browsers.fail
← webkit

commit 8e16cbe44f3a

[WebCodecs][GStreamer] Use plane sourceWidthBytes when filling RGB frames

webkit uninitialized memory heuristic WebCore

commit message

[WebCodecs][GStreamer] Use plane sourceWidthBytes when filling RGB frames
https://bugs.webkit.org/show_bug.cgi?id=330625

Reviewed by Xabier Rodriguez-Calvar.

Filling buffers without taking in account the RGB plane's sourceWidthBytes could expose
uninitialized memory to the GStreamer memory.

Thanks to do young park <adawn0106@gmail.com> for the report.

* Source/WebCore/platform/graphics/gstreamer/VideoFrameGStreamer.cpp:
(WebCore::createRGBFrame):
(WebCore::VideoFrame::createRGBA):
(WebCore::VideoFrame::createBGRA):
(WebCore::VideoFrame::createRGBX):
(WebCore::VideoFrame::createBGRX):

Canonical link: https://commits.webkit.org/326118@main

files

  • Source/WebCore/platform/graphics/gstreamer/VideoFrameGStreamer.cpp

this commit matched a vulnerability pattern in its message. WebKit does not publish a security bug for every fix, so treat it as a lead, not as a CVE record.