Commit 5fd7c917f0 for ffmpeg
commit 5fd7c917f0ec844a3f05ca81f7b292cd4861ef05
Author: Michael Niedermayer <michael@niedermayer.cc>
Date: Tue Oct 6 06:51:31 2026 +0200
avformat/iff: Check the DPEL color format read size
The fix uses ffio_read_size() as recommended in the report.
Fixes: use of uninitialized memory
Fixes: fo0u77U9tJ8g
Fixes: AISLE-2026-0111-00464
Use of uninitialized memory Replicated through UnModified FFmpeg with Valgrind
Found-by: Joshua Rogers <joshua.rogers@aisle.com>
diff --git a/libavformat/iff.c b/libavformat/iff.c
index df926cb59a..a8c10f6286 100644
--- a/libavformat/iff.c
+++ b/libavformat/iff.c
@@ -613,7 +613,7 @@ static int iff_read_header(AVFormatContext *s)
return AVERROR_INVALIDDATA;
if (!stv)
return AVERROR_INVALIDDATA;
- if ((fmt_size = avio_read(pb, fmt, sizeof(fmt))) < 0)
+ if ((fmt_size = ffio_read_size(pb, fmt, sizeof(fmt))) < 0)
return fmt_size;
if (fmt_size == sizeof(deep_rgb24) && !memcmp(fmt, deep_rgb24, sizeof(deep_rgb24)))
stv->codecpar->format = AV_PIX_FMT_RGB24;