← webkit
commit 8e16cbe44f3a
[WebCodecs][GStreamer] Use plane sourceWidthBytes when filling RGB frames
webkit
uninitialized memory
heuristic
WebCore
commit message
[WebCodecs][GStreamer] Use plane sourceWidthBytes when filling RGB frames https://bugs.webkit.org/show_bug.cgi?id=330625 Reviewed by Xabier Rodriguez-Calvar. Filling buffers without taking in account the RGB plane's sourceWidthBytes could expose uninitialized memory to the GStreamer memory. Thanks to do young park <adawn0106@gmail.com> for the report. * Source/WebCore/platform/graphics/gstreamer/VideoFrameGStreamer.cpp: (WebCore::createRGBFrame): (WebCore::VideoFrame::createRGBA): (WebCore::VideoFrame::createBGRA): (WebCore::VideoFrame::createRGBX): (WebCore::VideoFrame::createBGRX): Canonical link: https://commits.webkit.org/326118@main
files
Source/WebCore/platform/graphics/gstreamer/VideoFrameGStreamer.cpp
this commit matched a vulnerability pattern in its message. WebKit does not publish a security bug for every fix, so treat it as a lead, not as a CVE record.