fuzzer-5458626041413632

Andreas Rheinhardt committed 2 years ago

Commit bfcee361 parent 5dfc0cc1 file · +1 −3Browse files

Showing the changes to libavcodec (1 of 1 file). Show all

Unified · Split

@@ -41,7 +41,6 @@ int ff_cbs_sei_alloc_message_payload(SEIRawMessage *message, · 40 unmodified lines
41	41	const SEIMessageTypeDescriptor *desc)
42	42	{
43	43	void (free_func)(FFRefStructOpaque, void);
44		− unsigned flags = 0;
45	44
46	45	av_assert0(message->payload == NULL &&
47	46	message->payload_ref == NULL);
@@ -53,10 +52,9 @@ int ff_cbs_sei_alloc_message_payload(SEIRawMessage *message, · 5 unmodified lines
53	52	free_func = &cbs_free_user_data_unregistered;
54	53	else {
55	54	free_func = NULL;
56		− flags = FF_REFSTRUCT_FLAG_NO_ZEROING;
57	55	}
58	56
59		− message->payload_ref = ff_refstruct_alloc_ext(desc->size, flags,
	57	+ message->payload_ref = ff_refstruct_alloc_ext(desc->size, 0,
60	58	NULL, free_func);
61	59	if (!message->payload_ref)
62	60	return AVERROR(ENOMEM);

Keyboard shortcuts