Janne Grunau <[email protected]> writes:

> +void av_fast_padded_malloc(void *ptr, unsigned int *size, size_t min_size)
> +{
> +    uint8_t **p;
> +    if (min_size > SIZE_MAX - FF_INPUT_BUFFER_PADDING_SIZE) {
> +        *p = NULL;

'p' used uninitialised.

> +        *size = 0;
> +        return;
> +    }
> +    av_fast_malloc(ptr, size, min_size + FF_INPUT_BUFFER_PADDING_SIZE);
> +    p = ptr;

Maybe that initialisation should go at the top.

> +    if (*p)
> +        memset(*p + min_size, 0, FF_INPUT_BUFFER_PADDING_SIZE);
> +}

-- 
Måns Rullgård
[email protected]
_______________________________________________
libav-devel mailing list
[email protected]
https://lists.libav.org/mailman/listinfo/libav-devel

Reply via email to