shithub: openh264

Info  •  Files  •  Log  •  Branches

fix issue 3193 (fuzz 18644) by adding missing initialization of PPicture's refPic lists

--- a/codec/decoder/core/src/decoder_core.cpp

+++ b/codec/decoder/core/src/decoder_core.cpp

@@ -2614,6 +2614,8 @@

         memset (pCtx->sMb.pSliceIdc[i], 0xff, (pCtx->sMb.iMbWidth * pCtx->sMb.iMbHeight * sizeof (int32_t)));

       memset (pCtx->pCurDqLayer->pMbCorrectlyDecodedFlag, 0, pCtx->pSps->iMbWidth * pCtx->pSps->iMbHeight * sizeof (bool));

       memset (pCtx->pCurDqLayer->pMbRefConcealedFlag, 0, pCtx->pSps->iMbWidth * pCtx->pSps->iMbHeight * sizeof (bool));

+      memset (pCtx->pDec->pRefPic[LIST_0], 0, sizeof (PPicture) * 17);

+      memset (pCtx->pDec->pRefPic[LIST_1], 0, sizeof (PPicture) * 17);

       pCtx->pDec->iMbNum = pCtx->pSps->iMbWidth * pCtx->pSps->iMbHeight;

       pCtx->pDec->iMbEcedNum = 0;

       pCtx->pDec->iMbEcedPropNum = 0;