This is an automated email from the git hooks/post-receive script. Git pushed a commit to branch master in repository ffmpeg.
commit ad89cd9d072a252d197e9174c7e53e7945d30083 Author: Ayoub Nabil Boubagrat <[email protected]> AuthorDate: Wed Sep 9 21:50:01 2026 +0200 Commit: michaelni <[email protected]> CommitDate: Sun Oct 18 22:45:57 2026 +0000 avcodec/tiff: clear the separated intermediate buffer Strip decoding errors are tolerated unless AV_EF_EXPLODE is set. The separated-to-RGBA conversion still consumes the full intermediate buffer, including lines that the failed strip did not initialize. Allocate the buffer with av_calloc() so undecoded lines cannot expose heap contents in the output frame. Fixes: read of uninitialized memory Fixes: 6nbtoGQYPUjZ Found-by: Ayoub Nabil Boubagrat <[email protected]> Use of uninitialized memory Replicated through UnModified FFmpeg with Valgrind Signed-off-by: Michael Niedermayer <[email protected]> --- libavcodec/tiff.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavcodec/tiff.c b/libavcodec/tiff.c index 41db29d6e2..efe7ae7056 100644 --- a/libavcodec/tiff.c +++ b/libavcodec/tiff.c @@ -2216,7 +2216,7 @@ again: s->avctx->pix_fmt == AV_PIX_FMT_RGBA) { stride = stride * 5 / 4; five_planes = - dst = av_malloc(stride * s->height); + dst = av_calloc(s->height, stride); if (!dst) return AVERROR(ENOMEM); } -- To stop receiving notification emails like this one, please contact [email protected]. _______________________________________________ ffmpeg-cvslog mailing list -- [email protected] To unsubscribe send an email to [email protected]
