[FFmpeg-cvslog] avcodec/fits: Clear naxis

Michael Niedermayer git at videolan.org
Mon Aug 4 23:57:56 EEST 2025


ffmpeg | branch: release/7.0 | Michael Niedermayer <michael at niedermayer.cc> | Sun Aug  3 01:47:54 2025 +0200| [2536de50b03c48fafbe0f4b339a283212bd76afd] | committer: Michael Niedermayer

avcodec/fits: Clear naxis

Fixes: Use of uninitialized memory
Fixes: 423673969/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_FITS_DEC_fuzzer-5602250833854464

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>
(cherry picked from commit 1687daa93c131f929495c7ab0509d2e5c98b40f5)
Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=2536de50b03c48fafbe0f4b339a283212bd76afd
---

 libavcodec/fits.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/libavcodec/fits.c b/libavcodec/fits.c
index 5f364960e0..0fc2d895b7 100644
--- a/libavcodec/fits.c
+++ b/libavcodec/fits.c
@@ -32,6 +32,8 @@ int avpriv_fits_header_init(FITSHeader *header, FITSHeaderState state)
 {
     header->state = state;
     header->naxis_index = 0;
+    header->naxis = 0;
+    memset(header->naxisn, 0, sizeof(header->naxisn));
     header->blank_found = 0;
     header->pcount = 0;
     header->gcount = 1;



More information about the ffmpeg-cvslog mailing list