This is an automated email from the git hooks/post-receive script.

Git pushed a commit to branch release/6.1
in repository ffmpeg.

commit 9ac8662ac0777e44b30859a27e3e6e0c5d6f5dbd
Author:     Michael Niedermayer <[email protected]>
AuthorDate: Sat Jun 20 14:39:18 2026 +0200
Commit:     Michael Niedermayer <[email protected]>
CommitDate: Sat Jun 20 17:42:28 2026 +0200

    avcodec/hevc/hevcdec: initialize qp_y_tab
    
    This does not replicate on my setup, thus this is a blind fix based on 
ossfuzz trace
    
    Fixes: use of uninitialized value
    Fixes: 
71747/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_HEVC_fuzzer-5427736120721408
    
    Found-by: continuous fuzzing process 
https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer <[email protected]>
    (cherry picked from commit 4fc43e45f9e7ee50d8d244bcdea15b37b5614b9b)
    Signed-off-by: Michael Niedermayer <[email protected]>
---
 libavcodec/hevcdec.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavcodec/hevcdec.c b/libavcodec/hevcdec.c
index 855c900487..cf41e2435d 100644
--- a/libavcodec/hevcdec.c
+++ b/libavcodec/hevcdec.c
@@ -123,7 +123,7 @@ static int pic_arrays_init(HEVCContext *s, const HEVCSPS 
*sps)
     s->filter_slice_edges = av_mallocz(ctb_count);
     s->tab_slice_address  = av_malloc_array(pic_size_in_ctb,
                                       sizeof(*s->tab_slice_address));
-    s->qp_y_tab           = av_malloc_array(pic_size_in_ctb,
+    s->qp_y_tab           = av_calloc(pic_size_in_ctb,
                                       sizeof(*s->qp_y_tab));
     if (!s->qp_y_tab || !s->filter_slice_edges || !s->tab_slice_address)
         goto fail;

_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to