avfilter/zmq: initialize send_buf before shared cleanup on parse failure
authorhaoyuLiu <haoyuliu@clouditera.com>
Sat, 6 Jun 2026 16:04:25 +0000 (18:04 +0200)
committerMichael Niedermayer <michael@niedermayer.cc>
Sun, 14 Jun 2026 02:41:05 +0000 (04:41 +0200)
Found-by: VulnForge Security Research Team
Reported-by: Cloud-LHY <haoyuliu@clouditera.com>
(cherry picked from commit 6028720d70d0f50512c66df43f7c9e05d6797463)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavfilter/f_zmq.c

index 253e1d9cc03c2abae389f3d46527a149e729346d..647ee3796394674395eebb4c955cc2e84ca8590f 100644 (file)
@@ -156,7 +156,7 @@ static int filter_frame(AVFilterLink *inlink, AVFrame *ref)
 
     while (1) {
         char cmd_buf[1024];
-        char *recv_buf, *send_buf;
+        char *recv_buf = NULL, *send_buf = NULL;
         int recv_buf_size;
         Command cmd = {0};
         int ret;