From 243b9fea90aade8cf8197fb8f362ccc03c7f6295 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Tue, 7 Jan 2014 19:47:37 +0100 Subject: [PATCH] avformat/takdec: zero padding area before use Fixes use of uninitialized memory Fixes: msan_uninit-mem_7fcecee73d71_6470_luckynight-partial.tak Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer --- libavformat/takdec.c | 1 + 1 file changed, 1 insertion(+) diff --git a/libavformat/takdec.c b/libavformat/takdec.c index 2ed8a1e3b7..4888a77630 100644 --- a/libavformat/takdec.c +++ b/libavformat/takdec.c @@ -85,6 +85,7 @@ static int tak_read_header(AVFormatContext *s) buffer = av_malloc(size - 3 + FF_INPUT_BUFFER_PADDING_SIZE); if (!buffer) return AVERROR(ENOMEM); + memset(buffer + size - 3, 0, FF_INPUT_BUFFER_PADDING_SIZE); ffio_init_checksum(pb, tak_check_crc, 0xCE04B7U); if (avio_read(pb, buffer, size - 3) != size - 3) {