From 6631bbc5d47082a6212e3c82fce0215fce2dbac6 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Wed, 6 May 2026 02:33:01 +0200 Subject: [PATCH] avcodec/jpeg2000dec: Clear header derived variables Fixes: NULL pointer dereference Found-by: Oguzhan Akkaya with AFL++ fuzzing (May 2026) Signed-off-by: Michael Niedermayer --- libavcodec/jpeg2000dec.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/libavcodec/jpeg2000dec.c b/libavcodec/jpeg2000dec.c index 01c025235e..ed8ff83fd0 100644 --- a/libavcodec/jpeg2000dec.c +++ b/libavcodec/jpeg2000dec.c @@ -2451,8 +2451,14 @@ static void jpeg2000_dec_cleanup(Jpeg2000DecoderContext *s) memset(s->qntsty, 0, sizeof(s->qntsty)); memset(s->properties, 0, sizeof(s->properties)); memset(&s->poc , 0, sizeof(s->poc)); + memset(s->roi_shift, 0, sizeof(s->roi_shift)); s->numXtiles = s->numYtiles = 0; s->ncomponents = 0; + s->has_ppm = 0; + s->isHT = 0; + s->precision = 0; + s->colour_space = 0; + s->pal8 = 0; } static int jpeg2000_read_main_headers(Jpeg2000DecoderContext *s)