[FFmpeg-cvslog] [ffmpeg] branch master updated. d6fe3786cd avcodec/jpeg2000dec: Make sure the 4 extra bytes allocated are initialized

[ffmpeg-git at ffmpeg.org]

The branch, master has been updated
       via  d6fe3786cd8c06437756d407f727ff01cf1774ff (commit)
      from  6d9f0b662ff0bc91c30ebad7b821337e93539ed5 (commit)


- Log -----------------------------------------------------------------
commit d6fe3786cd8c06437756d407f727ff01cf1774ff
Author:     Michael Niedermayer <michael at niedermayer.cc>
AuthorDate: Sat Aug 9 11:38:07 2025 +0200
Commit:     michaelni <michael at niedermayer.cc>
CommitDate: Sat Aug 9 14:25:47 2025 +0000

    avcodec/jpeg2000dec: Make sure the 4 extra bytes allocated are initialized
    
    Fixes: use of uninitialized memory
    Fixes: 429130590/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_JPEG2000_DEC_fuzzer-5736930522497024
    
    Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
    Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>

diff --git a/libavcodec/jpeg2000dec.c b/libavcodec/jpeg2000dec.c
index 59f3133d1f..221ba87305 100644
--- a/libavcodec/jpeg2000dec.c
+++ b/libavcodec/jpeg2000dec.c
@@ -1532,6 +1532,7 @@ static int jpeg2000_decode_packet(Jpeg2000DecoderContext *s, Jpeg2000Tile *tile,
 
                 bytestream2_get_bufferu(&s->g, cblk->data + cblk->length, cblk->lengthinc[cwsno]);
                 cblk->length   += cblk->lengthinc[cwsno];
+                memset(cblk->data + cblk->length, 0, 4);
                 cblk->lengthinc[cwsno] = 0;
                 if (cblk->nb_terminationsinc) {
                     cblk->nb_terminationsinc--;

-----------------------------------------------------------------------

Summary of changes:
 libavcodec/jpeg2000dec.c | 1 +
 1 file changed, 1 insertion(+)


hooks/post-receive
--