PR #21679 opened by michaelni URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21679 Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/21679.patch
Fixes: use of uninitialized memory Fixes: 471771529/clusterfuzz-testcase-minimized-ffmpeg_dem_SCD_fuzzer-5328203515494400 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <[email protected]> >From a5007428e853c5a61e4ac3c6e24fa0304c3d0c1e Mon Sep 17 00:00:00 2001 From: Michael Niedermayer <[email protected]> Date: Sun, 8 Feb 2026 00:19:12 +0100 Subject: [PATCH] avformat/scd: Use ffio_read_size() Fixes: use of uninitialized memory Fixes: 471771529/clusterfuzz-testcase-minimized-ffmpeg_dem_SCD_fuzzer-5328203515494400 Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg Signed-off-by: Michael Niedermayer <[email protected]> --- libavformat/scd.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavformat/scd.c b/libavformat/scd.c index 06d3408e15..091d20824c 100644 --- a/libavformat/scd.c +++ b/libavformat/scd.c @@ -122,7 +122,7 @@ static int scd_read_offsets(AVFormatContext *s) SCDDemuxContext *ctx = s->priv_data; uint8_t buf[SCD_OFFSET_HEADER_SIZE]; - if ((ret = avio_read(s->pb, buf, SCD_OFFSET_HEADER_SIZE)) < 0) + if ((ret = ffio_read_size(s->pb, buf, SCD_OFFSET_HEADER_SIZE)) < 0) return ret; ctx->hdr.table0.count = AV_RB16(buf + 0); -- 2.52.0 _______________________________________________ ffmpeg-devel mailing list -- [email protected] To unsubscribe send an email to [email protected]
