avcodec/hevc: use av_mallocz() for allocating tab_ipm
authorMichael Niedermayer <michaelni@gmx.at>
Sat, 11 Jan 2014 19:23:51 +0000 (20:23 +0100)
committerMichael Niedermayer <michaelni@gmx.at>
Sat, 11 Jan 2014 19:30:22 +0000 (20:30 +0100)
Fixes use of uninitialized memory and out of stack array read
Fixes: signal_sigsegv_ecc526_7846_WPP_C_ericsson_MAIN_2.bit
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
libavcodec/hevc.c

index 43d10f0..9c33da0 100644 (file)
@@ -107,7 +107,7 @@ static int pic_arrays_init(HEVCContext *s, const HEVCSPS *sps)
         goto fail;
 
     s->cbf_luma = av_malloc(sps->min_tb_width * sps->min_tb_height);
-    s->tab_ipm  = av_malloc(min_pu_size);
+    s->tab_ipm  = av_mallocz(min_pu_size);
     s->is_pcm   = av_malloc(min_pu_size);
     if (!s->tab_ipm || !s->cbf_luma || !s->is_pcm)
         goto fail;