diff mbox series

[FFmpeg-devel,3/3] libavcodec/bmp_parser.c: fix a use_of_uninitialized_value in target_dec_fuzzer.

Message ID 20200604200327.157832-1-tfoucu@gmail.com
State Accepted
Commit a1a85579e304d5aa6e41324e41603e2d20b93df3
Headers show
Series [FFmpeg-devel,1/3] libavcodec/png_parser.c: fix a use_of_uninitialized_value in target_dec_fuzzer. | expand

Checks

Context Check Description
andriy/default pending
andriy/make success Make finished
andriy/make_fate success Make fate finished

Commit Message

Thierry Foucu June 4, 2020, 8:03 p.m. UTC 
the target_dec_fuzzer is checking for the avpkt.data pointer but if the
bmp parser cannot combine the frame, the poutbuf is not set.
---
 libavcodec/bmp_parser.c | 1 +
 1 file changed, 1 insertion(+)

Comments

Michael Niedermayer June 5, 2020, 10:48 p.m. UTC | #1 
On Thu, Jun 04, 2020 at 01:03:27PM -0700, Thierry Foucu wrote:
> the target_dec_fuzzer is checking for the avpkt.data pointer but if the
> bmp parser cannot combine the frame, the poutbuf is not set.
> ---
>  libavcodec/bmp_parser.c | 1 +
>  1 file changed, 1 insertion(+)

will apply

thx

[...]
diff mbox series

Patch

diff --git a/libavcodec/bmp_parser.c b/libavcodec/bmp_parser.c
index cd65f02a2e..700bf27af1 100644
--- a/libavcodec/bmp_parser.c
+++ b/libavcodec/bmp_parser.c
@@ -45,6 +45,7 @@  static int bmp_parse(AVCodecParserContext *s, AVCodecContext *avctx,
     int i = 0;
 
     *poutbuf_size = 0;
+    *poutbuf = NULL;
 
 restart:
     if (bpc->pc.frame_start_found <= 2+4+4) {