[FFmpeg-cvslog] 4xmdemux: prevent use of uninitialized memory

Laurent Aimar git at videolan.org
Mon Mar 19 05:30:39 CET 2012


ffmpeg | branch: release/0.8 | Laurent Aimar <fenrir at videolan.org> | Sun Oct  2 00:48:11 2011 +0000| [5ab326d7db3fd3feba570188b49dd4cd69105e9c] | committer: Reinhard Tartler

4xmdemux: prevent use of uninitialized memory

Signed-off-by: Janne Grunau <janne-libav at jannau.net>
(cherry picked from commit 79964745b3ed5a700f4f0dda56c7360497328c88)

Signed-off-by: Anton Khirnov <anton at khirnov.net>

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=5ab326d7db3fd3feba570188b49dd4cd69105e9c
---

 libavformat/4xm.c |    8 +++++---
 1 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/libavformat/4xm.c b/libavformat/4xm.c
index 93c90e8..5477ed0 100644
--- a/libavformat/4xm.c
+++ b/libavformat/4xm.c
@@ -172,13 +172,15 @@ static int fourxm_read_header(AVFormatContext *s,
                 goto fail;
             }
             if (current_track + 1 > fourxm->track_count) {
-                fourxm->track_count = current_track + 1;
                 fourxm->tracks = av_realloc(fourxm->tracks,
-                    fourxm->track_count * sizeof(AudioTrack));
+                    (current_track + 1) * sizeof(AudioTrack));
                 if (!fourxm->tracks) {
-                    ret=  AVERROR(ENOMEM);
+                    ret = AVERROR(ENOMEM);
                     goto fail;
                 }
+                memset(&fourxm->tracks[fourxm->track_count], 0,
+                       sizeof(AudioTrack) * (current_track + 1 - fourxm->track_count));
+                fourxm->track_count = current_track + 1;
             }
             fourxm->tracks[current_track].adpcm       = AV_RL32(&header[i + 12]);
             fourxm->tracks[current_track].channels    = AV_RL32(&header[i + 36]);



More information about the ffmpeg-cvslog mailing list