PR #25593 opened by ffmpeg-devel URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25593 Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25593.patch
**Backport:** https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/25056 Use ffio_read_size in flv_parse_mod_ex_data to ensure that an error is returned if the complete ex_size chunk wasn't read, instead of reading uninitialized data. This fixes a MemorySanitizer use-of-uninitialized-value issue where a short read would leave the buffer partially uninitialized before parsing nano_offset. >From ed7f708ef7da57d3b62657787f132e9967e3c1a3 Mon Sep 17 00:00:00 2001 From: Marvin Scholz <[email protected]> Date: Tue, 13 Oct 2026 23:22:45 +0000 Subject: [PATCH] libavformat/flvdec: validate avio_read size on extended data Use ffio_read_size in flv_parse_mod_ex_data to ensure that an error is returned if the complete ex_size chunk wasn't read, instead of reading uninitialized data. This fixes a MemorySanitizer use-of-uninitialized-value issue where a short read would leave the buffer partially uninitialized before parsing nano_offset. Signed-off-by: Marvin Scholz <[email protected]> (cherry picked from commit 5385979defeac64931213559de8a04ff0a750b2c) --- libavformat/flvdec.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/libavformat/flvdec.c b/libavformat/flvdec.c index 45fd1b2fb3f..95d31ec4263 100644 --- a/libavformat/flvdec.c +++ b/libavformat/flvdec.c @@ -35,6 +35,7 @@ #include "libavutil/intreadwrite.h" #include "libavutil/mastering_display_metadata.h" #include "avformat.h" +#include "avio_internal.h" #include "demux.h" #include "internal.h" #include "flv.h" @@ -1336,7 +1337,7 @@ static int flv_parse_mod_ex_data(AVFormatContext *s, int *pkt_type, int *size, i if (!ex_data) return AVERROR(ENOMEM); - ret = avio_read(s->pb, ex_data, ex_size); + ret = ffio_read_size(s->pb, ex_data, ex_size); if (ret < 0) { av_free(ex_data); return ret; -- 2.54.0 _______________________________________________ ffmpeg-devel mailing list -- [email protected] To unsubscribe send an email to [email protected]
