From e33b6ccfa782c6e04bcc5ef1b5138ad2a923f620 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Mon, 23 Dec 2013 18:09:58 +0100 Subject: [PATCH] avformat/mpc8: clear buffer padding area Fixes use of uninitialized memory Fixes: msan_uninit-mem_7fa6a48cd1d5_8853_sv8_notags.mpc Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer --- libavformat/mpc8.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/libavformat/mpc8.c b/libavformat/mpc8.c index 0e9baaa426..502eaffe09 100644 --- a/libavformat/mpc8.c +++ b/libavformat/mpc8.c @@ -157,6 +157,8 @@ static void mpc8_parse_seektable(AVFormatContext *s, int64_t off) if(!(buf = av_malloc(size + FF_INPUT_BUFFER_PADDING_SIZE))) return; avio_read(s->pb, buf, size); + memset(buf+size, 0, FF_INPUT_BUFFER_PADDING_SIZE); + init_get_bits(&gb, buf, size * 8); size = gb_get_v(&gb); if(size > UINT_MAX/4 || size > c->samples/1152){