Commit 695b89c675 for ffmpeg
commit 695b89c675ada6b40d0e35aeef5233c930b95dce
Author: Michael Niedermayer <michael@niedermayer.cc>
Date: Wed Nov 11 18:52:51 2026 +0100
avcodec/iff: clear the HAM palette table
Fixes: use of uninitialized memory
Fixes: zPQwovKkiM2r
Fixes: pbm-ham4-pixel-ff.iff
Use of uninitialized memory Replicated through UnModified FFmpeg with MSAN
Found during triage of the security report dLFZWeypJpSK
diff --git a/libavcodec/iff.c b/libavcodec/iff.c
index 169cda28e0..329a2d9ce3 100644
--- a/libavcodec/iff.c
+++ b/libavcodec/iff.c
@@ -284,7 +284,7 @@ static int extract_header(AVCodecContext *const avctx,
return AVERROR(ENOMEM);
ham_count = 8 * (1 << s->ham);
- s->ham_palbuf = av_malloc(extra_space * (ham_count << !!(s->masking == MASK_HAS_MASK)) * sizeof (uint32_t) + AV_INPUT_BUFFER_PADDING_SIZE);
+ s->ham_palbuf = av_mallocz(extra_space * (ham_count << !!(s->masking == MASK_HAS_MASK)) * sizeof (uint32_t) + AV_INPUT_BUFFER_PADDING_SIZE);
if (!s->ham_palbuf)
return AVERROR(ENOMEM);