https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14857

diff --git a/coders/tiff.c b/coders/tiff.c
index d9d523564fd538fec0939ad96f73f49c11edbe23..391b2de1408ef501d745553543529071b20ef905 100644 (file)
--- a/coders/tiff.c
+++ b/coders/tiff.c
@@ -2122,6 +2122,7 @@ RestoreMSCWarning
           sizeof(uint32),sizeof(*tile_pixels));
         if (tile_pixels == (unsigned char *) NULL)
           ThrowTIFFException(ResourceLimitError,"MemoryAllocationFailed");
+        (void) memset(tile_pixels,0,TIFFTileSize(tiff)*sizeof(*tile_pixels));
         for (y=0; y < (ssize_t) image->rows; y+=rows)
         {
           register ssize_t
@@ -2478,8 +2479,10 @@ static void TIFFIgnoreTags(TIFF *tiff)
   ignore=(TIFFFieldInfo *) AcquireQuantumMemory(count,sizeof(*ignore));
   if (ignore == (TIFFFieldInfo *) NULL)
     return;
-  /* This also sets field_bit to 0 (FIELD_IGNORE) */
-  memset(ignore,0,count*sizeof(*ignore));
+  /*
+    This also sets field_bit to 0 (FIELD_IGNORE).
+  */
+  (void) memset(ignore,0,count*sizeof(*ignore));
   while (*p != '\0')
   {
     while ((isspace((int) ((unsigned char) *p)) != 0))